Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File:                     byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier:          7FKV5340oi+lf/QM9tDckGiKQFZ275iws0Gq0vBYReI=
Subject key identifier:   29:C3:8C:C0:A2:FB:7D:C5:49:C9:20:0D:0C:A0:3B:75:A8:3C:C3:91
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer:       /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial:       0193568ADAEE0BF4220387BBAE0795D6BD2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number:          0353
Signing time:             Sat 23 Nov 2024 01:02:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:40 +0000
Files and hashes:         1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: vVGkF3YmTqVkExd6Ekkdt23a+q32/DPqg/h5D2nut70=)
                          2: j8ITAB9Pg34RHnq8S02XxLdYoL8.roa (hash: BvlHDdVeTg6vkfBBcvyRWN7Ij3Ogo1Jzy/wyqY3y9ok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:da:ee:0b:f4:22:03:87:bb:ae:07:95:d6:bd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
        Validity
            Not Before: Nov 23 01:02:40 2024 GMT
            Not After : Nov 24 01:02:40 2024 GMT
        Subject: CN=29c38cc0a2fb7dc549c9200d0ca03b75a83cc391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:0c:a1:19:f8:ea:4b:58:b6:8b:bb:62:ab:
                    6a:c7:35:59:f8:52:9b:42:de:cb:78:b7:1a:ff:b4:
                    9c:2a:a2:6b:dc:8c:db:43:98:c1:a6:3f:6e:bc:bc:
                    37:f6:46:3e:6c:10:11:aa:8e:48:b8:92:88:b7:5e:
                    fd:45:39:79:32:fc:80:6b:86:47:fb:9b:72:63:6b:
                    a6:e2:09:a8:d7:03:45:d5:d6:21:44:52:b8:28:fc:
                    a5:88:ab:d3:93:01:c0:01:70:54:57:51:f7:4c:e7:
                    9c:0e:ff:65:65:46:06:62:a7:bd:02:21:c0:04:65:
                    e9:03:2e:57:98:1b:1d:f9:c9:ed:dc:9f:26:fe:02:
                    3c:1e:49:8f:d7:40:3f:f4:f6:6b:4c:81:4f:ef:75:
                    06:2e:51:33:df:68:cb:12:1b:d2:db:ec:39:ae:c7:
                    4c:36:5b:7c:0c:50:0b:3f:e3:89:42:8c:98:6f:51:
                    94:30:a5:ff:a5:8c:5c:b0:f1:eb:fd:06:76:e0:33:
                    2d:a9:97:cd:eb:12:37:47:94:0c:93:a7:c3:8d:ef:
                    2e:b0:f1:fe:92:62:78:9a:a6:06:01:9d:85:20:fd:
                    98:04:cc:2f:dc:1e:51:6f:af:3c:75:75:ae:2d:bb:
                    65:9f:ec:f5:27:de:83:3c:8e:49:a9:a9:44:44:6d:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:8C:C0:A2:FB:7D:C5:49:C9:20:0D:0C:A0:3B:75:A8:3C:C3:91
            X509v3 Authority Key Identifier:
                keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:17:b4:13:b2:69:89:99:84:14:84:20:2d:e6:be:3e:e1:c5:
         8d:b6:d6:03:35:f8:bf:78:29:28:85:6a:67:8d:d5:54:97:24:
         5f:52:0e:96:6b:43:74:17:a7:0e:b2:d7:1d:09:db:50:c3:73:
         76:26:d1:72:95:a0:cd:10:aa:9b:5f:df:a7:34:52:d2:3d:1a:
         1e:f8:30:19:fe:3b:79:ef:76:61:58:b7:b1:33:e6:eb:20:08:
         e9:a9:a0:99:69:1c:a0:81:d7:5d:72:4a:e4:74:2f:8c:b8:89:
         ee:45:ef:d6:f0:12:15:46:c9:4e:9d:c8:8f:93:3a:52:f4:ed:
         8f:0b:85:fc:90:46:a7:1d:fa:0e:8e:f3:af:47:cb:a6:2c:ad:
         cf:a9:f3:b6:17:c0:fe:b1:d0:1d:80:70:da:a8:b7:25:0b:e3:
         b5:0d:a7:81:99:f2:6e:54:b1:9f:79:7b:ca:d2:3b:bd:26:3f:
         b8:8f:fa:3d:b0:5a:f5:4f:ef:43:3b:0e:08:80:a0:72:54:bc:
         24:0e:90:aa:4d:00:79:bd:a6:17:dd:a8:e7:e7:82:33:6c:28:
         28:e2:7a:00:2e:a4:92:e4:bd:48:da:87:cf:f7:23:c6:47:24:
         35:76:2a:ab:1a:d8:fa:55:9b:ac:49:4a:9a:5f:e8:84:c3:9e:
         c7:65:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:34:38 2024 by rpki-client on console-fra.rpki-client.org