Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File:                     bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier:          d351pga44XvZZ3aNod+hzmh8kTU/HmyxVg3pC+44lWY=
Subject key identifier:   E6:36:6D:62:79:68:C4:65:7F:70:09:79:A0:75:BB:30:85:52:F7:3C
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer:       /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial:       019355AD6FEC43AAC4D0DAE67DF11890DDD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number:          04DD
Signing time:             Fri 22 Nov 2024 21:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:49 +0000
Files and hashes:         1: NHJP8pCHxLZ_UCi7XOmfYu0qSIw.roa (hash: /z0Y8NxnZaxnM/AVpFHA0aOrhljooXf2nxh3Nr8BoL8=)
                          2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: Fsqf7h1BFqWJpoSSa5Ut0ZEQmtpuoiv3TeqtkgrifoU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:6f:ec:43:aa:c4:d0:da:e6:7d:f1:18:90:dd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
        Validity
            Not Before: Nov 22 21:00:49 2024 GMT
            Not After : Nov 23 21:00:49 2024 GMT
        Subject: CN=e6366d627968c4657f700979a075bb308552f73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:7e:f3:d5:b8:19:4e:31:57:d9:16:f7:da:
                    9c:2c:b3:74:c3:d4:1d:f5:b1:54:fe:45:29:19:0c:
                    c9:46:7f:56:e4:e3:33:07:cc:2e:ce:c9:05:c9:b4:
                    e5:52:8d:65:5c:72:3b:85:18:5b:9f:95:45:be:58:
                    c0:98:85:b8:2f:3f:93:f7:d4:69:34:2c:cc:68:74:
                    3f:0a:29:03:87:e9:4e:a7:36:bb:be:92:95:66:c8:
                    62:f0:fa:42:51:6a:b9:c8:29:98:85:9a:0c:3f:2c:
                    93:23:b7:eb:76:08:e2:57:60:8a:b3:fd:00:08:41:
                    74:69:d4:c0:df:dc:45:4c:dd:f6:ce:83:60:09:81:
                    15:4b:09:cd:cc:95:e8:16:d5:fb:ad:76:dd:5e:26:
                    b6:4c:24:24:19:40:46:54:99:ef:80:bc:3e:b3:82:
                    9f:ab:ad:a9:96:0f:3a:67:54:13:f5:a9:fb:9d:a5:
                    94:6c:e1:8a:59:4f:9a:4b:ed:90:55:fd:be:dc:89:
                    35:88:cf:f2:66:58:7b:3d:40:c2:c2:af:0c:65:ad:
                    da:ff:ce:2b:62:dd:d1:b1:1b:a8:b1:62:72:b4:64:
                    57:95:25:1f:46:c5:4b:45:1a:86:8c:a3:be:72:f0:
                    17:04:c9:e8:58:6a:ee:61:9c:10:07:53:c3:a4:a1:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:36:6D:62:79:68:C4:65:7F:70:09:79:A0:75:BB:30:85:52:F7:3C
            X509v3 Authority Key Identifier:
                keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d1:d2:4b:8a:b1:8b:20:79:e8:ab:c7:13:40:c9:2a:a6:91:
         c4:a9:eb:03:30:b3:1b:25:d1:4f:5a:42:fc:3a:9e:28:d0:43:
         b4:23:dc:73:6e:76:da:6f:a8:f0:46:3c:f7:ff:c9:f0:7b:f6:
         b4:f6:e4:dd:ba:b5:8a:41:d7:02:f3:48:b4:0f:c6:e2:c9:a6:
         d9:ea:91:ad:06:a5:e0:3a:67:9b:90:b7:65:5c:57:56:f4:dc:
         63:ac:72:cf:c9:b8:25:af:11:19:24:fb:6b:1d:e8:f8:e4:fa:
         07:b6:d2:13:fd:bc:9a:3c:95:d4:9e:32:96:74:20:f5:8b:f9:
         43:aa:14:dd:b9:e9:7f:e6:0d:1e:2e:5e:c3:2b:37:99:88:a2:
         91:7c:aa:56:f5:cc:24:30:20:f5:ed:26:13:71:2d:d0:d0:1f:
         40:6f:f0:18:7b:65:77:00:8a:b6:59:54:4e:2f:7c:4f:6f:90:
         bd:1d:44:57:1c:b9:00:a2:91:75:06:1d:6f:0d:2f:f3:d7:7d:
         60:94:cb:22:5b:ac:b2:84:0b:01:39:82:39:5a:57:0d:4b:99:
         b8:e4:d0:4c:b4:09:cc:77:a0:d3:50:7c:b4:f8:f6:6b:af:2a:
         e5:c2:1c:a8:c5:fe:ab:b9:4a:d7:b5:25:03:09:2e:64:01:55:
         66:1f:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:32 2024 by rpki-client on console-fra.rpki-client.org