Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File:                     b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier:          XWq2oYtZhL72nn7VqJ380FV6y+wnP79smpspY7NHOrQ=
Subject key identifier:   39:D4:E8:2C:D7:EC:34:7D:94:6C:EE:71:6E:21:57:18:AA:87:E3:1E
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer:       /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial:       019358779127C54A6795656C04791D7A9443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number:          10BD
Signing time:             Sat 23 Nov 2024 10:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:51 +0000
Files and hashes:         1: KdT94Mxx6OgPbUdXnO586zv_Q9Y.roa (hash: MDtB0wBu1iUcdqO1yVAIjYe1TbJ+APqkT9wrtCcX/CM=)
                          2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: CU1JPmArId3i7DR2YDOf+EIlhd48G2+W0CinnAW+qdk=)
                          3: y0Xv1ZX6EKYHHOHc9A83tVqa8WA.roa (hash: RBCnpAuixht2hHxQj4g4Z1H4aBRTK4I93Js2PqWMqzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:91:27:c5:4a:67:95:65:6c:04:79:1d:7a:94:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
        Validity
            Not Before: Nov 23 10:00:51 2024 GMT
            Not After : Nov 24 10:00:51 2024 GMT
        Subject: CN=39d4e82cd7ec347d946cee716e215718aa87e31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:5e:24:2e:2d:ae:4a:9e:35:5a:99:7f:cf:
                    84:21:9f:3f:6b:27:76:42:cd:8f:0d:c3:b5:f3:07:
                    06:7c:9f:17:c0:63:d3:2d:41:46:4a:2b:73:96:d1:
                    37:d3:b4:c0:a9:63:84:54:d0:49:43:7f:b6:75:55:
                    71:9a:fd:c8:59:e3:6d:3a:1e:3f:8c:b6:dc:ed:25:
                    69:f5:6e:90:94:60:4d:73:78:aa:94:79:22:f7:43:
                    02:44:8c:9d:10:2d:f5:cf:6e:e0:f5:5d:8f:06:bb:
                    c4:d0:42:b1:2b:c1:d5:b3:63:f1:66:c3:3e:d7:96:
                    4e:4b:b4:cd:9a:dc:57:f3:34:6d:82:c9:ba:7c:f9:
                    c2:7e:57:63:a6:26:db:42:de:1d:bb:2b:34:ec:78:
                    d2:9d:68:14:7a:4a:a5:f2:da:5c:21:31:ac:62:88:
                    7e:45:c9:50:d1:57:b0:52:73:86:2a:1e:6c:df:1a:
                    ad:bb:d5:9e:88:61:17:b4:c3:48:bd:3d:6c:47:2d:
                    0d:47:a9:0c:e1:ea:38:be:4e:2a:85:e9:33:26:30:
                    19:a6:a7:58:da:14:b5:02:4d:ef:82:58:65:4c:83:
                    c7:c8:56:94:dc:d7:74:f5:52:4d:39:c7:be:17:81:
                    7a:32:05:af:a9:61:e2:cb:df:3f:84:53:f9:d4:65:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D4:E8:2C:D7:EC:34:7D:94:6C:EE:71:6E:21:57:18:AA:87:E3:1E
            X509v3 Authority Key Identifier:
                keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:4e:c5:38:69:92:92:f2:83:2d:a0:4a:92:08:6b:11:78:29:
         ea:3c:70:f3:6a:92:3a:e4:c4:d5:0f:73:44:30:3d:ad:f1:a5:
         8a:83:24:81:47:e0:d1:84:90:16:cb:19:01:55:89:ef:29:7a:
         73:b0:64:b6:de:3e:4e:4d:da:7d:42:ea:61:eb:a0:9d:c0:07:
         7e:82:80:1a:80:bf:71:c9:59:5d:65:31:3f:37:18:62:3f:f4:
         7d:ce:ea:c3:d1:1e:78:92:8b:6c:e2:37:d0:a2:af:8c:af:17:
         36:4d:5b:9b:1b:1e:79:b8:a5:5c:94:fa:f4:76:3e:52:8e:a7:
         a7:f5:c9:fe:fd:5e:28:cb:53:21:1f:7f:df:93:4c:50:94:b1:
         23:ea:24:e6:68:e7:f1:4c:d0:34:e8:ab:06:11:b0:5d:21:71:
         72:d0:79:2c:77:ab:ee:94:16:31:b6:16:48:55:63:a8:15:75:
         fd:e9:85:6b:1e:53:5d:8c:c7:6d:4f:66:00:c8:69:66:fa:2f:
         ce:1f:48:ff:7f:df:32:cf:47:f4:c3:7e:5b:b3:32:c8:d2:50:
         97:cb:3f:57:b2:8e:4d:8f:9c:0f:5a:8d:31:4b:ba:89:89:e7:
         4f:bc:0c:a4:8e:a8:cb:a4:18:f2:a7:e4:3b:dd:9c:00:83:21:
         f3:91:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:26 2024 by rpki-client on console-fra.rpki-client.org