Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          XMLXhFuMZA3soNlqWKfbqvyQqUkYe9g6dzU1kIjkSm8=
Subject key identifier:   CF:48:73:8A:78:91:26:41:1B:AD:1D:E3:C3:7A:6F:07:E5:5F:B8:E1
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       0193568AA3E0DC77E5BC26E428576BBCA791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:02:26 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:26 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:26 +0000
Files and hashes:         1: Xe4wvL4BCLrqOELlGqO8cRVsJEU.roa (hash: 7Z+BgZpjrK/ubdNUAR2QNcO6Q0h2ZY+JaEyFF5R+zuQ=)
                          2: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: /wGJGlrzrT8+enfWZmbbfJCA+4r7Zu8YWizBl8FLm0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:a3:e0:dc:77:e5:bc:26:e4:28:57:6b:bc:a7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Nov 23 01:02:26 2024 GMT
            Not After : Nov 24 01:02:26 2024 GMT
        Subject: CN=cf48738a789126411bad1de3c37a6f07e55fb8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:07:44:62:a9:6b:a9:d4:fb:b6:e3:09:82:
                    f7:11:3d:69:6a:63:37:35:4e:47:a1:a3:69:ae:7d:
                    76:29:e9:84:aa:b0:e7:1b:94:f2:0b:76:e3:0f:28:
                    6f:48:e7:37:a7:6d:36:6c:c9:94:2a:16:63:66:c0:
                    d8:b6:7b:ff:48:e3:70:ae:5a:36:43:80:68:30:80:
                    7f:1b:95:6c:91:76:c0:3c:0d:7f:bb:90:6f:b3:68:
                    f9:04:d4:e4:2c:cb:67:c8:6b:75:bc:21:fd:ed:30:
                    b8:19:31:c5:47:13:cf:1e:6b:5a:4b:2c:bb:c4:f9:
                    63:66:88:49:3b:6b:58:94:ab:6b:61:ba:b4:e2:be:
                    ec:f3:1f:ee:be:b3:6a:d9:f0:c7:f2:3a:11:24:ca:
                    43:35:fe:0e:bc:22:b5:13:d3:f1:66:10:93:ba:4b:
                    7b:a4:47:04:a0:91:f4:cd:c6:0f:6b:15:ec:53:01:
                    21:f8:31:c5:4b:c6:3d:78:3e:61:f3:2b:0e:30:e7:
                    22:ef:b4:67:5f:b5:98:8a:c7:ed:37:bc:38:7e:0e:
                    44:f4:8a:00:bd:84:87:f5:ba:8d:2e:31:f2:df:4b:
                    f5:4b:0c:89:1b:82:20:a1:e8:fd:1c:10:02:f0:f5:
                    9c:df:9c:09:56:2e:6c:a5:d1:50:2e:32:59:b7:ef:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:48:73:8A:78:91:26:41:1B:AD:1D:E3:C3:7A:6F:07:E5:5F:B8:E1
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:22:0a:6c:1b:7d:d5:4a:38:bb:37:f4:d6:2e:70:78:05:8b:
         ac:33:07:bb:91:b0:9f:b8:d0:51:40:49:98:b3:88:8c:b5:db:
         b5:a7:45:40:90:71:22:fe:3c:c5:49:a4:8e:74:89:11:c0:4b:
         e9:bf:8f:4e:ef:96:d1:fc:44:c7:eb:13:9e:7f:e7:f7:a0:74:
         a1:c5:b9:14:d8:e1:60:71:c8:02:ec:54:7f:52:c1:1d:4e:0d:
         ca:52:9b:cc:06:7a:b9:74:ae:b8:a0:21:df:e6:3d:5b:95:9b:
         21:99:23:92:dd:bf:ac:98:db:04:7f:0e:f9:e0:a0:94:f1:bf:
         a9:b2:21:9b:d4:7f:56:bf:d4:59:1f:78:41:12:f0:d7:20:5b:
         bf:13:4a:a2:23:36:a5:1a:f9:8d:ff:5b:ef:17:bb:c4:e3:bc:
         13:35:33:3b:e0:90:bb:6c:d5:f3:05:a4:ef:e9:4a:c3:a7:8b:
         89:06:4a:ac:ca:cb:c8:85:f7:1f:fd:c5:f9:89:ab:97:c7:8b:
         e7:f1:0e:36:9c:30:04:88:fa:be:32:e4:70:19:28:4a:83:13:
         d8:f5:d9:65:95:ea:ff:6e:0a:ac:10:c1:45:cd:ac:48:d6:cc:
         47:b1:0d:b5:cc:6e:30:3c:b4:11:c5:8c:36:52:8f:51:79:a3:
         e3:35:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:41 2024 by rpki-client on console-ams.rpki-client.org