Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File:                     GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier:          ltbpLotLst3RtcK+NePqbaPdDCejjCSoptdHxkT1/is=
Subject key identifier:   B8:AA:D8:E0:DD:09:93:29:4A:11:1C:38:04:5E:23:A5:38:46:AA:B4
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer:       /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial:       019352ABEC9B338ACBA6FF00ACA0ADEE9CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number:          0A1B
Signing time:             Fri 22 Nov 2024 07:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:19 +0000
Files and hashes:         1: Ea6G-eyIhEcbKmxyk8VRdGzmas4.roa (hash: jcxtWAcbYPZCmnYReMbR+idxBTxflnlz2e6fG5LJ0Do=)
                          2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: BUG8DHawVXntI9RP3PS0/BxM5c33Xr73m5m27VsxUK0=)
                          3: amVsCmFqRtNrGMSP_WwvCzZ5wso.roa (hash: 9MwvWWx6Lt4DMt7asN6YOaULEhj15jXqmbx/Iy77ccU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ab:ec:9b:33:8a:cb:a6:ff:00:ac:a0:ad:ee:9c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
        Validity
            Not Before: Nov 22 07:00:19 2024 GMT
            Not After : Nov 23 07:00:19 2024 GMT
        Subject: CN=b8aad8e0dd0993294a111c38045e23a53846aab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:3b:e2:63:e7:1c:86:48:a1:2f:95:3b:e1:
                    d2:48:f5:47:8b:de:8e:4e:4b:67:6f:70:2f:b1:74:
                    d6:ac:f2:0a:e1:61:d2:2c:54:23:74:97:0a:a1:b4:
                    e8:3f:2d:2e:43:86:fa:39:17:05:80:35:24:3c:d7:
                    8d:8d:48:c8:2b:22:6d:f8:f3:8e:66:19:0b:2b:fb:
                    9e:02:9d:42:64:2a:0a:c8:84:3e:17:91:fd:26:5a:
                    2f:73:48:00:da:c0:24:44:37:ad:34:bf:a1:c2:9b:
                    c0:fa:8c:fc:af:f7:44:8e:e9:a8:29:19:f4:4e:e4:
                    1e:ed:e2:b8:c7:e8:8a:73:ff:34:60:5c:61:e5:96:
                    57:e3:0f:d8:d3:0b:ea:a4:b7:26:dc:fe:bf:77:8f:
                    e7:f0:f2:ca:0f:f6:d3:db:6a:69:f1:4b:7d:f6:03:
                    ef:a3:9e:6b:7d:78:c0:1e:31:93:c2:95:a5:36:eb:
                    99:c0:8e:d4:ff:94:a3:a8:72:11:5e:0e:c1:df:c8:
                    89:0d:c8:9d:b0:66:43:0a:e2:53:2b:da:0b:5e:d3:
                    f2:f8:63:23:7d:65:31:eb:6e:06:d4:d1:3e:43:fa:
                    1f:b2:77:4e:5e:3a:34:63:6e:42:41:d1:a1:13:b0:
                    50:d0:ed:fd:d3:8c:1d:c9:11:80:fa:6e:6d:6d:90:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AA:D8:E0:DD:09:93:29:4A:11:1C:38:04:5E:23:A5:38:46:AA:B4
            X509v3 Authority Key Identifier:
                keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:34:ae:28:f9:66:6c:2c:14:81:b8:a0:c8:f2:21:12:e5:
         f3:34:36:ab:dc:76:9a:90:3e:23:3e:1f:ed:61:d2:d4:cd:be:
         8f:79:f5:79:cc:95:0f:41:a0:7d:6d:98:60:d9:48:c3:16:a4:
         91:b0:ca:66:b2:6e:f7:d9:d7:be:2d:a6:fe:d2:cd:70:3f:20:
         92:e5:6c:d8:4d:f9:eb:39:23:cd:e4:07:27:01:f0:de:4c:85:
         47:51:bc:ca:57:98:98:f8:b2:6e:43:fc:8e:9c:b0:b5:05:00:
         98:36:20:c0:61:8a:fc:5d:b5:55:d3:20:07:b6:7a:e2:a1:b9:
         c0:6c:94:26:c6:79:50:4c:d2:92:7a:c9:b2:d9:fa:6f:c4:f5:
         5c:bc:d7:23:ff:10:ca:0a:12:c9:72:12:28:eb:07:4c:08:0c:
         2f:ad:91:e8:cb:88:5e:d7:ab:bc:df:3a:7c:41:63:a9:4d:58:
         8f:40:85:3c:55:47:8b:1c:5f:25:ad:64:58:ba:a3:0f:07:5a:
         e6:6c:8d:23:77:e5:86:c4:da:b9:38:6e:64:ae:51:c4:75:1d:
         c2:52:5b:5e:7d:df:d8:7b:aa:10:c4:d9:39:cf:af:4d:73:e9:
         8e:5e:5c:47:21:e8:4e:ef:f9:eb:e1:20:2c:56:90:4e:a8:ae:
         db:20:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:19:18 2024 by rpki-client on console-fra.rpki-client.org