Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File:                     AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier:          eyD1E41RoWVsbC4ch/7F7mr/8dHu6DtxTmpM97eCg/I=
Subject key identifier:   A3:48:6A:91:AB:F9:90:91:1F:83:AA:A5:94:41:B9:BC:E7:6F:CC:BB
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer:       /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial:       019355768AF724BFA65114309DCD03BCE113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number:          088D
Signing time:             Fri 22 Nov 2024 20:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:52 +0000
Files and hashes:         1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: VueK8j4KaJKhYI7ivaumc17cl6rho79gcWIaNL/ybRI=)
                          2: fDEOKxcueNBpTJHpeQqzIj8JSMo.roa (hash: SH6PGH8t4ErBmQm5X6GU/+OuN4lt9ndBNH4dWe/kQ08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:8a:f7:24:bf:a6:51:14:30:9d:cd:03:bc:e1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
        Validity
            Not Before: Nov 22 20:00:52 2024 GMT
            Not After : Nov 23 20:00:52 2024 GMT
        Subject: CN=a3486a91abf990911f83aaa59441b9bce76fccbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:c9:93:bb:3d:74:46:e3:e0:f3:ae:3a:67:
                    8b:9d:4b:54:d6:5a:e7:52:5a:14:c6:20:02:a4:94:
                    a0:c3:f6:f1:a8:c4:db:be:b2:83:ab:11:ea:30:c7:
                    e8:08:12:17:9b:ef:7f:16:9f:d1:c6:93:a6:63:14:
                    39:0e:4c:0c:0f:2f:1f:c3:28:71:73:b8:55:f8:1b:
                    bb:e9:46:37:4a:59:58:78:c9:8f:e3:7d:0e:79:6d:
                    2c:88:1a:95:b1:ba:08:dc:70:ae:a2:86:0e:4e:50:
                    00:90:96:58:67:35:6b:ee:3b:4b:2e:32:68:b4:d7:
                    e7:d5:5d:80:5e:89:2e:0a:20:41:36:c2:70:7b:2c:
                    75:cb:87:2e:10:68:8f:0e:66:58:32:3f:ab:db:52:
                    ec:ef:aa:25:d2:f3:34:3f:04:17:dc:e8:37:52:88:
                    32:ef:16:b2:d7:16:89:1f:4f:5c:82:d5:47:45:b9:
                    17:6d:ff:0d:31:98:ee:d0:5b:d7:46:b6:18:1c:ad:
                    bc:2b:80:14:2d:42:c1:08:f0:89:62:0d:c1:ff:42:
                    c5:a2:53:a9:43:8c:25:6b:44:a5:f4:9e:2d:e9:49:
                    f4:b6:8f:91:8d:b0:5a:6a:51:c7:0d:32:b9:46:a4:
                    e3:cc:d4:7b:46:ed:d2:d6:02:b5:78:1e:d2:a7:19:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:6A:91:AB:F9:90:91:1F:83:AA:A5:94:41:B9:BC:E7:6F:CC:BB
            X509v3 Authority Key Identifier:
                keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:db:ba:dc:3b:6f:f2:d7:da:cf:5c:67:ee:3e:ae:11:27:cf:
         72:f7:60:fe:4a:74:1a:fd:52:41:1e:f9:bb:7d:44:59:dc:d3:
         34:f4:1b:76:d9:2f:c5:35:a9:8f:ca:c4:10:de:8e:11:23:e6:
         51:31:47:2c:7b:6a:f9:b6:00:e0:b7:3b:ea:11:5d:f0:00:87:
         81:e2:fa:45:a0:ee:dc:e0:fa:d8:30:6c:bd:c1:d5:c4:36:b2:
         a2:a1:37:71:2a:a1:df:7b:c2:a8:c2:e0:11:86:cd:61:37:1f:
         f6:20:bf:f4:26:58:69:88:26:43:c0:ba:8c:ef:db:14:cb:58:
         a4:e7:f0:fc:2d:20:c7:2d:03:25:e0:13:11:91:a1:b1:71:d4:
         ff:69:b4:12:8e:a7:c3:dd:7a:ff:16:08:33:62:d4:e2:e7:04:
         80:52:63:f7:f1:28:73:73:29:8b:b3:56:f7:99:f0:ad:0d:e2:
         fa:f6:12:9c:51:4c:91:62:44:d4:53:1b:ed:7c:cb:8e:a7:e4:
         5b:da:c7:e0:49:08:82:92:59:9a:38:20:d3:00:95:55:33:56:
         fd:d1:6e:5e:ce:3c:70:e0:fb:3c:ee:07:db:ac:c8:ec:e0:fa:
         23:a7:c2:6c:75:b0:53:d2:43:03:b6:5f:c1:e9:43:75:41:9a:
         30:62:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:26 2024 by rpki-client on console-ams.rpki-client.org