Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File:                     fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier:          mpCsi0DBATe9FZxerUB13L6VYmQisqmKRrFmdyaRjMU=
Subject key identifier:   F9:2F:A7:F4:A0:BE:97:C2:9D:78:B1:66:83:84:86:90:22:C6:A6:5A
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer:       /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial:       019357D2FA5F0DF01CCE2F63CC58D23A08D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number:          1051
Signing time:             Sat 23 Nov 2024 07:01:04 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:04 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:04 +0000
Files and hashes:         1: cZoba5btLjXCv0MNdnDUmvBIvyY.roa (hash: 21zQs2nUYAf9nXsXtjgAV4ChXculzyJlabGMRbD3u9U=)
                          2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: 3h2sWQhWcMDzP7wJAWLuV3+/JRy2WvBVMCoSDpNeMzo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:fa:5f:0d:f0:1c:ce:2f:63:cc:58:d2:3a:08:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
        Validity
            Not Before: Nov 23 07:01:04 2024 GMT
            Not After : Nov 24 07:01:04 2024 GMT
        Subject: CN=f92fa7f4a0be97c29d78b1668384869022c6a65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cc:ff:bf:68:75:b2:b4:7d:5b:f4:6a:98:f5:
                    c4:9d:e3:40:e2:06:e6:ff:c1:83:a9:44:04:76:70:
                    3b:58:a2:cf:4e:5a:57:2d:6a:da:a5:a6:34:86:66:
                    5a:02:0b:fe:7c:93:17:18:f3:49:0e:02:8d:a2:8b:
                    06:ab:1d:d3:a4:93:1d:c2:be:e2:a6:c5:d9:70:c8:
                    d4:96:07:8b:1a:b2:a5:4a:40:08:b5:e7:5e:ed:1b:
                    3e:87:a7:28:95:ca:52:7f:87:c4:a5:ca:1a:e6:a9:
                    59:e9:bb:73:c6:22:e0:05:32:29:6e:dd:3f:93:e1:
                    da:18:45:da:43:9b:17:38:4e:8c:9b:11:13:8b:f9:
                    64:43:3a:9f:86:03:69:0e:fb:bd:e1:5c:4a:82:e5:
                    86:07:3b:cb:3f:c5:7a:18:be:71:36:e4:0b:7c:65:
                    42:57:09:d5:83:13:c0:23:0b:e9:aa:6e:fd:67:15:
                    dd:b9:b1:13:46:ac:4f:3e:f2:2e:dc:8d:a2:40:30:
                    8e:b1:32:73:6b:3e:85:2d:9a:d8:db:de:5e:04:57:
                    f5:55:34:c0:55:37:0c:e8:c0:8a:d7:f7:9b:12:d9:
                    67:1a:2c:42:9c:ed:a5:34:03:cc:73:3b:93:b0:dc:
                    a2:06:aa:fc:46:6a:45:c0:13:6c:c2:39:53:50:01:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:A7:F4:A0:BE:97:C2:9D:78:B1:66:83:84:86:90:22:C6:A6:5A
            X509v3 Authority Key Identifier:
                keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:84:60:2e:5d:3d:93:ae:1f:f5:88:be:39:7b:67:2f:ba:b6:
         88:95:37:2e:26:5d:22:fc:0b:a5:2b:83:56:a9:40:90:43:e0:
         98:dc:d4:df:72:f8:f8:69:17:4a:3d:df:0e:f0:e3:70:53:53:
         ff:02:f4:f4:de:d4:1d:64:a7:f4:0f:62:b4:ec:4c:ea:80:0b:
         de:d3:02:2c:bf:28:ef:32:5c:08:ea:4c:b6:b3:8a:ee:42:72:
         08:1a:5e:be:f6:35:1e:96:fc:f3:6b:8d:35:d2:31:ca:e9:2a:
         45:52:98:ca:46:34:d1:56:8e:22:d1:c8:40:b3:37:19:66:65:
         0d:1b:e5:51:1b:65:51:40:a4:01:9b:d1:40:6b:4d:fa:bd:28:
         e6:8e:99:a5:ff:3c:96:14:ce:9f:d7:43:65:98:57:0b:27:4e:
         bb:ab:1b:75:e2:5d:8b:71:63:42:e4:d2:4c:28:f7:07:df:43:
         48:16:9c:60:a2:f0:b7:21:7e:0a:8b:5d:4c:ed:18:85:96:6a:
         2f:c7:db:83:76:08:a6:02:a1:ae:81:c5:33:a1:e7:05:32:40:
         54:2a:39:8f:2a:ca:61:ef:8c:a0:44:27:06:dc:69:f5:f6:5b:
         35:8d:43:2c:cd:5f:6f:4a:2c:00:d6:7f:70:fc:58:d6:d8:cb:
         ea:66:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:25 2024 by rpki-client on console-ams.rpki-client.org