Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File:                     VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier:          T8Omrwnm2EL9scmJaWMq6xXuzs7Vhp+cNL6b+4iTv6Y=
Subject key identifier:   22:C8:E2:4D:B3:AB:56:F1:F4:26:9D:D3:16:FB:A2:1B:D0:2D:F8:4B
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer:       /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial:       019356F6C5A25479892802AA6E1F07A9F09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number:          1303
Signing time:             Sat 23 Nov 2024 03:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:33 +0000
Files and hashes:         1: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: MYKBvuK+gUm78kdKlX1S6tT2e1UYTKHbI0RhI0Zd0lw=)
                          2: _ZsnKOcWePgydCBrwy1Cq5lvHho.roa (hash: WKo2OFWl1BeUgvIQN9U6GYSdnmc6+bdoyOOH5Z2gsmI=)
                          3: y5v2A5YvIYG02Ob5wYLFFEV5prM.roa (hash: +iFGnL991RnDzdki3S5GOPk+pTBKrUssjuFI1FgEQJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c5:a2:54:79:89:28:02:aa:6e:1f:07:a9:f0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
        Validity
            Not Before: Nov 23 03:00:33 2024 GMT
            Not After : Nov 24 03:00:33 2024 GMT
        Subject: CN=22c8e24db3ab56f1f4269dd316fba21bd02df84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:d9:e2:a9:b8:e5:4b:f1:86:fb:e3:c7:bd:
                    b9:1b:a0:af:ee:f0:1a:c6:05:e0:43:f2:83:c8:ca:
                    3a:60:76:09:b8:06:57:45:39:2a:2d:f4:b9:ae:cc:
                    e0:60:5c:4f:0a:9d:7b:5e:f0:5d:c7:e3:c7:e0:93:
                    f0:d9:e7:80:5e:34:87:06:56:bb:5b:e1:0e:f2:37:
                    46:0d:6f:6a:12:34:41:e6:52:f1:8f:60:f8:78:1f:
                    99:06:d3:b2:a2:f1:32:7d:38:f2:2f:2c:2d:7c:ad:
                    04:57:55:17:97:f2:e3:e4:a1:aa:26:b5:06:7b:3a:
                    1b:a6:a3:19:ff:da:e4:24:f6:0c:35:53:21:d1:74:
                    81:77:30:34:e3:e1:76:cb:5d:d6:f9:b8:12:7f:e3:
                    f7:16:ed:56:7c:17:7c:b9:3f:e6:97:4f:5c:04:b8:
                    7b:ec:f6:0d:2e:15:19:d8:00:a0:2c:26:69:27:38:
                    b0:02:bc:07:86:2e:b1:22:b8:72:5d:75:d2:72:d4:
                    5d:2b:65:c1:3a:da:d8:22:f6:7a:f6:cc:86:85:2c:
                    8e:11:59:72:13:79:d9:81:44:ea:de:74:7f:52:9f:
                    b4:a4:97:c5:eb:64:f0:92:e1:c6:71:24:a3:3b:20:
                    2e:33:f4:e8:56:95:d3:dd:5f:6c:86:ea:06:4b:33:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:E2:4D:B3:AB:56:F1:F4:26:9D:D3:16:FB:A2:1B:D0:2D:F8:4B
            X509v3 Authority Key Identifier:
                keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9f:06:d6:aa:ce:6c:fb:3e:0c:7d:77:f7:46:34:19:6d:01:
         3d:f3:83:cc:71:e0:51:d1:a9:36:08:95:c7:80:74:a5:3d:d2:
         68:47:13:ed:66:e0:57:47:70:92:9a:1f:42:53:24:0e:0f:4e:
         bf:1a:2d:14:06:3f:b1:23:e1:05:54:f7:e2:8d:f5:3c:4a:56:
         a8:65:d0:f7:21:ba:ba:06:71:62:51:56:c6:2e:02:92:12:cd:
         6f:75:3a:ac:db:e0:6e:f0:2f:59:44:3d:af:67:1a:1c:82:15:
         dc:f4:18:58:0a:cb:d1:8e:05:e9:57:94:ca:21:f9:14:f4:cf:
         8a:08:8e:d3:3c:51:42:29:b2:4c:17:8f:85:c6:18:35:3c:47:
         a1:05:65:0c:b2:db:1a:5e:b0:ad:f8:c0:e2:a3:65:2f:a8:a3:
         2d:94:85:96:c5:03:1c:9c:d9:82:9c:22:a6:d3:0e:98:af:62:
         e5:f3:86:b0:ce:0f:06:0b:b4:f2:f3:25:9f:c3:ba:87:ee:02:
         8c:eb:09:c7:2b:74:bd:11:b7:5e:88:14:26:e4:b6:07:a4:04:
         ee:42:95:dd:bd:6b:0e:2a:0e:f3:13:f1:ef:3f:b7:24:ff:77:
         b0:41:c2:4b:87:70:a3:b4:8c:55:cd:e0:e1:00:d1:77:e3:b7:
         19:55:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:54 2024 by rpki-client on console-ams.rpki-client.org