Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File:                     IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier:          VD9cIVshMBtSUQzAwrLTLsLy9BahJOWyWH3z7iW2pV8=
Subject key identifier:   86:11:C6:AE:1C:26:60:E1:C2:C8:1B:86:D0:BB:E6:AC:F5:27:C3:D8
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer:       /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial:       019356F6D97D31DF71B78CA6139F0EE6A7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number:          10E2
Signing time:             Sat 23 Nov 2024 03:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:38 +0000
Files and hashes:         1: 6ohYNiAZv-l138NdgfBrOR_26bY.roa (hash: pVVWoxXNAUafgTmVxWaRNZL13SsvhM7TWj5ZVkM5U+U=)
                          2: FesQviuTq5lxmgijIXVoIQJJFzc.roa (hash: mtdxJinhzFzHnyhqfZqHkDnHkZcq6ajYGgGOSgknSVw=)
                          3: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: tNNwxWT+7DkfDhn1hXuU6m9yFhhDMP05h+pFGUibfqE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:d9:7d:31:df:71:b7:8c:a6:13:9f:0e:e6:a7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
        Validity
            Not Before: Nov 23 03:00:38 2024 GMT
            Not After : Nov 24 03:00:38 2024 GMT
        Subject: CN=8611c6ae1c2660e1c2c81b86d0bbe6acf527c3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:ba:b9:a8:72:dd:5f:78:16:d4:b3:a6:4e:
                    af:7b:da:52:bd:27:e9:fb:af:d1:0b:f4:e3:ec:9e:
                    50:3c:3f:a7:97:eb:13:a2:dc:84:f9:5b:0b:12:99:
                    fb:c7:28:0b:8a:61:3c:34:5c:40:6e:09:45:de:d6:
                    a9:d0:e1:2a:5d:ab:30:d5:66:98:1a:8c:b5:2a:e0:
                    ba:e6:10:13:4f:f5:41:ba:aa:62:11:19:c8:9d:bd:
                    ac:55:61:19:fc:d7:c0:8a:e9:78:59:4b:78:c6:70:
                    d8:4a:48:cf:e9:ed:e6:ee:7e:ee:3e:ec:11:01:d6:
                    3c:50:a3:c3:fc:9e:8e:89:e0:00:f3:f8:5a:7b:82:
                    e4:35:8a:28:03:88:ab:05:02:d5:63:c3:76:9c:f7:
                    d5:2e:32:6a:53:49:da:47:11:0f:b3:2e:a1:11:90:
                    43:b9:a3:c1:41:91:73:94:9b:93:7c:15:f2:80:57:
                    bc:88:78:5d:40:3a:ee:15:c0:3f:fa:db:a3:c7:b5:
                    bc:12:00:94:70:57:05:a5:92:87:8e:b5:7f:a1:2b:
                    b1:af:90:30:3f:0c:96:56:71:d7:a4:ae:6e:86:15:
                    0f:33:d5:38:56:af:88:b5:d1:5b:b1:00:ec:d1:ae:
                    60:67:80:4c:1b:5d:f6:f9:05:fc:c1:c8:ec:b1:bf:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:C6:AE:1C:26:60:E1:C2:C8:1B:86:D0:BB:E6:AC:F5:27:C3:D8
            X509v3 Authority Key Identifier:
                keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:00:a3:10:02:c2:05:e9:c4:20:15:88:f5:07:7b:28:6c:80:
         c6:c7:f0:5d:74:f1:46:87:3b:fc:00:9b:1a:65:06:8c:2d:47:
         60:32:9b:1f:ff:7b:d9:3f:8a:f5:85:65:ce:d3:40:07:1e:7f:
         39:84:87:3e:32:e6:4d:d4:7b:0a:cf:af:7b:b1:81:86:68:7b:
         17:7a:21:67:ce:fc:b1:fd:26:36:4a:37:f3:1e:8f:ea:cf:70:
         6b:75:98:5e:07:15:b9:7b:90:32:60:68:a3:01:90:ca:ea:f7:
         f4:af:29:66:d1:26:33:8b:44:74:48:2a:6f:32:28:5d:3c:61:
         54:4f:b3:29:96:7e:72:8f:92:e5:b8:25:19:5a:f0:27:ca:6c:
         30:fd:bf:ea:71:81:ee:42:47:ae:19:bd:b2:6f:20:77:8b:50:
         f6:9c:b8:45:49:0e:e2:9c:4d:8e:54:5b:a3:5b:fd:1b:da:c8:
         fc:ae:65:4e:a3:71:f6:4e:40:78:da:b4:16:96:10:e1:dd:38:
         71:39:08:c3:3e:a8:d1:a6:c1:d0:68:1b:ec:14:46:40:fd:94:
         41:c2:a4:a4:15:87:49:55:9c:51:da:55:76:da:16:61:9b:bb:
         43:b5:4d:d0:d8:e1:81:30:2e:2a:60:c0:51:86:26:d8:c3:b6:
         21:0b:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:02:01 2024 by rpki-client on console-ams.rpki-client.org