Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File:                     R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier:          MbKCP7AVVsyxOxrD+J5FxGWZVyFwF/GAQrC0CaBEGBI=
Subject key identifier:   FC:B7:C0:41:D6:E2:E9:9E:2E:EF:94:39:C6:7D:23:A4:7B:56:EF:05
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer:       /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial:       019364B2A2CE5588CB607C97719C24124473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number:          1377
Signing time:             Mon 25 Nov 2024 19:00:48 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:48 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:48 +0000
Files and hashes:         1: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: vSdJWiqwlqtf12Z18veLBVcsBrA0UawMV3GLYjgpraQ=)
                          2: kqBsLfAuQksoTU1sXHPywER1BJI.roa (hash: 6b0J4RHnrGFv1Ah6foZ4jSV4ZBVNC6n4VPUpasjfUUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:a2:ce:55:88:cb:60:7c:97:71:9c:24:12:44:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
        Validity
            Not Before: Nov 25 19:00:48 2024 GMT
            Not After : Nov 26 19:00:48 2024 GMT
        Subject: CN=fcb7c041d6e2e99e2eef9439c67d23a47b56ef05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:5d:2c:60:71:7b:25:fd:66:ef:1c:f4:84:
                    ad:73:5f:c6:7b:55:e0:76:cf:15:c9:c6:1b:4d:e6:
                    24:88:51:f1:89:7a:18:12:6b:c4:96:42:16:0c:86:
                    16:4a:27:ed:59:b6:e5:58:31:cb:2e:ff:99:8a:ee:
                    3c:12:a8:95:98:01:46:ad:b1:e5:75:32:cb:01:19:
                    59:0e:21:bd:18:04:65:19:b8:e5:22:ae:1b:92:7c:
                    89:74:21:8e:4c:c2:2b:f6:9b:db:ff:af:82:35:d0:
                    45:36:87:0f:a8:45:61:ee:55:16:17:cd:fe:f7:e9:
                    28:80:44:92:41:29:f7:67:dd:3d:9a:3f:70:c6:81:
                    b0:ac:a8:b7:0b:76:c9:da:2f:13:95:4e:ec:0f:9f:
                    2f:c9:0c:e9:60:ec:fa:0d:7b:da:84:22:22:4d:5b:
                    0b:15:76:d2:e8:9e:1a:16:9b:a6:69:ba:61:2c:a8:
                    bd:98:00:71:1a:cb:99:de:dc:59:b0:ac:03:2f:82:
                    89:8c:0d:d6:06:34:77:55:a1:5d:e1:04:66:ed:1c:
                    25:8b:f6:37:58:5c:02:f5:4e:18:19:aa:57:5b:7a:
                    60:af:1b:38:9a:b8:87:89:89:da:d5:be:a0:b0:5e:
                    27:53:ae:06:91:53:0a:99:ad:9e:b0:36:6d:00:b3:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:C0:41:D6:E2:E9:9E:2E:EF:94:39:C6:7D:23:A4:7B:56:EF:05
            X509v3 Authority Key Identifier:
                keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:22:94:27:48:02:71:22:71:d7:9e:75:12:69:29:67:ce:d3:
         6b:f3:f6:c2:00:6e:d2:d8:fe:7a:4f:de:d7:5b:72:d0:65:7d:
         3e:2f:58:87:92:a7:d7:da:98:ab:a2:49:74:24:0c:7c:7b:d5:
         73:14:d7:7d:10:d6:a2:79:2b:7b:d8:0a:20:57:88:36:6e:21:
         6a:d7:ee:a8:d8:88:f2:57:d0:a6:1a:f4:ca:6d:6b:9c:43:f5:
         ea:fe:27:87:82:65:a0:e2:98:74:71:d4:29:00:dc:9e:91:e3:
         ee:f3:52:11:84:f1:cb:9e:50:d5:ad:b7:69:bd:4d:77:b0:cd:
         88:24:15:ff:49:c3:fc:57:7a:4f:e8:e1:13:23:56:f3:f7:3a:
         ae:16:9e:10:44:74:65:41:86:b3:d3:9f:de:a4:35:35:8c:1a:
         65:a7:96:fc:37:c2:bf:2e:11:9b:82:a2:b9:e5:b1:52:e0:f6:
         07:e2:18:59:d1:73:5b:2f:48:09:f5:d9:44:0d:2a:87:36:cc:
         71:eb:2d:7a:ab:97:f4:1e:a5:63:29:37:1a:79:47:1b:c1:b4:
         24:6f:99:05:c2:0e:e1:be:de:30:8b:31:13:de:ef:ab:80:82:
         97:4d:98:78:4d:6a:2f:26:aa:77:50:45:30:5f:f0:d3:ff:cf:
         74:8b:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:25:50 2024 by rpki-client on console-fra.rpki-client.org