Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File:                     VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier:          JAT3MIDiRvo9k7FEpbk1MVRKho8StZOOL1+aBXXeAXw=
Subject key identifier:   CC:FC:51:EF:4E:61:21:62:19:CE:08:9F:4D:74:49:45:8A:AA:4A:39
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer:       /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial:       019352ADCE25F87BAB4954423B894E2A08D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number:          0FCA
Signing time:             Fri 22 Nov 2024 07:02:22 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:22 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:22 +0000
Files and hashes:         1: 4Yiof5vXQMv8xsjCXvGMMrRpw_A.roa (hash: rkMBiYT/UHvW/98ZwAl4Pm/7UJfq1qoVDOx16RIE6Wk=)
                          2: SzP-O00hvPyxQ2Ay7ru4RtRKWd4.roa (hash: swBwHR+hEKPvAq/37h/pumtuHGcXoy/13UJgpMP+adU=)
                          3: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 024eRRpa8QCTnafyOToHldVH91/YSq1MAGoa731nogE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:ce:25:f8:7b:ab:49:54:42:3b:89:4e:2a:08:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
        Validity
            Not Before: Nov 22 07:02:22 2024 GMT
            Not After : Nov 23 07:02:22 2024 GMT
        Subject: CN=ccfc51ef4e61216219ce089f4d7449458aaa4a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:58:dd:a8:6d:02:0a:24:28:e1:ce:85:e7:
                    0d:67:92:5f:15:e9:6a:03:13:ea:83:db:e9:bf:26:
                    38:fb:bd:8a:a6:5c:73:bf:e8:9d:ad:51:35:ac:8c:
                    1f:47:d2:14:d1:07:0e:9c:da:27:f1:7c:a8:7c:27:
                    a8:ec:52:8a:77:dc:02:6e:32:44:1b:9d:ef:5a:ab:
                    ea:20:b6:e1:e4:30:bd:d5:70:b4:9d:7c:87:d4:ea:
                    f6:00:0b:9f:23:f0:cb:59:a8:75:5b:bc:33:10:fd:
                    eb:68:a1:a3:e4:0c:06:78:57:42:2c:0d:fe:40:ee:
                    47:d1:c5:4c:94:e3:87:f9:cd:5f:70:30:6b:07:79:
                    98:87:65:9b:81:ee:c3:00:73:b8:1b:dd:42:f3:eb:
                    73:a1:0a:aa:c9:c5:c2:89:41:5b:25:ac:61:55:6a:
                    e0:d3:d9:10:51:4e:42:47:bd:c4:18:0c:b7:b6:94:
                    96:14:e9:de:6e:a1:15:3d:9e:7c:27:db:95:83:c0:
                    f5:85:e8:25:5b:fb:d7:b4:d5:fe:6d:60:17:28:02:
                    35:b5:17:a0:bc:44:58:f0:a8:41:a1:a0:e4:40:b7:
                    7a:9f:7c:78:83:1b:16:1c:04:a2:1f:02:e8:7c:60:
                    10:ee:d2:3f:59:58:e9:02:47:38:14:20:4e:b5:c4:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FC:51:EF:4E:61:21:62:19:CE:08:9F:4D:74:49:45:8A:AA:4A:39
            X509v3 Authority Key Identifier:
                keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:19:d4:54:f8:0a:b8:6e:c4:70:a2:d9:8a:c9:77:45:f7:12:
         c3:df:63:7a:2e:f6:a6:fc:3b:9d:d8:ac:10:6e:29:f9:e1:27:
         13:01:f5:04:49:b9:f8:c3:6a:d8:f5:06:f1:8d:c8:5e:b6:6e:
         4a:b3:3f:b1:ba:7a:44:be:bc:58:b9:c6:d9:2b:9f:24:54:f8:
         6a:1e:07:db:4c:5d:40:22:1a:6e:24:7f:8f:1f:c6:8a:e1:a5:
         53:cf:09:59:4b:ba:a8:a2:e4:76:0b:d6:86:34:54:26:01:e9:
         4d:88:63:74:22:7b:f9:46:24:25:b9:63:11:69:de:3e:53:68:
         24:a2:16:3c:72:a0:de:22:7a:6b:3e:c3:52:d9:75:df:74:bd:
         18:8f:14:75:df:97:ab:27:11:62:39:10:ce:e7:b6:5c:d1:49:
         fa:fa:1e:27:31:e1:9b:0b:9d:f1:d6:46:34:f6:91:f5:f2:9e:
         98:8e:35:41:ce:e3:98:b2:4c:ae:ed:61:84:48:0c:b8:bb:84:
         73:2f:5b:b3:c6:27:25:76:5d:c3:9c:8e:2c:a6:20:21:25:07:
         d7:60:d6:92:f1:99:bc:64:98:67:83:a3:94:0e:da:26:15:94:
         73:2d:10:2f:2b:86:f9:14:3f:0d:4f:ec:35:6e:ac:65:cd:72:
         42:c4:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:08 2024 by rpki-client on console-fra.rpki-client.org