Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File:                     fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier:          mpzn+1i/ozAg3ycEWyS2t9f2V9HpWz7A+8ZBwr3NcVU=
Subject key identifier:   A1:49:4E:C3:F2:08:E6:BC:6F:31:14:D9:3F:BB:B2:EC:3B:B0:5F:BD
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer:       /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial:       0193568A0B7A4A4EE7E60C96C10DCB802DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number:          0C3A
Signing time:             Sat 23 Nov 2024 01:01:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:47 +0000
Files and hashes:         1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: 4v7XI0tP2rai9PafHKkRuInfQRgX1VOgPznqZC0Tam4=)
                          2: s9WKQnd3NhNHInOPDGp3V3Ued38.roa (hash: tukgbIASc1K2v/SIA39PTNLO6mR0KixlqNuWjqLUG7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:0b:7a:4a:4e:e7:e6:0c:96:c1:0d:cb:80:2d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
        Validity
            Not Before: Nov 23 01:01:47 2024 GMT
            Not After : Nov 24 01:01:47 2024 GMT
        Subject: CN=a1494ec3f208e6bc6f3114d93fbbb2ec3bb05fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:10:19:0a:54:ec:30:68:45:04:70:32:d2:
                    14:bc:10:74:7d:02:d0:e4:77:50:df:de:73:2c:be:
                    f9:aa:a6:df:fd:40:58:4c:d1:48:d9:d4:6f:f7:29:
                    f4:34:84:65:00:70:3f:4a:4f:f0:de:fc:93:31:b2:
                    b7:b0:f1:4f:9c:c2:2a:d5:7a:f4:44:71:79:5a:d7:
                    15:d0:f3:1d:0f:8f:bb:a4:4b:ef:dc:6d:0c:2c:8d:
                    ca:82:79:b8:f2:f8:4d:ee:75:c9:90:0d:03:ba:ec:
                    46:b7:2c:d1:5b:3b:ed:e8:95:7d:39:85:5b:96:1d:
                    9e:77:17:20:52:d0:24:93:85:f4:01:f3:b4:dc:2a:
                    f0:23:88:c2:b3:59:a2:7d:a2:4d:19:8c:47:e6:8a:
                    91:01:e7:4e:81:da:84:72:67:b8:5c:5f:1c:fb:9f:
                    33:ab:7b:c7:0b:25:32:e9:69:c6:44:28:5a:93:6a:
                    9c:f5:bb:12:b8:a1:44:42:8f:eb:1a:c4:48:6d:68:
                    f6:27:7d:8a:0a:43:3c:f6:17:b9:1b:d3:a9:b6:1d:
                    ca:5b:fe:1a:84:e9:c9:a5:c2:16:30:07:3f:64:eb:
                    60:d6:0e:b8:45:8d:18:53:9c:d3:ac:99:da:a4:38:
                    bb:8a:4f:dc:f7:e7:31:b5:a2:a8:c6:20:0e:48:36:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:49:4E:C3:F2:08:E6:BC:6F:31:14:D9:3F:BB:B2:EC:3B:B0:5F:BD
            X509v3 Authority Key Identifier:
                keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f9:09:8d:7e:2b:a5:98:66:5d:01:9a:fb:16:16:b3:fc:40:
         11:97:a4:0c:e6:fd:b3:c9:a7:62:29:a2:86:1b:29:a3:ac:de:
         0b:aa:25:0a:49:8c:f1:75:eb:33:60:e2:da:fe:bd:ca:e8:77:
         96:20:1f:80:20:49:3e:13:62:fd:a2:97:81:fa:1f:0a:3a:18:
         6d:2f:9d:7f:19:12:2c:91:44:fc:c8:22:a4:6c:1c:b4:f2:a5:
         6c:d9:3f:42:20:7a:f7:17:bd:d5:94:0e:6c:89:59:77:8a:02:
         f7:50:1c:08:8d:73:96:69:54:14:e7:cb:22:12:17:34:7c:2e:
         da:4e:50:11:22:93:bf:37:90:c6:11:9c:e8:b8:ab:9a:86:57:
         c8:84:d5:78:ac:62:e0:b8:14:c6:fa:9f:b5:8f:a8:72:0e:79:
         02:4b:20:5c:18:73:df:a7:f1:94:12:55:94:94:8b:d7:d5:c8:
         a8:9b:26:b1:d6:67:11:7c:03:30:3f:a1:09:5f:17:31:d9:ec:
         9e:49:9f:18:f9:7c:c8:f1:58:d0:c7:a8:14:9a:43:a9:9d:46:
         bc:8b:8f:e9:e0:47:09:26:b1:9c:b0:2b:23:50:63:85:a3:43:
         3a:14:aa:02:e4:b1:37:e8:82:25:a7:24:b8:5d:8e:03:8a:32:
         25:28:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:03 2024 by rpki-client on console-fra.rpki-client.org