Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File:                     1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier:          TX3Gr/B7BC8Q8EyET0ymFbHHdk2J7fr4+3Exwoogqv0=
Subject key identifier:   F9:89:F6:7C:96:CF:D6:A6:A7:88:35:40:44:BB:81:8E:24:EE:20:EC
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer:       /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial:       01936A7DB9851F6BDB6DEF5A551390A51770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number:          1380
Signing time:             Tue 26 Nov 2024 22:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:44 +0000
Files and hashes:         1: 1-RCqGJ92HDHQUAGJ8DkneJFNOFs.roa (hash: C2vFuLXNQhDho2kDMZSP8qYDArH1MXaac5cDgSvBTZ8=)
                          2: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: kLgdba0LQZvfaQwbQSQLXbsAvuX2cNa+1Saivb/9VV4=)
                          3: FFe7UeE3XtmgSwOIOo2vr8Pp6GE.roa (hash: d594oltg0F904G606PfeXavKMY1GMUS3pYcaF13dM9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:b9:85:1f:6b:db:6d:ef:5a:55:13:90:a5:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
        Validity
            Not Before: Nov 26 22:00:44 2024 GMT
            Not After : Nov 27 22:00:44 2024 GMT
        Subject: CN=f989f67c96cfd6a6a788354044bb818e24ee20ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:bc:b5:84:c6:9a:85:3a:df:12:1b:81:cb:
                    64:10:ac:23:4a:9a:be:0e:d8:8d:66:cc:3f:41:c1:
                    65:00:ff:12:eb:67:3d:cd:85:be:af:6c:03:e7:b9:
                    1f:cb:48:39:71:26:a3:2a:11:8c:a9:24:0a:d4:7a:
                    7e:3d:49:0a:63:02:6b:f1:f7:9b:52:06:5c:22:f3:
                    83:a8:b4:36:ed:60:bc:9c:b9:57:92:1c:50:59:f6:
                    94:ab:d6:3a:f6:6d:28:c6:ab:b5:c4:97:fd:38:02:
                    d6:b5:36:87:f6:c5:50:06:a7:38:e2:98:2d:b5:41:
                    c7:88:68:f4:42:c6:20:16:cb:59:64:fc:e4:09:84:
                    a5:1a:b5:de:26:d7:d8:5b:db:3e:48:1d:51:90:d5:
                    65:03:07:98:6a:e2:c4:e5:5e:1d:94:a6:6d:5c:a0:
                    b4:1c:ce:5f:c2:a5:24:d5:23:d2:69:b4:ff:fe:50:
                    1d:0f:5a:21:ea:3f:6d:09:83:41:4e:e6:b1:6b:a9:
                    67:d6:42:45:77:24:58:7d:b9:0d:ea:51:b9:3d:67:
                    be:f7:fc:b6:5e:f4:cb:4c:7c:a7:2c:8b:b6:01:c3:
                    4a:d3:06:6a:96:c0:12:63:7d:be:48:fb:61:78:0f:
                    42:03:72:fc:e0:01:c0:d2:c9:ff:26:c5:f6:44:63:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:89:F6:7C:96:CF:D6:A6:A7:88:35:40:44:BB:81:8E:24:EE:20:EC
            X509v3 Authority Key Identifier:
                keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:44:c9:7c:3c:20:a8:73:a3:93:7b:f3:53:f7:3a:96:6b:
         c1:05:04:d0:1c:31:30:6f:c7:80:8e:03:a9:2b:ee:83:4c:5f:
         90:76:68:7b:97:58:15:14:78:2f:33:27:80:03:34:97:e9:2b:
         5d:14:ed:2b:8e:b9:d7:d3:61:94:fe:b5:e6:41:a5:ad:89:9d:
         85:e1:cc:58:b1:d3:1e:f0:2c:70:e6:94:08:df:eb:e5:19:af:
         97:3f:f9:ff:b1:87:7f:97:96:87:5f:53:95:7f:ae:c4:8f:9a:
         7d:cd:03:17:c0:18:7e:38:95:34:19:30:f9:ae:e8:57:85:42:
         dd:2f:b7:75:30:72:1c:35:c7:f4:89:12:8c:ab:3e:c0:b0:a3:
         9e:81:09:54:e8:b9:a4:9a:b2:86:ff:c4:b3:d7:5b:d6:d1:a6:
         58:fc:4d:62:50:3b:5f:f8:38:b3:19:db:20:a1:cc:87:b1:52:
         b7:37:0c:24:db:ab:bc:f5:58:91:28:68:62:62:bb:f6:24:fe:
         55:71:4c:13:52:54:81:18:c4:83:8c:74:7c:74:4b:44:26:4c:
         cb:8e:7f:55:af:90:39:a4:1d:28:19:bf:7d:8d:e0:d7:15:1c:
         12:67:f0:fe:d3:2e:21:cc:c7:02:b7:61:36:59:22:f3:ed:ea:
         14:c1:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:05 2024 by rpki-client on console-fra.rpki-client.org