Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
File:                     1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft (raw, json)
Hash identifier:          VKlayy0T1TNoQ9lpRYQ48KJBoG1U2y1k5W1UlZu1FNE=
Subject key identifier:   C3:FB:C4:11:47:BB:22:9B:28:2E:AF:F3:A8:B1:23:4F:0D:22:63:39
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Certificate issuer:       /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial:       019355E47F6D2BA0C5B36302EA52EBD04D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
Manifest number:          0E0B
Signing time:             Fri 22 Nov 2024 22:00:58 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:58 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:58 +0000
Files and hashes:         1: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl (hash: 5PXgjo44s9/YLKTabr+ikUkXuGKyJwgmTIvck9ptZsI=)
                          2: fmaciLkJLVEBa10LRvx0B4Wwwy0.roa (hash: youzf/u4o+m08L6yPdE3Rc4jRDkEFWb1ZUY5IgHDw9w=)
                          3: wrUHLlFAc83Kq7nZsPwNwR6eaMo.roa (hash: TkpymnTR1s0ASbEd3HSHqK+TSuL1E5Aa+atGg1aE0FI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:7f:6d:2b:a0:c5:b3:63:02:ea:52:eb:d0:4d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf814df8575986dd904a98687583c138768a114
        Validity
            Not Before: Nov 22 22:00:58 2024 GMT
            Not After : Nov 23 22:00:58 2024 GMT
        Subject: CN=c3fbc41147bb229b282eaff3a8b1234f0d226339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:80:90:4c:0b:43:51:e8:9d:ad:9f:c7:dc:
                    7f:fc:0a:ff:71:45:d9:74:63:bc:b4:ec:83:ca:44:
                    da:11:7a:2e:89:bb:8a:c9:8d:ae:8a:8f:7b:a8:57:
                    41:9e:a4:f9:16:45:4a:a7:7e:1b:70:8b:3a:2f:ab:
                    41:6d:80:e8:1c:72:47:af:d3:83:af:45:b0:1a:c0:
                    f3:50:1e:e6:ae:ce:64:49:50:d4:05:77:f8:64:61:
                    05:0e:fc:31:1c:ec:35:0b:1d:90:5c:75:99:a6:fb:
                    35:ee:50:cb:42:ba:28:2e:d7:c0:17:c3:fd:3e:ff:
                    b5:df:c6:ba:9b:b4:77:42:13:64:9c:2a:d3:a4:38:
                    c8:ee:d1:c4:18:7a:87:a4:9b:f6:b0:82:45:16:af:
                    6b:6c:6e:b9:7c:f0:ab:bd:c9:27:ae:86:4e:de:d4:
                    e0:a6:6c:ec:0c:54:0f:6a:4a:f8:5b:03:27:33:ce:
                    65:dc:bb:8b:09:e5:db:e0:74:a3:b3:92:86:3a:19:
                    22:10:3f:81:35:49:17:d1:3a:57:9e:51:1a:ca:d4:
                    ec:bc:be:c6:2f:e9:ad:cc:bf:59:33:5f:c3:8a:c2:
                    ff:6b:11:a6:06:14:5a:e2:cf:9b:86:41:fc:26:3e:
                    26:0b:61:f9:f6:c0:69:59:ee:eb:60:53:d8:17:87:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:C4:11:47:BB:22:9B:28:2E:AF:F3:A8:B1:23:4F:0D:22:63:39
            X509v3 Authority Key Identifier:
                keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:db:94:bb:45:07:bb:31:b0:bb:d4:a6:02:5f:3d:1a:2a:bb:
         5c:e7:56:21:8e:c9:dc:bc:ff:d3:d2:38:44:f9:93:cf:2a:1e:
         39:9e:db:d3:8c:aa:2e:b0:e9:07:ee:f3:b2:7c:32:ed:42:ac:
         ce:85:c2:f2:40:0f:c9:ed:96:79:48:02:fe:40:e4:99:46:ec:
         84:60:bc:80:35:1e:61:a1:2c:65:0f:e5:f3:c3:11:f8:c0:0a:
         f5:79:4d:ed:49:be:fd:b6:7d:42:13:f7:05:d8:65:4f:ea:59:
         e0:17:37:a3:7b:b4:ae:47:8b:26:70:79:ad:19:48:31:87:1b:
         d4:29:de:52:78:0e:9b:9a:82:cd:69:d7:63:dc:e8:2f:bf:01:
         d7:4f:90:fd:87:40:de:ec:44:38:97:e9:b8:2a:9b:5a:f1:f1:
         ed:71:ff:c7:58:50:85:18:0f:46:dc:bc:9b:28:d2:69:91:47:
         a4:0b:d3:96:c9:48:95:7e:3a:09:2e:c8:07:73:19:02:38:e9:
         a7:2e:fe:9c:0e:d9:7c:cc:19:fd:81:73:19:59:93:19:6d:1c:
         db:e0:69:37:8f:a5:b7:2a:8a:2b:ca:8d:16:b2:34:e9:a6:b6:
         8d:c4:dd:c5:15:4a:9a:dc:50:be:18:a7:c2:34:2a:3b:46:1e:
         50:e6:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:35:28 2024 by rpki-client on console-fra.rpki-client.org