Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File:                     r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier:          8hB5pq59C9XwEqCWjPQjVkdHzz52D+7FUhcBNFo5ZJ8=
Subject key identifier:   13:C3:AF:B8:ED:D3:6F:4A:C7:79:C5:08:8E:D1:C9:35:AA:0E:54:EA
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer:       /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial:       019350F455118A33A4F7F424C37B5485B7D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number:          13C3
Signing time:             Thu 21 Nov 2024 23:00:09 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:09 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:09 +0000
Files and hashes:         1: 6LENCRUTBr2mHiY6afhjp5aIhTU.roa (hash: QybG+Egajez7cououQaTYEb5Az4WE/CgkluBa8LhkGc=)
                          2: K13HtBfUpPWfJ8ULBPOQgSVnEVg.roa (hash: 3vyMT9LOoq9OXvYXNgG49yF4MlXVDuTVFg3/b8DPPI8=)
                          3: NqtnMb1EIgJOvfld5y-plck5fWE.roa (hash: H4UkYBKthGQ1SjXEQ5gXebzlmpP14O4ZCeo1suf79i8=)
                          4: Qa2ODbqNjRjWNztj7G3mi52X_dM.roa (hash: +P7iOWtK0kbRGxNqlEFEg8a2nEqwBMN+uMN0xOda7+o=)
                          5: aL93abmJW1_vuU2bV1H7fpbGAUc.roa (hash: 1okHd0ERd0qgacfR9++WEWK0Fo/WxnvwQvcVf8czExo=)
                          6: p2yd7HNa_2u5FC_KlUlqY56HCPs.roa (hash: K3DV3sbkfUMMuZK4zVe0/CYbRxPCq5VTXfB/v1NUxXI=)
                          7: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: 8z9T1+6kbVK4n+KcXo3tRTnQD3Zc8a0UGt4tQK/+a2k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:55:11:8a:33:a4:f7:f4:24:c3:7b:54:85:b7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
        Validity
            Not Before: Nov 21 23:00:09 2024 GMT
            Not After : Nov 22 23:00:09 2024 GMT
        Subject: CN=13c3afb8edd36f4ac779c5088ed1c935aa0e54ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:e5:4a:16:42:87:7e:0b:dc:b1:e2:88:b1:
                    6f:53:92:2e:ae:26:a8:da:70:d3:e8:0d:6d:dc:85:
                    a8:c7:2c:0a:e0:27:af:00:77:f8:e7:ad:4f:f4:40:
                    31:ac:58:0a:94:fd:19:ff:1c:d1:c7:64:2e:d5:b1:
                    54:d0:13:75:67:c5:bc:5b:55:28:ef:49:bb:5b:63:
                    11:58:8a:09:ab:93:67:09:4c:dd:ad:92:9d:4c:f9:
                    1d:54:e8:87:a3:5d:f3:da:06:20:e9:13:c6:89:ba:
                    b3:1c:a0:15:bc:95:0a:e1:88:49:1e:6d:d1:f6:11:
                    4a:4a:61:1b:9a:f1:0d:86:11:a5:43:3e:78:c1:dc:
                    81:6d:09:04:9f:63:d4:30:68:73:42:86:2c:cd:3b:
                    38:2d:32:64:18:4c:bb:88:4a:ab:4c:8b:26:71:0f:
                    c8:e4:0a:78:63:4c:b4:49:f9:19:20:3f:6c:65:c0:
                    08:b8:48:bd:cf:0f:dc:8c:81:45:b0:6a:0f:03:f0:
                    05:c7:df:7e:7e:0a:e0:b3:88:d5:7a:c2:9d:64:ba:
                    79:3f:1f:d2:c8:94:25:c4:2c:90:91:73:26:34:38:
                    3c:8a:c8:58:07:ea:8d:02:d8:bc:f2:9f:db:2d:f7:
                    4a:7f:1c:21:b8:64:9e:dc:61:86:6a:f6:96:fe:01:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C3:AF:B8:ED:D3:6F:4A:C7:79:C5:08:8E:D1:C9:35:AA:0E:54:EA
            X509v3 Authority Key Identifier:
                keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:60:14:16:eb:28:b6:64:57:3e:1e:22:bf:1b:e3:4e:7f:
         80:02:ad:6c:de:fb:08:4d:2d:ce:5f:b4:d7:11:19:4c:28:11:
         ad:8e:c6:6c:62:b8:07:8a:14:f4:00:c7:94:50:1b:f9:e0:29:
         61:0e:10:4e:0b:a8:86:7f:11:6c:56:54:dc:1f:25:dd:f7:c5:
         77:ea:b0:e7:11:57:a0:da:1a:1c:f0:8e:2a:bf:33:62:0a:18:
         f6:f5:ef:b6:a0:81:59:ad:11:5f:69:a2:77:35:e6:7d:53:8e:
         2e:82:f5:1f:2d:84:40:15:1b:11:c6:19:69:71:2e:1b:ca:36:
         09:6f:b4:53:f6:1a:f7:aa:af:66:dd:34:17:6d:69:c4:f9:14:
         60:94:5c:37:2b:c8:3f:5c:70:a4:bd:54:ce:fe:25:e4:37:de:
         74:bb:1d:31:79:cc:3c:8b:eb:78:8b:45:be:64:72:23:a6:03:
         3b:6b:71:65:fa:68:5b:51:f6:09:68:21:10:89:73:be:a5:a2:
         1e:23:3e:74:41:6c:e3:a0:3f:9c:dd:a6:08:e4:2a:7c:43:b0:
         c5:20:cc:29:d0:f2:9a:f2:b2:6e:24:b9:c4:1e:c1:a0:dd:42:
         e4:5b:69:3a:a3:08:40:62:ab:89:ca:34:19:a1:70:c3:58:ff:
         1a:20:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:33:13 2024 by rpki-client on console-ams.rpki-client.org