Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          MBtiIMqKPJSZKlNmXDgIjANKOOOQDlNudoRj5skX0ag=
Subject key identifier:   4F:47:2C:2B:74:E5:00:B6:73:9A:6F:66:A6:F4:98:F8:BB:29:AC:15
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       019040AE98222CCBA21455E2EAE047DAD850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          11DB
Signing time:             Sat 22 Jun 2024 16:01:42 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:42 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:42 +0000
Files and hashes:         1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: Bj22uUGuJSuDXNrlX25JY0oTeOlQsUk+1wewiG5sxJM=)
                          2: qzPII3rg1km9b4kQmaDFcgapwXc.roa (hash: tlXFKCkmT823FBDvWHCljmMAPrdqaCiqpoXI/fxU0AA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:98:22:2c:cb:a2:14:55:e2:ea:e0:47:da:d8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Jun 22 16:01:42 2024 GMT
            Not After : Jun 23 16:01:42 2024 GMT
        Subject: CN=4f472c2b74e500b6739a6f66a6f498f8bb29ac15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:31:d5:b5:16:59:18:f4:7c:e7:99:b2:7f:
                    3d:8c:42:9c:04:e3:83:56:27:6a:b0:d6:f7:10:10:
                    91:18:08:f2:29:87:b1:34:45:eb:ea:01:e7:a2:49:
                    ee:f9:d7:eb:49:33:f2:7f:e6:5c:e0:5c:c6:98:69:
                    6f:38:88:69:cb:e3:2c:07:1c:e6:02:39:19:5f:22:
                    cc:34:7a:1e:72:67:ea:ac:20:0b:af:74:d0:6a:25:
                    94:90:8f:87:ad:bd:7f:10:28:64:7b:3b:86:35:0c:
                    51:0c:b1:25:5f:c7:db:44:d8:ec:2e:0c:e2:3f:5d:
                    96:f7:a6:15:3d:97:53:11:11:91:c0:4e:a0:eb:88:
                    d6:0e:1d:5f:2d:72:d1:f3:6e:9f:2a:ac:77:9a:75:
                    64:cd:2d:77:cc:eb:0b:85:af:6d:17:47:c8:17:2a:
                    96:e6:70:49:52:17:ae:a2:ae:c2:e5:4b:6d:e2:71:
                    94:a6:3a:49:b3:a4:8a:4d:25:59:ff:9f:19:15:9b:
                    22:85:f7:38:f0:40:72:99:b7:a2:52:7a:98:70:ba:
                    e8:51:d6:da:50:4a:26:17:28:b6:11:da:80:68:ad:
                    33:65:ed:e5:55:e0:15:d2:6d:26:ec:97:ba:e9:ac:
                    f2:59:43:23:83:16:d6:e2:cb:39:55:2d:c4:c2:b4:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:47:2C:2B:74:E5:00:B6:73:9A:6F:66:A6:F4:98:F8:BB:29:AC:15
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:f3:af:61:37:73:32:dd:fa:60:98:f2:eb:9b:21:69:8e:
         6e:b7:f2:34:d9:8c:a1:44:c6:74:1c:d9:b3:ca:f0:52:0a:04:
         1d:4f:84:81:5a:6e:fe:1a:76:b1:0c:2f:74:4f:47:bc:6f:00:
         85:25:a8:ee:ce:17:97:9e:8d:f0:f0:f5:9e:a7:18:c0:f8:11:
         e8:91:f7:17:41:c9:00:02:4d:76:ee:f5:b1:78:d2:40:12:5a:
         01:2d:e0:25:a7:84:bf:93:38:bf:d0:91:68:c1:d3:8e:8e:f6:
         ce:60:c2:48:db:d9:b2:dd:3e:0e:ad:91:d0:6d:9f:6c:37:ac:
         6f:0f:68:7a:e8:f6:80:80:c1:13:5b:e0:61:db:42:38:1a:7a:
         c2:4f:80:12:24:0a:5f:4a:bf:d7:a5:bc:92:e6:82:84:ef:e3:
         1d:79:3f:32:f7:d1:f2:81:15:e6:b8:2b:4f:42:23:1b:1b:03:
         5b:4d:cc:6f:2e:96:f0:1f:ea:9c:ef:bc:97:10:ff:a0:c8:84:
         09:cf:3b:ad:6a:e0:a5:ab:55:ab:a1:8f:ae:6a:e8:e8:e3:69:
         d3:e1:22:9b:cd:43:cb:60:4e:2a:4f:db:16:cb:1b:bf:76:7e:
         4e:cd:34:63:c8:41:18:f2:d9:fa:be:88:b0:0d:a8:d6:2e:8a:
         78:9b:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:40:44 2024 by rpki-client on console-fra.rpki-client.org