Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File:                     VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier:          bLd+nkhnigwRPY9bjGjjZ24HD+v4pTTJP4gqTtH8OXU=
Subject key identifier:   5B:ED:53:02:75:9B:E5:45:C2:64:82:18:1D:37:FE:CC:3C:9D:9B:33
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer:       /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial:       019356F7010F0B53BECD30D6760D19420394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number:          06BD
Signing time:             Sat 23 Nov 2024 03:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:48 +0000
Files and hashes:         1: AB2OKwIQpV3jaxQn1yTxosCtfgI.roa (hash: loXPLHV8xAk9pOUBnqTB+Q0ELsqXxZ7qU7S21uOzntE=)
                          2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: DCUEBN2ejdwSjgaZ1t8sclxmLAQyxLRh20sPSVl5L50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:01:0f:0b:53:be:cd:30:d6:76:0d:19:42:03:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
        Validity
            Not Before: Nov 23 03:00:48 2024 GMT
            Not After : Nov 24 03:00:48 2024 GMT
        Subject: CN=5bed5302759be545c26482181d37fecc3c9d9b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:fb:e4:6c:b0:bd:a9:83:dc:3a:22:fe:d8:
                    f6:e3:30:dd:72:14:19:60:a5:f3:b0:37:8b:1b:0f:
                    84:85:27:c4:e4:56:6e:e4:b6:e3:82:0b:af:a5:6b:
                    40:8d:6b:07:4a:4c:40:c4:d3:a1:56:5a:39:54:fc:
                    42:5e:b9:ea:23:b1:b1:b9:de:b6:1c:19:e7:4d:02:
                    e3:26:83:b3:3d:b8:80:9b:f1:80:3f:3b:6d:07:2d:
                    07:27:f1:dd:63:86:db:ad:80:32:0c:ae:24:c8:c4:
                    99:d7:b8:1d:c0:a7:be:6d:f6:c3:ba:dc:ae:37:1a:
                    87:71:37:30:4a:09:30:9d:6e:35:60:79:c0:be:6f:
                    99:fd:81:37:4d:9a:53:23:11:65:8c:3b:ff:d0:57:
                    6f:cf:84:e5:8f:f8:63:2a:fc:f2:f9:ac:1e:48:9e:
                    08:36:cb:18:50:a4:fd:db:c1:e8:6a:a2:d8:81:c6:
                    76:0a:0b:33:23:ec:2d:e8:01:da:47:5e:49:0d:18:
                    b7:24:10:40:f1:9d:6d:aa:6d:32:02:36:03:07:55:
                    56:97:8a:c1:d1:2b:39:b1:aa:61:77:d2:64:55:53:
                    16:30:87:9e:9c:98:95:1b:15:02:74:64:1a:96:90:
                    3b:5f:d2:0f:0a:c4:ee:92:14:b4:66:d6:f2:95:7a:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:ED:53:02:75:9B:E5:45:C2:64:82:18:1D:37:FE:CC:3C:9D:9B:33
            X509v3 Authority Key Identifier:
                keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a1:15:9e:00:ed:e2:aa:e2:43:47:5b:3c:40:82:8c:15:4a:
         53:88:af:bf:c5:a0:03:9d:10:4e:71:83:37:a5:86:fa:18:93:
         63:9c:ef:d9:34:f4:49:1f:44:ba:95:3b:61:48:b0:7a:42:6f:
         f0:d8:6f:21:01:f7:26:c4:f9:a0:26:46:91:11:a1:cc:16:1c:
         9a:9c:4c:64:0a:61:37:4e:77:26:02:3e:85:17:89:7f:de:50:
         38:07:82:41:f5:e2:a4:98:5f:ca:ed:8c:a0:d0:e7:fe:62:c8:
         7e:dd:ea:62:c1:7f:66:fc:40:15:7c:1b:01:e9:ad:3f:34:6d:
         98:28:01:8a:bf:eb:79:c2:6e:5c:61:3a:7e:7e:98:85:0a:c3:
         96:b6:33:6d:c5:a9:a4:43:60:f2:fe:b6:4b:05:28:de:e9:88:
         89:7b:0b:63:88:65:4f:aa:57:bb:75:26:e4:24:1a:a8:df:4e:
         95:6c:36:6c:12:bf:2c:05:e1:91:3e:4f:dc:e4:53:25:bd:f6:
         d1:0b:74:d8:ea:cd:b9:bb:75:d2:46:ac:a7:75:b0:b2:e9:ab:
         89:0c:1e:3b:2f:4c:dd:24:8a:0c:e6:1b:35:42:47:7e:b9:c2:
         f0:94:dd:6b:9a:24:2c:de:0d:a0:55:8a:02:4b:9f:83:5e:ec:
         e3:1c:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:58 2024 by rpki-client on console-ams.rpki-client.org