Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File:                     VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier:          5fpiyCEr9Dxowb8uL5FnqauhBq86d8j6dyrZdpL8ne8=
Subject key identifier:   C1:A2:07:D0:AC:93:76:52:C7:8C:F1:A2:A0:4B:D9:36:B6:F2:C1:AC
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer:       /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial:       019355E42459C9300EA381B6F2878AD29B12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number:          0C9B
Signing time:             Fri 22 Nov 2024 22:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:35 +0000
Files and hashes:         1: DxZZJqWxUBKfb1q5l93Z8BxNNmo.roa (hash: OtGT3FT8YXN6A0ADeHzQ+T+RM0Vt0JY5eWvGoe/Qf1Y=)
                          2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: 5lW/Kgc6GQgg/idqFx+1vE3J3LkUHjWS+XbGpwwlh0k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:24:59:c9:30:0e:a3:81:b6:f2:87:8a:d2:9b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
        Validity
            Not Before: Nov 22 22:00:35 2024 GMT
            Not After : Nov 23 22:00:35 2024 GMT
        Subject: CN=c1a207d0ac937652c78cf1a2a04bd936b6f2c1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:85:ab:cc:2f:46:a6:e7:87:c2:55:34:85:
                    a0:2b:9b:fb:32:f8:18:28:de:65:58:47:86:3b:f3:
                    bf:a4:9d:3f:07:05:50:e5:d9:b4:52:35:65:29:fb:
                    5e:7d:e5:c9:85:69:e9:b8:92:f0:08:30:2a:b2:75:
                    af:2d:6f:9a:fa:ad:3e:75:58:d7:63:27:3d:6e:41:
                    f7:93:5f:70:82:96:9f:98:79:81:6c:0c:ca:e5:aa:
                    e2:56:4d:d1:d8:de:f9:eb:77:e3:5c:f7:7c:a5:77:
                    1d:7b:09:b8:d4:9a:0d:4d:74:35:a8:45:4a:5e:0f:
                    8e:e6:be:45:dd:d9:67:08:29:3e:1c:11:00:1b:15:
                    c8:5e:ad:2b:4d:d8:57:84:6e:81:b6:34:52:19:22:
                    fa:cd:f7:9f:d9:d5:ee:fc:24:3f:43:04:81:37:14:
                    68:e6:a1:7e:a5:35:a0:13:98:59:b3:bb:c9:6f:ee:
                    be:5d:c3:32:95:ae:2f:b3:75:8c:0e:41:47:2f:00:
                    2d:65:79:98:37:7f:63:75:11:30:3b:d2:27:71:7d:
                    7f:74:4a:ef:e2:5b:36:a9:66:fa:b4:b9:17:55:c7:
                    ae:0f:81:39:8b:3e:fd:fc:27:b9:9b:ca:8e:d3:b4:
                    07:c1:8d:51:0f:5c:6f:a9:d3:a4:d0:a7:1d:ba:24:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A2:07:D0:AC:93:76:52:C7:8C:F1:A2:A0:4B:D9:36:B6:F2:C1:AC
            X509v3 Authority Key Identifier:
                keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:61:e0:56:48:3a:38:69:b0:86:c3:ec:05:bc:64:a1:80:1b:
         d6:d0:a2:a8:87:48:b8:e3:c9:e3:ef:3f:e8:fe:c7:3c:a7:14:
         af:04:e7:c8:55:fd:8f:f6:09:3b:eb:c6:ee:b8:f5:d9:dc:f4:
         e7:fb:56:4a:8d:c9:65:cf:e7:22:96:0c:dd:c0:db:ea:1d:eb:
         32:44:ac:5a:9f:4e:ea:62:bd:1f:9e:ed:1a:37:c7:a2:eb:a7:
         e7:e4:f7:2a:87:da:97:ff:28:0f:18:5b:30:84:1e:84:d6:8f:
         9f:d3:9c:15:fc:6d:46:b2:a7:12:32:20:f4:24:88:2a:1e:c8:
         0f:b1:c0:14:18:12:89:e6:78:5e:e7:20:d6:a7:7c:10:42:f7:
         cf:eb:06:99:f3:18:b8:f4:4a:18:a0:8b:90:f1:86:39:0c:31:
         c8:3e:f1:d1:ad:67:40:03:3e:14:4e:98:9e:2c:ab:e2:ff:16:
         de:e5:fc:12:d5:a8:a3:26:2b:43:86:7b:bd:73:dc:45:24:2a:
         04:61:67:0f:64:a8:08:76:61:d5:7d:55:78:0d:f7:3a:58:de:
         4c:cd:47:5b:58:75:70:20:4c:66:d1:8b:26:e2:31:72:48:13:
         1b:ab:62:48:d0:98:cd:31:cb:38:af:b7:5c:11:4c:a9:08:ea:
         94:96:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:53 2024 by rpki-client on console-ams.rpki-client.org