Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
File:                     BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft (raw, json)
Hash identifier:          5iLCi1IEewhY66kqDZDDOB/lS0q66sVZvM7oGQVM0Nk=
Subject key identifier:   93:CD:D3:17:79:9C:08:1B:2A:A1:CD:AB:C7:50:27:86:F6:08:63:ED
Authority key identifier: 04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
Certificate issuer:       /CN=040c6423e980b289765aad924235f46d2e20c01c
Certificate serial:       0193587803970D8BF30D631F175610A4E72E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
Manifest number:          03FC
Signing time:             Sat 23 Nov 2024 10:01:20 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:20 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:20 +0000
Files and hashes:         1: BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl (hash: 3RmXvXQ7AGiVhf7cMoNiqZiUJi8/v0SVqE8yaiI6fV0=)
                          2: ClntGGdH9e90WUe_f-sXHU1WpfI.roa (hash: /Xfa8fZph6rDALLRbHuQiV9pM6Mk6nhtGXLYE4Z8LBU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:03:97:0d:8b:f3:0d:63:1f:17:56:10:a4:e7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040c6423e980b289765aad924235f46d2e20c01c
        Validity
            Not Before: Nov 23 10:01:20 2024 GMT
            Not After : Nov 24 10:01:20 2024 GMT
        Subject: CN=93cdd317799c081b2aa1cdabc7502786f60863ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:f2:1d:20:66:5e:99:29:3c:51:cb:9d:f2:
                    cb:2e:c7:3d:f7:9d:6c:f2:3f:11:8b:08:b5:ee:b8:
                    9e:42:2d:36:cb:a9:53:22:c4:4a:db:8c:59:d9:f3:
                    60:cf:44:89:59:aa:9d:55:33:7a:2c:b1:c4:21:97:
                    4d:36:a5:97:78:d4:84:ae:34:80:fa:c5:1c:b9:6c:
                    76:17:91:d6:06:54:40:99:51:65:d7:ef:c8:62:5c:
                    fa:81:78:4c:ce:98:e2:50:ff:af:fa:2f:7d:7e:7a:
                    7d:99:c6:5d:f0:b9:ba:e2:62:cc:b9:71:d3:18:25:
                    ce:cf:a4:3b:17:f3:d8:e1:cf:5e:b9:61:84:bb:44:
                    e6:03:b8:d9:5e:b9:3e:51:c9:93:4b:f3:9c:12:f5:
                    10:8d:d2:f6:d4:f5:79:66:dd:49:e8:11:15:c9:00:
                    ac:65:af:e0:11:00:c5:68:7d:71:7c:e9:7a:d3:d6:
                    7b:fc:80:08:d9:92:44:0f:dc:ff:10:4d:d4:d5:53:
                    c6:d2:e8:75:7e:5a:ca:2d:5f:85:89:cc:e9:a1:28:
                    43:8e:25:80:16:5e:52:37:c8:cd:a7:df:b9:f3:56:
                    79:f1:eb:a3:35:a2:bc:aa:0f:2f:9b:b6:3d:8a:5e:
                    23:65:07:95:96:26:62:5b:dc:b6:df:f7:9f:a3:0d:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:D3:17:79:9C:08:1B:2A:A1:CD:AB:C7:50:27:86:F6:08:63:ED
            X509v3 Authority Key Identifier:
                keyid:04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e7:26:50:4d:c4:b4:ff:a0:b8:e6:9a:05:a6:3d:67:69:b9:
         86:e2:a1:a1:9b:59:03:e8:fe:98:ab:f4:57:aa:56:7f:03:fb:
         b3:e0:40:fd:5e:22:fc:5f:bc:d9:79:ee:38:d6:da:bf:e6:58:
         9e:ba:7a:d2:6b:90:2e:df:ed:9c:56:f2:1b:29:9d:a4:4b:b6:
         de:84:50:c2:70:c2:c2:42:c3:ad:5a:e7:6e:fc:40:e2:0a:1e:
         81:30:f8:46:aa:f5:79:49:98:58:11:0c:79:4b:b5:13:a9:73:
         6b:3d:85:91:ed:b1:33:34:7f:88:62:47:d7:9c:96:2a:20:55:
         14:da:ec:51:7a:87:06:c1:d5:e2:85:ca:32:97:ae:8e:54:1d:
         9f:5e:ff:80:cb:3c:a6:74:af:61:09:8d:51:ae:31:10:b7:f9:
         95:42:18:1e:b4:b8:41:9d:c5:76:e9:fb:4a:a0:ca:07:61:7c:
         b1:6f:dd:b5:5d:42:01:ea:3c:66:c2:43:81:b9:6a:18:a5:cd:
         d1:89:51:8d:db:6a:36:e1:d9:f9:ec:ac:6e:58:89:bf:b2:a3:
         c4:21:82:e4:27:be:18:84:56:ff:c1:d9:40:bb:c8:29:e8:fa:
         9c:a8:a5:bd:c9:a6:a0:a4:00:ce:fb:15:5f:4b:2c:61:62:b2:
         10:95:d9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:17 2024 by rpki-client on console-fra.rpki-client.org