Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File:                     pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier:          v/wxeWjhYVphlQKs/tJ4byEjvHXm9/PKfyT8xJKJzc0=
Subject key identifier:   FC:0A:20:90:CD:18:E4:8A:41:C1:B2:EF:D6:32:B7:73:6E:BE:F9:37
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer:       /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial:       0193568984ACE1FC1BA9569A010CF4B961EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:13 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:13 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:13 +0000
Files and hashes:         1: PbKdORNKJdP7MTpjXvgAWx6Kj2M.roa (hash: pMmdjtsJ3f0KTjYc+yn/sgXgx44vxiEZmUHD/yi5sto=)
                          2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: swjyl1PXodcwHpuMuBDOM3kNvRh03qC6D9t+rsnfAgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:84:ac:e1:fc:1b:a9:56:9a:01:0c:f4:b9:61:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
        Validity
            Not Before: Nov 23 01:01:13 2024 GMT
            Not After : Nov 24 01:01:13 2024 GMT
        Subject: CN=fc0a2090cd18e48a41c1b2efd632b7736ebef937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:cb:17:8c:4f:ba:32:83:57:e7:f1:b2:ca:
                    ab:60:56:c7:e9:c4:a0:7d:9c:93:94:98:cb:ef:be:
                    a6:ce:95:43:ad:cc:88:8f:2c:77:1a:fd:18:c0:55:
                    78:bb:af:48:d8:82:49:bb:4f:a0:cd:f3:42:33:0b:
                    f6:99:66:66:cd:ca:2e:25:c6:cd:cf:0d:b5:3d:14:
                    fa:4a:3e:ea:06:dc:fa:b4:ad:64:d7:d0:af:a8:c4:
                    18:e7:93:99:fa:2c:a2:5b:07:50:5c:b1:49:4d:9c:
                    77:ed:93:4d:bf:00:b8:bb:83:ed:16:e6:86:a2:58:
                    07:70:a2:80:76:8f:c0:ca:02:f5:a0:88:6e:c9:cc:
                    91:50:bc:a4:51:95:3f:48:15:49:d7:01:c6:77:2a:
                    c5:1f:c2:6b:a9:4f:7f:7a:3a:c8:4f:86:ac:fe:94:
                    b1:e3:57:76:44:84:08:e6:eb:a8:51:ed:04:94:d7:
                    67:60:3c:63:8f:92:5d:60:d4:bc:55:0c:e1:54:96:
                    e2:89:5b:04:2c:0d:72:2a:e0:5b:cc:c8:6c:ce:78:
                    96:30:5a:06:0f:31:46:c6:dc:ae:a6:18:f3:95:4f:
                    5d:2c:5e:e4:8c:cd:c3:ce:7b:20:21:ec:7a:e3:7e:
                    9c:9c:cb:80:b5:e6:bd:57:20:e7:27:f7:42:fb:5d:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:20:90:CD:18:E4:8A:41:C1:B2:EF:D6:32:B7:73:6E:BE:F9:37
            X509v3 Authority Key Identifier:
                keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:df:66:45:a1:89:fa:74:33:67:50:41:5b:19:ff:97:87:
         ce:f3:6d:51:20:1c:82:69:d7:c5:4d:8c:f9:f5:ef:bf:f6:4d:
         af:be:26:c8:ed:2f:01:52:fd:e1:ad:64:1c:d2:b7:96:ec:42:
         af:26:46:4d:92:cc:ca:f8:0b:03:3f:12:1b:f8:5e:ba:9d:13:
         fe:63:7c:02:46:16:7d:10:fc:a6:99:14:ea:0d:38:5c:2c:ac:
         a2:5d:2a:bf:66:bc:d9:cd:08:1c:7e:9d:04:31:93:ed:58:5a:
         e9:b8:f3:8d:59:0f:cb:9e:f7:22:b9:60:56:65:37:5e:29:47:
         80:1f:43:07:dc:13:04:33:49:dd:36:02:ec:c1:da:72:b0:96:
         59:6f:d4:51:11:09:29:11:a0:01:e9:f3:f5:3a:89:cd:bc:a0:
         f9:e5:8e:03:57:5a:d9:87:2e:40:d8:69:8d:a5:ec:bd:45:da:
         04:96:01:69:9e:13:cb:38:1c:59:3b:1a:3d:64:52:00:ae:ab:
         f0:25:97:bd:6a:36:f5:ad:bc:f4:e7:7f:25:52:93:a1:0e:35:
         ec:76:22:12:47:20:d6:b5:b3:ae:6f:b0:b3:15:93:16:89:9d:
         71:49:3b:ca:21:41:a6:a9:2b:a6:11:06:9b:a0:91:71:50:d5:
         2a:27:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:22 2024 by rpki-client on console-ams.rpki-client.org