Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File:                     avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier:          6WyV+gAXcZM379F2QUaZ4Pts+bYOhjAGyavRztI7yzg=
Subject key identifier:   7C:16:1E:D8:6E:26:2E:EB:5E:98:6C:69:F3:1A:8A:9B:4D:4E:6B:4D
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer:       /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial:       0193666A4C13153863BD18CBC91953034E84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number:          0E8E
Signing time:             Tue 26 Nov 2024 03:01:02 +0000
Manifest this update:     Tue 26 Nov 2024 03:01:02 +0000
Manifest next update:     Wed 27 Nov 2024 03:01:02 +0000
Files and hashes:         1: YkSODmQWK2LV6cPbww4RkPzIUp8.roa (hash: hkBf+BdQNIgN8IgdXcmtUkpLcOI+u7cXwezFhawWkmg=)
                          2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: SGU/m/pwbUMoUYuQNEK0aotxuKjMROc+K7qY3JRHQPU=)
                          3: hug8E-GbrDH-NNJamzlkUtl_fOo.roa (hash: 1iSvprfEIFea8OXFaTaCfQ8mGeEyDOCQGi8wsTrbf68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:6a:4c:13:15:38:63:bd:18:cb:c9:19:53:03:4e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
        Validity
            Not Before: Nov 26 03:01:02 2024 GMT
            Not After : Nov 27 03:01:02 2024 GMT
        Subject: CN=7c161ed86e262eeb5e986c69f31a8a9b4d4e6b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:d9:7e:14:68:49:9f:a5:af:f9:95:d3:39:
                    f1:61:89:d1:99:e7:55:46:e4:bc:4e:f7:27:ab:84:
                    39:41:24:59:d7:1e:b0:58:9b:6f:0a:b9:dd:2c:a2:
                    a8:82:8f:e4:ea:67:ab:5d:e2:09:f0:51:53:93:74:
                    e2:f3:e6:34:d3:7f:4b:96:6e:59:a3:8c:42:9e:40:
                    66:ab:b8:7c:5b:84:97:4f:bc:14:4b:0d:0c:b2:33:
                    a0:07:81:77:20:97:a2:3a:e0:58:d7:3f:68:0f:9b:
                    c0:23:4d:ea:fe:be:6c:27:3c:c4:fd:5d:1c:8f:1c:
                    7c:5b:3a:6b:1e:24:84:fd:92:7f:23:7e:97:59:62:
                    86:d9:63:d3:52:1b:c4:2c:e4:9f:da:a0:66:6e:e1:
                    5b:50:89:2c:4c:7c:87:22:4c:ca:3e:40:53:4f:aa:
                    c0:fd:e6:93:8e:6f:c0:f0:a6:a5:a4:dc:25:76:cf:
                    3e:ad:8e:68:2e:8e:9f:52:81:72:d0:33:62:74:d8:
                    a9:72:a5:d2:30:27:47:c5:88:64:2d:9c:ed:c2:a1:
                    fb:87:fb:ad:2e:cd:4e:34:62:82:cb:99:68:10:99:
                    2e:cd:63:61:d4:c6:6e:18:30:08:02:44:c6:24:5a:
                    e0:e7:f6:85:0c:56:b7:df:b1:0b:14:4c:7f:ac:2b:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:1E:D8:6E:26:2E:EB:5E:98:6C:69:F3:1A:8A:9B:4D:4E:6B:4D
            X509v3 Authority Key Identifier:
                keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:87:62:d1:de:3e:d7:86:c3:cc:a5:71:29:66:2e:26:b2:f7:
         bd:60:1e:df:13:20:0d:a4:db:79:1c:a7:44:fd:9b:bd:7d:68:
         b8:32:ca:73:ef:4a:50:c6:59:ae:b1:56:2f:5f:dd:ed:6c:12:
         2c:8c:ba:84:1c:d6:ad:43:94:9e:8d:98:f8:09:f6:f6:d6:d1:
         fb:15:fb:5a:af:54:46:d3:00:1a:a7:1f:84:75:b8:10:3a:3a:
         c0:cf:83:74:3a:00:41:5f:ff:01:04:5d:c9:80:6a:b3:d1:9b:
         9b:0b:84:e1:43:7d:64:34:ed:fd:55:51:24:a9:ab:60:cc:c8:
         f2:fe:a5:50:ce:19:b5:69:97:d3:c3:0f:da:2b:5f:89:b1:d1:
         2b:90:45:d7:cc:58:ce:f2:2f:1b:17:b7:20:26:b1:dd:5c:4d:
         b0:eb:06:ee:d0:d6:c3:9d:38:59:12:ab:39:24:b8:8b:f2:92:
         88:83:c0:d6:f3:f4:93:82:c9:6f:d2:08:21:80:68:07:af:ed:
         ed:0d:5d:ca:b6:b9:74:2d:b1:88:f1:13:a0:c0:a4:6d:36:92:
         ce:5b:12:c1:d5:67:64:a5:5f:1c:81:09:18:33:32:01:59:30:
         a5:80:b7:16:a8:ec:12:ad:2a:66:b5:96:8e:de:02:c1:dc:de:
         ae:fb:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:17:25 2024 by rpki-client on console-fra.rpki-client.org