Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File:                     F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier:          pELUyPwLtdvyY1EQ9gqEYlFdjxMlEw240yDAveiv8NM=
Subject key identifier:   20:D5:BE:99:A6:4F:96:AC:0B:16:02:63:58:29:AE:CC:EC:DD:02:13
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer:       /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial:       01935A673700FA27D9967DE2BFB49BE06BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 19:02:13 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:13 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:13 +0000
Files and hashes:         1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: h9I0HWYAWr53aa4IUxTsVj7bUzQ7r+SNu989gAJoJMc=)
                          2: NlAquE-wusMvxudyA1NNhlbBl4I.roa (hash: 16tNWajnPVglB4KppnBNNbll+7CG/eOLqdusqicr2b8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:37:00:fa:27:d9:96:7d:e2:bf:b4:9b:e0:6b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
        Validity
            Not Before: Nov 23 19:02:13 2024 GMT
            Not After : Nov 24 19:02:13 2024 GMT
        Subject: CN=20d5be99a64f96ac0b1602635829aeccecdd0213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:6b:f2:89:c3:4c:7c:7c:65:5e:97:32:e1:
                    99:78:b4:f4:b0:3c:32:78:da:ac:60:06:ec:5d:7f:
                    8b:6d:37:eb:8e:8a:35:05:7d:d4:49:80:04:07:58:
                    00:58:b0:46:df:35:50:d4:5b:69:48:f5:ce:a2:9b:
                    21:57:2d:23:9f:1e:de:cb:d1:03:62:cd:d5:92:17:
                    a0:07:d2:69:cb:51:46:44:52:29:a3:bd:a0:6a:59:
                    0a:4c:6f:a8:51:46:bf:1e:42:22:a8:a2:b1:2a:0c:
                    ae:cc:f0:a7:44:e7:32:e6:d0:a1:50:61:1c:ad:fe:
                    89:a5:bf:93:9d:4d:3c:d1:31:35:c8:a4:85:68:5a:
                    36:a8:4b:c4:7c:f7:0d:77:f3:19:90:37:78:45:4c:
                    37:62:06:1a:69:27:29:2a:f0:8a:d5:86:ea:7b:13:
                    5c:5d:01:59:1b:ce:03:e7:d8:36:11:bf:cc:b6:4a:
                    6a:83:96:c1:8a:8a:56:2f:7c:d9:d2:48:6f:9f:a0:
                    fe:72:0f:12:6e:16:72:62:a5:cb:b2:9b:d1:3f:20:
                    27:18:58:7a:8b:e3:7b:8b:f7:72:04:7f:76:d8:37:
                    71:12:e5:a5:7e:ac:a6:08:4e:86:7a:d2:79:3a:f0:
                    58:b0:b9:b3:a4:d7:1f:20:b1:77:95:2a:7f:13:77:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D5:BE:99:A6:4F:96:AC:0B:16:02:63:58:29:AE:CC:EC:DD:02:13
            X509v3 Authority Key Identifier:
                keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:59:47:9c:6a:ba:5b:68:59:b3:42:71:c9:6d:b7:60:32:
         cc:8d:3e:8e:1b:60:48:9a:57:77:eb:9b:26:8e:6f:c2:4b:52:
         8f:25:c3:8b:12:71:17:be:0f:b9:98:bc:93:96:aa:ae:8b:67:
         78:32:e5:b1:07:c9:c9:27:52:4d:85:ad:6d:3e:0a:92:23:e7:
         e3:84:30:8d:b5:05:dc:3b:28:85:9a:7d:01:3e:32:e5:c9:a0:
         e2:ab:2f:39:45:fa:c9:ce:ed:a4:cb:03:c8:75:99:5d:5a:63:
         f7:30:bd:2f:c1:00:7e:7d:87:79:de:f0:5e:bb:74:bb:29:c3:
         b3:7d:b8:c8:f0:65:88:84:85:a1:14:a4:a9:9b:23:9b:bc:70:
         3e:df:ac:8f:29:13:68:dc:2f:f5:95:09:68:37:f0:bb:73:3b:
         30:44:58:81:51:fc:2f:fc:ab:ff:45:24:37:70:16:b9:20:1b:
         c4:81:33:8f:35:0f:23:5a:d2:a6:97:02:5e:81:25:33:70:8d:
         59:30:2c:02:3a:56:d6:d6:d0:4a:8a:28:e7:a8:96:44:a5:35:
         56:9c:af:bb:b7:1e:4a:c9:2a:89:ed:2e:14:f9:a3:20:db:b3:
         1e:6b:9b:f9:1e:28:44:70:d2:58:ee:8e:94:30:5c:59:c6:13:
         19:fc:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:36:08 2024 by rpki-client on console-ams.rpki-client.org