Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File:                     rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier:          x0F3lHoeaDflgLlDag4eXqLMuMfwlb7BtAZqN3ri+mA=
Subject key identifier:   36:F3:DB:B9:88:82:C0:C0:25:70:E9:30:6C:48:89:0F:85:0F:E5:68
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer:       /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial:       0193549BCE3EFC7FF1FF697426CECAE21AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 16:01:57 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:57 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:57 +0000
Files and hashes:         1: JJfUFmaeCbiRJpL6IiC22mm0xCo.roa (hash: /m/UVYxmI8rHqPPB7glkWW+FFuNwTwlojuwrtAlDx/s=)
                          2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: xN8NLo1B7Po4rgEjgxbGMqzW5FG1i8hLoqK83cQGjH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:ce:3e:fc:7f:f1:ff:69:74:26:ce:ca:e2:1a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
        Validity
            Not Before: Nov 22 16:01:57 2024 GMT
            Not After : Nov 23 16:01:57 2024 GMT
        Subject: CN=36f3dbb98882c0c02570e9306c48890f850fe568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:ca:f1:cf:65:a8:0b:a0:3d:d9:62:ec:c2:
                    2c:38:14:17:0c:8a:0b:bb:e2:b2:f3:45:77:26:55:
                    47:bf:e7:06:fd:8d:8c:52:52:28:17:26:7c:8a:e4:
                    b1:8e:26:e0:c4:d1:14:a0:cc:1b:46:f6:a1:11:5b:
                    8b:3f:0f:1d:72:ad:84:b6:29:74:0b:6f:78:04:da:
                    b1:84:2d:67:81:5d:93:19:7c:3b:06:ba:6d:bb:63:
                    89:5f:b4:b8:37:b4:66:b9:e4:18:3b:82:06:fa:0e:
                    37:6d:31:b1:68:7a:f2:67:96:00:4f:e7:b2:ab:88:
                    63:3b:b6:be:ca:f8:45:c2:33:51:c4:0e:dc:4a:d5:
                    fc:60:66:21:f5:c3:f7:73:8d:1c:07:ee:d4:e0:ad:
                    2a:60:ec:8c:ce:a6:78:fd:1f:79:5b:00:4f:02:40:
                    32:db:c0:a0:b7:68:8b:f3:06:2b:5b:f8:58:a7:68:
                    39:8b:12:e8:7b:ca:5a:ec:14:a1:c9:2c:c4:9e:2b:
                    00:b0:fa:a5:4f:be:ea:32:b3:b0:2d:11:93:2d:9d:
                    a9:18:ad:83:a4:8e:72:f2:0a:9d:8c:83:26:ba:b5:
                    33:67:33:37:8f:8f:83:13:eb:77:97:04:a9:e2:80:
                    1f:99:2e:68:db:64:33:f5:47:65:ec:0d:e3:f2:43:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F3:DB:B9:88:82:C0:C0:25:70:E9:30:6C:48:89:0F:85:0F:E5:68
            X509v3 Authority Key Identifier:
                keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:62:32:60:1f:ed:1e:e2:2e:22:68:bb:38:ff:2b:52:93:
         86:e9:55:83:22:d1:1c:3b:3a:34:f3:f2:dc:dc:8c:93:f1:d1:
         06:fc:47:a6:15:4f:49:d5:5c:ee:b8:79:3f:b3:58:c5:e8:2c:
         22:5b:d2:3c:8d:b5:3d:e3:e8:f2:6f:29:7d:94:df:26:b7:0d:
         76:ce:c9:c0:3f:8e:e2:81:e1:15:27:a6:67:6e:88:9b:fd:39:
         3f:d7:fc:d6:20:6e:09:f0:61:2c:f5:02:d7:57:aa:d2:61:77:
         ee:61:7d:33:52:b6:b2:62:54:6a:4f:b0:51:9d:6d:7f:49:69:
         18:9f:2b:e1:e6:bc:9c:45:81:bb:25:49:f4:34:bf:b8:79:16:
         0e:75:e6:dd:e7:73:1a:57:51:5d:3a:89:ed:59:2d:9b:37:f0:
         7f:f5:48:19:03:28:8e:1e:13:fc:84:ef:ea:6b:1c:ff:dc:b3:
         7e:95:a6:f4:31:c5:e8:95:87:d8:fa:b7:65:26:23:be:b7:3a:
         8b:4e:0a:7a:86:e6:f2:44:1f:12:d7:cd:95:44:5a:14:5c:68:
         33:40:a3:45:9c:50:b2:1b:5a:d1:c0:5f:53:0a:dc:74:a1:60:
         ca:82:0e:52:52:f7:33:01:ee:20:9e:2b:13:21:a8:51:b3:97:
         d4:07:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:09 2024 by rpki-client on console-ams.rpki-client.org