Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File:                     b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier:          lf893KD69cnSyq/lo4G9uoTOXGYbyzMbQJjLQfHTIWE=
Subject key identifier:   FC:C3:40:4C:14:EF:51:CF:A9:CC:6B:06:31:52:82:F8:C1:39:D8:93
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer:       /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial:       019351D0C08B9F58D03E93E3375713508E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number:          06D6
Signing time:             Fri 22 Nov 2024 03:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:55 +0000
Files and hashes:         1: Bkd4xvh2cEDvQLPYdDH7UvR4zzY.roa (hash: /JvrMzqU9yJuUb/i0vILgFNpIuS4yx2N3kiE3mPse4o=)
                          2: VIVfZbRMgzxdXvp0h5wSSJCG8Ps.roa (hash: zSBhKFCm0mZiqOC/rPqEXKWO5oyj8x5DnJQjAvWno0s=)
                          3: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: Y2goNHKW43YSstTqwGW4D4wThXDm1kHocCSE6WvcXrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:c0:8b:9f:58:d0:3e:93:e3:37:57:13:50:8e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
        Validity
            Not Before: Nov 22 03:00:55 2024 GMT
            Not After : Nov 23 03:00:55 2024 GMT
        Subject: CN=fcc3404c14ef51cfa9cc6b06315282f8c139d893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:be:6a:8a:03:11:39:19:cf:25:d9:e2:c3:
                    70:e9:00:24:fc:17:c2:53:80:3e:ad:4c:9d:c2:b4:
                    18:3c:8b:dd:9c:b5:48:76:b4:23:bf:d5:7f:2d:7d:
                    cf:99:ee:2b:ea:37:8c:fb:7a:23:6d:e4:e7:ba:74:
                    5d:c5:6c:c9:fb:48:8b:b6:99:fd:7c:ff:2c:50:54:
                    ca:a6:ae:03:f3:81:54:14:2a:08:c0:1b:ec:95:4e:
                    98:db:2a:65:69:9b:9b:d3:ce:d1:20:f8:28:02:28:
                    8e:a2:0a:47:da:7a:f8:3d:75:e9:2a:b1:46:97:4d:
                    73:a4:e9:12:2e:aa:ed:cc:82:2a:f4:08:8c:0e:b7:
                    a7:af:10:0b:70:ff:df:ca:42:60:7b:8b:2a:48:19:
                    42:36:1d:82:b8:a9:ce:bc:a7:18:ba:a0:f0:45:60:
                    d0:cb:95:b7:4d:5e:9a:06:59:32:30:82:0c:61:e8:
                    11:ca:7b:e3:9d:72:36:89:7e:69:5d:c3:81:03:a9:
                    3a:19:b8:ae:90:66:91:41:fa:7a:6d:93:a6:26:8e:
                    26:91:50:1e:8d:7a:74:04:2d:93:be:22:26:97:0b:
                    cf:ea:5f:7a:f8:3a:79:f8:f8:e9:ab:18:f2:e7:64:
                    b8:60:3c:f3:c9:4a:b3:11:bc:f8:d6:61:e1:66:c8:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:40:4C:14:EF:51:CF:A9:CC:6B:06:31:52:82:F8:C1:39:D8:93
            X509v3 Authority Key Identifier:
                keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9a:82:6b:89:74:31:44:56:ce:3e:18:61:35:ee:99:bb:58:
         52:60:cc:5c:74:ec:2c:19:d1:c1:6d:c1:08:a7:f7:fb:74:70:
         ce:bb:c3:1c:9f:5e:7c:c8:a7:aa:6a:59:fa:a5:d3:d3:1a:91:
         43:56:9d:b5:b1:bc:13:e2:57:2d:14:11:30:7d:b9:77:c1:3f:
         fa:ec:a8:32:5e:ed:8d:e3:aa:c0:fe:6b:cb:56:00:dc:64:19:
         a5:7a:c5:5b:1f:6e:ac:b4:fb:3c:c7:c8:16:82:5f:20:74:ac:
         1a:09:84:0a:77:ff:8b:b0:21:58:7a:de:12:e7:44:f3:70:ef:
         e7:00:f2:94:ec:8d:6c:89:82:d9:b7:5d:d1:ff:69:e5:d7:aa:
         62:f6:ee:32:d5:3e:24:e1:b2:12:67:66:f3:f3:4d:63:84:41:
         17:48:5c:66:81:74:38:7a:1b:e7:fe:ed:23:ee:cc:9a:05:29:
         df:bf:15:47:e6:2a:24:4e:7b:43:b8:ca:43:e6:c1:56:2a:4c:
         06:df:6f:bc:b1:bd:23:f6:8f:25:5f:e2:76:d9:bc:32:27:fc:
         57:4f:6f:7e:93:b9:d2:68:b5:04:07:bb:4d:10:c3:3d:07:9d:
         65:5e:2e:a3:00:71:1a:be:cc:07:ff:2d:97:c5:3e:be:4e:c4:
         77:c0:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:20 2024 by rpki-client on console-ams.rpki-client.org