Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
File:                     vfyFyRfr69yH36Ne4JvEAoX19Ac.mft (raw, json)
Hash identifier:          XWmHnsToXBC+adkZyoGPnF5LggcdsoHWblf1fquGXdM=
Subject key identifier:   F2:9E:08:E8:D5:D6:13:25:13:43:51:18:ED:EE:09:7D:13:DB:AD:B7
Authority key identifier: BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07
Certificate issuer:       /CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
Certificate serial:       019369DA985A58B74013555252050E04A8FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
Manifest number:          3C
Signing time:             Tue 26 Nov 2024 19:02:33 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:33 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:33 +0000
Files and hashes:         1: vfyFyRfr69yH36Ne4JvEAoX19Ac.crl (hash: E03fZMMg0ZprvTWlaQI3rhCLhe+6u3kyqRvUKBLff4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:98:5a:58:b7:40:13:55:52:52:05:0e:04:a8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
        Validity
            Not Before: Nov 26 19:02:33 2024 GMT
            Not After : Nov 27 19:02:33 2024 GMT
        Subject: CN=f29e08e8d5d6132513435118edee097d13dbadb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:bf:55:78:dc:92:29:d9:f4:58:e1:7a:9b:
                    51:0d:b7:02:be:ea:2d:8a:9a:46:21:6c:ae:49:dd:
                    a7:8d:79:78:cf:48:92:e0:bd:d4:2e:ad:81:85:6e:
                    76:58:1f:c1:80:81:34:94:cc:47:e5:12:6f:58:3c:
                    60:d9:92:e9:f1:6b:5c:5a:86:2b:74:41:32:4d:08:
                    ec:60:5e:23:df:ce:5e:f4:c1:16:c1:68:02:c5:f4:
                    b3:82:92:e8:cd:1d:47:7c:4b:00:f1:a1:57:c7:91:
                    9b:16:cc:fb:06:9a:f4:7b:b4:18:49:f1:ac:5f:f9:
                    7f:4a:05:5f:8f:6a:87:be:ac:48:3d:d3:72:8d:55:
                    08:54:d2:64:f0:0b:97:2a:04:87:7d:44:5a:7d:c9:
                    41:bb:03:df:2c:10:fd:76:ca:a6:80:95:ee:8a:75:
                    c2:4a:1e:08:2b:a0:93:93:01:19:4f:cc:bd:89:fc:
                    5d:f7:e9:e6:fd:25:06:e8:20:fc:d2:08:4f:77:78:
                    bc:73:a7:cc:35:ba:a3:42:86:33:4b:63:55:d8:fb:
                    68:23:2c:5a:5d:8c:ab:03:f6:f1:33:55:3c:02:f4:
                    12:15:64:f9:59:09:25:d6:4d:1b:9d:28:94:34:31:
                    38:ae:2f:2c:22:6f:93:2e:72:b3:fb:70:7d:2a:7a:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:08:E8:D5:D6:13:25:13:43:51:18:ED:EE:09:7D:13:DB:AD:B7
            X509v3 Authority Key Identifier:
                keyid:BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ba:9d:1b:8e:93:23:21:c0:9c:60:d2:1e:53:a5:88:21:63:
         35:18:84:70:00:a2:2c:b0:07:16:03:cb:cc:5c:9b:d4:5c:07:
         80:52:ec:97:f1:e7:cb:b0:a8:b6:d7:77:11:ea:77:a6:73:fd:
         ea:8a:56:d5:e8:ba:73:58:9e:42:c8:92:7c:76:5d:5e:b5:e1:
         17:e8:92:d3:99:e0:0e:7e:d0:26:f3:50:ac:eb:bb:2b:bc:04:
         bd:00:2b:94:bc:86:f5:37:a3:2d:d8:e4:e2:25:3a:89:39:6a:
         d4:0b:e8:e3:ad:96:d4:ca:43:79:54:18:bc:02:c8:e0:69:9b:
         39:23:80:a2:1d:76:fc:e0:3e:97:8e:a2:c9:10:58:8c:07:a8:
         98:e5:af:a2:59:89:a4:38:1a:29:21:ed:77:48:6e:c7:0d:a9:
         cb:29:e5:a7:57:2c:3a:2d:19:3d:b6:51:ad:56:3d:31:7c:06:
         04:9a:14:9f:f8:91:75:4d:f8:8c:a0:c1:7f:de:26:5f:b4:9d:
         9f:f7:ab:59:5b:33:b5:b5:18:f3:c8:8d:fc:8f:71:f9:72:0b:
         d4:2f:4c:5f:06:9c:87:44:1e:2f:9b:c5:df:3d:9d:17:67:6a:
         52:bd:f9:97:19:7c:8d:60:72:0a:fd:eb:d4:f1:5a:9b:dc:46:
         2c:cc:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:11 2024 by rpki-client on console-fra.rpki-client.org