Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File:                     exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier:          NIKTj9GUDiHmEk+O1MzW1EuoI7iv4gU/FMvOqF9j9Ao=
Subject key identifier:   4A:1F:E5:AB:27:C3:68:AF:50:D8:EA:75:A0:8B:7E:CF:A4:CC:D9:98
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer:       /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial:       0193794BC658389044DA46C269A9112F7F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number:          0A63
Signing time:             Fri 29 Nov 2024 19:00:29 +0000
Manifest this update:     Fri 29 Nov 2024 19:00:29 +0000
Manifest next update:     Sat 30 Nov 2024 19:00:29 +0000
Files and hashes:         1: RaoJabCPx0UUTkHqQwO4zI2zcCo.roa (hash: AAJk8StNVfHp+ZC+u0kBFLX6Jjcb75akVVN23+Gbepo=)
                          2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: 7FLf2FLYPQwscJmjaX09aVYXCkTil57qWMYuHq3Uf50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Nov 2024 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:79:4b:c6:58:38:90:44:da:46:c2:69:a9:11:2f:7f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
        Validity
            Not Before: Nov 29 19:00:29 2024 GMT
            Not After : Nov 30 19:00:29 2024 GMT
        Subject: CN=4a1fe5ab27c368af50d8ea75a08b7ecfa4ccd998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:49:69:bb:eb:1e:7f:9b:38:54:d1:40:bb:
                    b2:53:8c:b5:74:60:2a:f6:9d:3a:ac:16:b0:02:b7:
                    73:dc:e6:39:0f:20:0f:da:38:e1:f0:02:b2:cd:dd:
                    c5:f1:8c:a8:e0:6e:64:51:c4:1b:37:9c:9a:27:ae:
                    ec:88:2c:e6:65:3c:93:fb:c0:b6:f7:c8:21:97:cf:
                    a5:8b:66:7e:cf:b8:6d:62:8d:6f:32:2e:ef:d5:7b:
                    f6:30:15:9a:17:ff:76:93:3b:db:9c:e9:ae:d5:00:
                    0a:ec:90:12:56:ed:7b:af:bc:3c:4b:75:22:2f:da:
                    b8:ed:a1:af:c5:4e:cd:f5:af:c1:73:5c:78:6e:e4:
                    26:0b:6d:a0:e2:de:99:25:e2:6c:d1:45:07:92:6d:
                    ad:fd:73:23:d6:4b:13:b2:5c:2e:46:9d:4a:0d:ff:
                    22:b4:86:3c:bc:4a:d4:d8:d9:d8:43:b9:39:c2:7b:
                    a7:97:28:b6:1a:73:7e:ad:6b:27:aa:c7:38:87:fc:
                    e1:0c:1d:0d:f0:59:6b:6a:0e:30:07:15:95:68:c0:
                    0a:99:3e:02:59:95:ea:77:4a:d5:37:7c:8e:f9:cf:
                    78:ab:11:5c:c6:ef:c6:1f:07:e9:c1:af:d2:11:97:
                    c7:01:5e:0e:7a:ca:63:45:ac:9c:93:c2:18:bb:30:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1F:E5:AB:27:C3:68:AF:50:D8:EA:75:A0:8B:7E:CF:A4:CC:D9:98
            X509v3 Authority Key Identifier:
                keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:e1:1d:ba:00:8f:03:49:a8:d3:b5:4c:a9:a4:98:17:b4:
         0c:b3:07:dc:dd:b9:7a:35:de:bc:70:a0:d7:13:52:87:aa:06:
         b2:be:04:f1:c2:c5:db:b3:9a:2a:f1:81:f2:06:fb:e5:53:39:
         87:c9:b0:07:cc:e0:66:dd:b1:30:d9:77:f2:89:a6:61:7e:16:
         21:8f:04:c5:94:da:49:c7:02:56:e7:01:a9:c0:f8:cf:e9:5c:
         ca:47:85:46:31:8c:8f:7a:d5:4f:e4:ee:1f:bf:f8:af:d1:f6:
         20:72:74:a8:70:bd:70:f5:6a:f5:64:3d:c3:f2:9e:ad:db:16:
         17:dd:60:49:a3:ab:be:56:48:ab:f4:d6:76:5a:15:13:07:7a:
         34:8b:ca:32:51:d6:18:ab:79:1e:b6:75:8b:d6:32:51:ec:7f:
         a7:9f:ea:c6:24:62:e4:58:e1:fd:21:50:94:97:7a:2c:66:c0:
         2e:ef:d2:72:a4:74:23:dc:1f:6c:5a:af:24:87:b9:56:93:0f:
         6d:e5:19:47:93:9a:01:f8:0e:08:20:b2:68:95:94:9a:98:54:
         50:69:e6:e8:f2:8e:b0:41:17:98:1f:75:ab:40:cf:c9:0a:55:
         58:43:6c:b0:10:9e:02:08:c4:4d:8b:6a:0e:72:76:de:5e:b8:
         90:14:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 22:58:46 2024 by rpki-client on console-ams.rpki-client.org