Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File:                     Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier:          mWr6sD5PFU31fezv0LJtk30IKHiALM/07C3+Ci1wntY=
Subject key identifier:   69:18:AA:6D:2A:FB:CC:92:E4:F8:F0:65:D5:8D:60:22:DA:4D:D7:62
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer:       /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial:       019369DA0E6571DF869B8DE59E74474E3F92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number:          F3
Signing time:             Tue 26 Nov 2024 19:01:58 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:58 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:58 +0000
Files and hashes:         1: 2x5CkKdv6lo1Ksy0zkKQogvcxJA.roa (hash: LY8xTzhq94/YbpBe3DkmsoSeRwq2Oa+hAHtwfZIxkbw=)
                          2: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: +uNZAqRn5txHMdqJDQNkraruDul90XBxoj9XoIx5oXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:0e:65:71:df:86:9b:8d:e5:9e:74:47:4e:3f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
        Validity
            Not Before: Nov 26 19:01:58 2024 GMT
            Not After : Nov 27 19:01:58 2024 GMT
        Subject: CN=6918aa6d2afbcc92e4f8f065d58d6022da4dd762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:f2:20:65:f8:de:45:bb:e2:90:63:24:8e:
                    b7:37:a6:f6:6a:f2:75:7f:57:e1:7d:0c:19:8f:4d:
                    e3:80:67:99:66:be:9b:09:4a:a2:7f:60:a1:87:99:
                    8e:28:2a:84:81:1e:01:fc:11:54:29:83:d1:98:ab:
                    af:1d:de:fb:1b:ee:1b:e0:e8:2e:e2:1e:61:19:3d:
                    0f:a4:2e:8f:74:a7:16:47:ae:d0:74:54:42:c9:7b:
                    3c:32:27:83:91:d3:6b:4a:2e:ba:b9:d9:6c:82:5a:
                    e2:16:0b:fd:2d:a6:3c:d0:57:5e:b5:4b:b5:3b:70:
                    3c:fa:f6:21:c9:9e:07:aa:a4:b4:aa:31:0c:c3:dd:
                    9f:20:a1:99:ec:b9:9a:ef:21:88:54:0f:bb:05:c2:
                    7c:80:1e:3e:c2:d4:a3:0d:25:79:d4:73:5c:14:99:
                    e4:8d:42:eb:bc:5c:9b:f4:c5:5a:e2:d9:a7:ca:a4:
                    af:90:7b:bb:98:aa:f5:3d:74:cd:fd:7a:b5:42:cd:
                    b3:cf:f5:56:87:04:93:ba:c1:07:81:a6:1e:05:96:
                    51:ce:d5:d2:45:fe:1d:f9:6b:12:b2:22:fd:cd:b8:
                    72:db:9f:0d:a8:fd:b8:12:8e:91:a4:c0:e8:72:68:
                    f7:ac:9b:2e:ce:c4:78:6e:13:35:4a:21:fa:12:e6:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:18:AA:6D:2A:FB:CC:92:E4:F8:F0:65:D5:8D:60:22:DA:4D:D7:62
            X509v3 Authority Key Identifier:
                keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:54:aa:c1:46:a1:5a:03:1d:f6:75:96:d9:41:e9:bd:4f:a1:
         28:4e:52:11:e6:9d:e8:d1:f7:c6:d6:d1:71:11:7b:46:d0:1c:
         26:f0:c6:9e:c3:3d:fb:c7:c6:70:2e:80:e8:cb:a7:22:0a:bf:
         3f:d0:df:0a:44:06:34:ba:c6:ac:b6:f5:03:76:e6:ea:d1:33:
         51:9d:1c:f3:b4:f7:d2:3e:74:33:ed:62:52:d2:b0:68:f7:b8:
         ea:2f:76:23:1b:bd:fa:4d:42:e8:67:71:23:94:32:6e:51:33:
         26:f8:30:08:fe:05:42:91:bc:fb:3c:4c:2e:93:65:dc:bb:68:
         b4:7e:41:83:ec:bd:7e:81:45:3d:42:ca:df:d5:1d:27:be:44:
         75:c6:ef:f1:0a:fa:4b:e9:0f:2f:da:b3:5a:b8:58:a0:65:ad:
         9f:a6:2f:36:5c:34:b3:e2:d5:1e:c3:fe:2e:8b:2e:82:77:b9:
         2a:fd:b3:68:7c:44:9f:a3:65:16:80:24:12:0e:55:69:51:ba:
         8d:d9:fa:4f:e3:af:5b:03:ad:51:46:7a:c6:a6:d8:00:ee:f0:
         b8:25:36:42:a5:ac:90:64:e3:95:b1:9b:5b:c4:f6:d1:e6:29:
         9a:7f:e5:ed:15:6d:c7:47:e0:2c:18:71:79:b5:84:12:8b:49:
         86:21:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:12 2024 by rpki-client on console-ams.rpki-client.org