Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File:                     ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier:          1v7VpMNbDZs7K4TQlXZ+frcxFUpLGPhB2MKg1g4FLPM=
Subject key identifier:   8B:64:5B:87:0E:FF:89:51:26:D4:42:71:6B:A0:84:10:D5:C2:BB:53
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer:       /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial:       01935689EFDB59B629703F7999561532079D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number:          041B
Signing time:             Sat 23 Nov 2024 01:01:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:40 +0000
Files and hashes:         1: RmmKrtZ5De7LVHB3_oTAgdAJ5mc.roa (hash: Mp3gIZ0W6AGHNBD/5FTI3wEC6W4uvmTI1RthaZGnsqE=)
                          2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: DZf9sfY4seD4sWZYZNY3aqhXzkCCvsRVWVHRJKJhufA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ef:db:59:b6:29:70:3f:79:99:56:15:32:07:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
        Validity
            Not Before: Nov 23 01:01:40 2024 GMT
            Not After : Nov 24 01:01:40 2024 GMT
        Subject: CN=8b645b870eff895126d442716ba08410d5c2bb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:3d:b1:a3:6d:08:19:c2:ee:a6:8a:06:e5:
                    32:b8:29:23:c6:87:6b:fb:81:3f:e9:cc:06:ae:dd:
                    0b:ef:79:57:59:1f:a8:d9:ee:6a:7b:35:23:51:6a:
                    19:bd:9b:27:92:9c:70:dc:d1:1a:bd:d0:d5:aa:2f:
                    b8:29:bd:ab:7a:5c:35:9f:b3:20:15:af:c1:ae:12:
                    c0:fd:a2:a7:09:56:74:8e:a0:4a:d4:46:a5:a8:14:
                    3f:8d:86:e4:cc:fa:80:e6:f9:ad:26:74:27:a9:1d:
                    ca:4e:96:17:89:f1:17:be:c7:6e:44:ef:74:0d:18:
                    1a:7f:5b:72:0e:38:1c:88:7f:de:88:0f:4a:ca:e2:
                    8e:7b:74:93:18:f2:52:07:03:8e:0a:bb:a2:0b:91:
                    a2:19:19:23:f0:d9:c1:23:95:9c:1a:0c:c8:d4:7b:
                    59:1b:a6:5b:92:42:6d:21:33:bb:f2:72:7e:4a:81:
                    5f:ab:a1:bc:de:77:8f:12:13:12:fd:a3:19:15:33:
                    37:07:ab:90:2a:b0:83:fe:da:d0:4f:18:e1:f0:d4:
                    a5:a5:1f:cf:c2:b6:65:b7:b5:c6:9f:65:13:8b:7e:
                    ff:73:29:80:f7:bc:a6:2c:6c:58:69:45:6b:09:9b:
                    18:68:89:5c:7c:21:ef:fc:b3:77:18:87:40:07:ee:
                    a0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:5B:87:0E:FF:89:51:26:D4:42:71:6B:A0:84:10:D5:C2:BB:53
            X509v3 Authority Key Identifier:
                keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:64:d2:46:7c:a0:4a:b0:9b:a4:f3:f5:d7:53:36:4a:82:01:
         d5:e9:3f:36:23:f1:31:9c:e3:44:f1:55:38:b9:f9:e5:50:ce:
         35:e6:b8:81:c6:da:64:2c:3b:6e:07:bf:ec:bf:dd:27:cb:d9:
         fa:64:63:2c:db:4a:61:86:e2:54:bd:90:38:d3:97:1a:37:42:
         8c:ea:ba:47:74:69:39:e0:58:ce:09:9b:cc:34:d1:76:d1:39:
         eb:9c:2f:49:13:71:be:81:49:ce:e5:1c:35:18:9b:83:ee:39:
         2a:a3:c3:0b:83:3c:f2:95:99:26:86:87:02:9b:6c:3c:9b:bc:
         87:f2:11:d9:a9:42:0d:d7:8c:ba:34:da:d1:a5:c5:26:4c:8c:
         72:b2:6c:6a:19:95:dc:8c:6c:f2:07:de:70:41:fd:81:7a:34:
         57:ea:97:7c:f0:37:92:e8:d2:77:0f:a5:87:2f:ca:a5:37:79:
         7d:75:70:b9:87:ba:09:d8:15:95:a1:aa:61:96:31:86:6b:3b:
         3c:4a:ef:d8:b6:72:c0:5a:e1:69:66:bc:31:3c:97:df:48:76:
         c3:e3:ca:d3:da:6a:d7:84:00:eb:5a:2c:64:b2:ea:b6:8b:70:
         db:dc:2a:9b:84:9d:0a:93:f7:4f:eb:9f:6f:82:74:47:3b:24:
         fd:7a:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:28 2024 by rpki-client on console-ams.rpki-client.org