Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File:                     bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier:          xP69Rjhm6PbS2Z6wvJ2Vn6IvP54zzgr6gkQ9n51YU+M=
Subject key identifier:   6B:61:A9:4D:26:F5:3D:5C:DC:FB:98:D2:B9:3B:65:99:8B:5B:45:96
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer:       /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial:       019358ADE84091CAB41460613D7A472393CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number:          032A
Signing time:             Sat 23 Nov 2024 11:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:11 +0000
Files and hashes:         1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: qYLVZflP7pnz+KfehVt9O5HS/KSekyL6XalykrMXIbQ=)
                          2: oiVF5VSk_xnRYuv6VQGND_rgH14.roa (hash: /NnAcnSeAPwVnb3WvC5kC8Q29h7iaHWEWXwyESJ2HEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ad:e8:40:91:ca:b4:14:60:61:3d:7a:47:23:93:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
        Validity
            Not Before: Nov 23 11:00:11 2024 GMT
            Not After : Nov 24 11:00:11 2024 GMT
        Subject: CN=6b61a94d26f53d5cdcfb98d2b93b65998b5b4596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:0c:f2:dd:79:6b:88:f8:84:9e:a6:44:0a:
                    a8:3e:a1:18:be:3c:51:9f:47:18:e0:bd:e5:4a:ef:
                    69:29:1e:83:79:01:23:54:bc:35:17:19:d9:b1:34:
                    7b:2f:35:67:35:a9:15:de:5d:4d:39:26:c0:fc:c2:
                    c0:28:17:1b:09:bb:8c:fb:5b:69:5a:12:9f:69:41:
                    56:e3:09:b0:47:d3:d5:ce:76:ff:89:28:9b:c4:c1:
                    4a:80:c0:35:a0:32:7c:b6:e9:10:1e:2e:93:ae:c5:
                    d0:be:ae:61:17:e3:e6:de:fe:50:84:e9:a7:4e:52:
                    b6:1b:b4:62:c6:a6:68:60:b8:4a:99:10:14:d5:e9:
                    aa:f7:e8:b7:c5:8c:d1:5c:6f:21:4c:47:21:15:51:
                    8f:20:75:55:61:72:d5:9c:6d:bb:da:c3:e2:5e:ea:
                    af:f1:04:95:52:da:b0:d7:88:50:14:ff:95:46:97:
                    45:da:42:a8:cb:cf:82:fe:d1:98:b5:8b:f1:ca:1e:
                    1c:2a:d7:06:52:f9:3d:4b:2e:35:e7:57:68:af:65:
                    7f:ea:a7:f7:11:36:11:ef:63:be:9a:7d:01:ec:7e:
                    13:8f:1f:7b:81:26:7a:86:e9:e8:1e:82:78:4c:6f:
                    4e:b2:c2:05:b8:98:a7:75:8d:23:76:ce:94:27:28:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:61:A9:4D:26:F5:3D:5C:DC:FB:98:D2:B9:3B:65:99:8B:5B:45:96
            X509v3 Authority Key Identifier:
                keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:94:cc:95:50:2b:5a:89:50:d0:03:d1:03:71:a1:88:76:0b:
         37:01:6b:b6:04:0f:1a:75:3c:63:2f:33:c9:d5:be:e7:4c:e8:
         71:66:1f:53:21:2c:96:08:77:ab:9b:db:a4:e0:92:69:c4:ce:
         f3:fb:4b:eb:25:e4:80:f1:08:88:ef:cd:4c:31:91:cc:8c:f2:
         79:c7:b1:d4:b4:81:28:c3:0d:e9:fb:3e:cb:d2:22:11:52:1d:
         5f:f3:91:33:6a:cb:80:9e:a7:cb:67:e9:e2:ce:47:f0:18:01:
         80:17:c2:4f:2d:a3:31:06:79:d6:d4:91:2b:c0:b7:0f:b7:09:
         2b:b1:43:bc:0d:fb:93:26:7b:0d:ab:c8:1d:dc:3e:cb:ac:39:
         9b:fc:77:f4:0c:2e:ae:06:80:c7:c9:cb:72:cf:43:8b:8f:52:
         1f:bd:b8:d5:02:3b:e6:12:32:94:1d:45:b2:ce:5a:55:04:63:
         1f:81:83:3d:45:43:ff:21:49:20:2b:50:b3:00:3b:ea:dc:08:
         e9:65:bc:0f:5c:53:99:7f:49:87:cc:f7:0f:43:46:77:4a:58:
         68:f0:da:d9:88:03:04:51:89:a7:59:80:8e:e7:26:52:b9:0e:
         3c:93:e3:78:d6:00:eb:c9:cb:ef:e9:2a:dc:82:8a:d0:aa:03:
         70:30:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:17:08 2024 by rpki-client on console-fra.rpki-client.org