Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          VZge7aXaOKu7HdRNWuCLwMNXzWxkQj24gIVOJ3ttU9k=
Subject key identifier:   66:8F:7B:22:5B:8A:4B:82:B0:5C:9B:9B:25:16:88:95:0A:E0:86:1B
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       019351625691510184487B13AD0BBBFA708C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          024E
Signing time:             Fri 22 Nov 2024 01:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:19 +0000
Files and hashes:         1: 7mxv4ndcgPA5KCQlRSMYSGl-rgs.roa (hash: Q5LGOnd8oq6RKWGwoRxkQDDXGAn5B+HigBFyrPRqNBM=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: 886vG5+CnUCWFY6hExF+txbMCispOrXnqmjM2pY1Jd4=)
                          3: TTTBQfMEfrEovOW4COP_cKkR-Ys.roa (hash: VBunDqbEBP8xdFPL2OwH7Xxvylbtk2ypsj+ZBvnTO98=)
                          4: mP8pgTJOYsZxnkVCtuHY5SMGqmU.roa (hash: nxW6bvVTXJNltqo0Sh7SxTDnWyDtWxCv5d6ChiQHCdw=)
                          5: nMDPz3zsXkJci6RvRZvRFCR6Wu8.roa (hash: 1nd0fsVK7cl6tNaxbLKtIqUxnFseeNDFFuv1uJpOAIQ=)
                          6: qxLT8PaGvB_gT4QbPbQHOKMVUMo.roa (hash: H4vhkp9fMo7tnStXJfI2q/32WlKRVMW/Q0boQTFa9wo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:56:91:51:01:84:48:7b:13:ad:0b:bb:fa:70:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Nov 22 01:00:19 2024 GMT
            Not After : Nov 23 01:00:19 2024 GMT
        Subject: CN=668f7b225b8a4b82b05c9b9b251688950ae0861b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:81:76:d9:74:5c:02:3a:5e:8c:b7:e3:f8:
                    17:66:c3:d6:90:6e:3a:27:00:f2:2c:65:79:67:cd:
                    2d:c5:64:f6:d4:00:6f:fb:32:33:f5:a7:39:c0:bc:
                    80:c8:9e:54:b5:da:c9:51:3b:09:f9:e7:50:d6:ec:
                    52:b2:d5:58:74:a1:5a:9e:59:93:de:cc:90:99:75:
                    5d:06:13:7e:a9:b5:95:73:04:22:58:6b:9b:9d:02:
                    e6:fe:c4:29:c9:6f:48:f0:52:3f:92:c6:4a:22:35:
                    6c:cb:0f:08:9e:ac:6c:3f:3c:76:58:09:78:ec:c1:
                    d5:11:dc:37:a2:4d:9a:e9:46:45:17:78:38:14:36:
                    fa:f4:18:79:60:e3:39:14:b0:ea:8e:35:91:71:66:
                    ec:dc:9e:34:dc:d5:7a:3f:e8:84:aa:29:95:a3:e8:
                    ed:d8:e4:6e:72:34:06:8c:89:84:c3:41:e2:a0:55:
                    de:a1:c4:34:5b:d5:f6:f7:0a:0a:80:d7:e5:2a:4e:
                    67:3e:6b:b5:d5:f3:05:0d:2e:ef:74:48:47:49:d2:
                    5a:4e:30:4b:9d:88:d5:e6:51:d8:1e:18:e1:47:0b:
                    9c:bc:e3:e5:84:b4:db:92:9b:10:21:8d:f4:64:8b:
                    73:7f:20:0a:ff:e5:86:23:65:af:4f:c7:48:0a:e9:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8F:7B:22:5B:8A:4B:82:B0:5C:9B:9B:25:16:88:95:0A:E0:86:1B
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:81:19:bc:3e:b2:04:18:8e:8d:c0:7e:c6:4e:06:1d:59:
         3f:12:19:b5:db:3d:9a:8f:aa:79:0f:70:55:fd:96:3d:18:cc:
         64:e5:85:20:2a:c8:94:00:8b:55:08:b3:ec:1c:ab:19:1e:92:
         e8:3a:91:f7:b4:8e:df:8c:bb:2f:4c:7f:d4:96:4d:4d:80:7a:
         ae:5f:a8:02:00:dd:f8:cd:d3:52:d2:e6:1c:70:fa:9b:70:2b:
         19:b1:b8:d3:3b:3f:07:03:3d:d3:d4:91:0d:a1:4b:08:f8:c8:
         94:bc:be:a9:5e:56:21:2d:83:87:a5:57:cb:d2:b4:c1:82:fa:
         4e:b3:1e:f7:96:2d:67:e6:e6:f0:b1:76:ad:a7:d9:9f:d8:5a:
         ff:5a:f8:81:bb:f8:2a:08:35:e3:34:f2:39:8a:c9:66:d0:d7:
         ee:b9:73:95:3d:e1:83:82:c8:29:83:5a:da:f3:2d:c5:54:b7:
         22:9b:21:2c:bf:b9:2d:4b:c1:c4:7c:20:70:a4:ed:59:ed:00:
         37:f7:c6:a3:22:c9:b8:32:ca:f4:79:d3:fe:c3:c5:4a:ad:55:
         0f:c3:e4:7e:bc:5f:aa:12:ae:a3:05:07:26:37:8d:3d:8e:5f:
         00:4a:98:ff:46:e7:3d:2e:4a:7a:19:95:33:24:c0:fe:58:43:
         ff:22:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:26 2024 by rpki-client on console-fra.rpki-client.org