Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File:                     afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier:          FqhcwEwnir2zZ2vpM1FbcyYWA65yd14ymEFSNcT7yiQ=
Subject key identifier:   65:95:21:5A:50:7E:F4:07:76:CB:D0:0F:AC:30:72:C8:4C:A7:95:55
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer:       /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial:       019358403509805F46C7CD0A264B548F94E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number:          06FF
Signing time:             Sat 23 Nov 2024 09:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:23 +0000
Files and hashes:         1: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: a2FOOxW4LeX4DqkeIDcyEsQhySE5SUuKFjW0TYivPQE=)
                          2: vWH70oIlCnt8vRyNDdgiKFTZzVQ.roa (hash: nMHI595NYdWq3JwMGJWblF1heQ1F5dc3hyZV2B2Wj6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:35:09:80:5f:46:c7:cd:0a:26:4b:54:8f:94:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
        Validity
            Not Before: Nov 23 09:00:23 2024 GMT
            Not After : Nov 24 09:00:23 2024 GMT
        Subject: CN=6595215a507ef40776cbd00fac3072c84ca79555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:3a:0d:fc:ae:b9:fa:e3:6b:4f:47:35:db:
                    e3:eb:ae:2b:a8:20:ac:f2:4a:9f:7b:7d:2c:2a:e8:
                    4a:85:85:b8:a0:a5:07:b3:a6:c3:0f:26:83:b2:1a:
                    74:d4:c8:b0:f1:08:e1:fa:02:0c:c3:9b:f5:76:60:
                    c7:c0:0f:8f:83:54:75:f0:3f:58:fd:73:49:be:3a:
                    26:5f:68:cb:6a:66:44:88:ba:a7:d7:2c:d8:1f:4b:
                    39:f2:0c:12:36:67:04:44:ee:9f:28:cd:2b:6b:58:
                    7b:72:e4:f4:0b:80:80:91:75:16:24:08:cc:db:f6:
                    4e:b7:69:14:2f:a4:8c:36:63:21:03:ab:08:66:7e:
                    75:83:cc:48:09:ad:f0:5e:2f:c6:27:d5:9f:3d:c1:
                    1c:15:a9:42:1c:dc:98:85:5d:da:ae:d0:59:60:e4:
                    8f:ee:28:43:b4:da:43:e3:3f:75:d6:c8:3b:1f:93:
                    12:77:58:62:76:90:32:7f:28:bc:1e:f9:37:76:b2:
                    8e:a3:19:ff:6d:c6:37:ff:cc:7f:5c:8f:9d:91:d4:
                    0d:99:e0:b6:af:e2:27:ba:d5:80:3f:e5:6f:2d:b5:
                    04:25:f9:76:31:4f:a3:7d:f5:6f:13:ab:68:d1:07:
                    9e:17:b0:60:42:3d:ca:4c:d3:7d:12:76:81:93:e3:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:95:21:5A:50:7E:F4:07:76:CB:D0:0F:AC:30:72:C8:4C:A7:95:55
            X509v3 Authority Key Identifier:
                keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:0e:d0:53:98:b7:71:a7:db:5b:ee:d0:96:b3:fb:a9:ea:2e:
         09:d8:db:f8:5f:c5:98:13:6d:33:6c:f2:15:8c:0f:a4:6e:05:
         4d:59:4b:4b:02:88:7b:be:49:83:95:d4:a4:60:77:ba:02:89:
         d1:a0:ae:42:04:3f:51:8b:30:d5:e6:2e:aa:25:1b:cb:76:cd:
         ba:90:92:13:72:33:d0:43:41:d5:ad:d1:8d:e3:10:f9:62:2c:
         28:35:66:bf:26:86:56:83:b5:94:4e:82:65:09:25:87:2f:ce:
         31:6c:d1:da:b1:3d:92:67:c9:fc:ba:a2:36:19:6e:b3:53:6b:
         d6:bb:2c:11:48:ff:ac:db:c0:f5:7f:49:11:d0:ce:0b:0e:ad:
         a4:5a:ca:f1:33:0d:8a:fd:5d:63:3d:5a:36:d6:dc:b1:fd:c1:
         ec:56:56:48:a2:de:15:4d:71:2d:62:0b:75:91:ea:84:73:cf:
         55:4d:22:ce:fd:bd:da:41:95:cb:24:41:6a:e4:7f:1b:a8:16:
         d5:1f:da:a2:3c:45:26:ad:6c:e9:60:1c:1a:78:db:ef:8e:11:
         20:69:f5:94:b1:8e:a5:7d:eb:b7:68:72:ce:ab:2b:1f:ea:1c:
         c4:e7:96:8f:36:29:a3:f0:e1:18:06:be:30:ab:e8:ca:14:91:
         ba:63:36:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:49 2024 by rpki-client on console-ams.rpki-client.org