Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
File:                     VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json)
Hash identifier:          pJ8MJFFjNYAYZ0ZdOi/HhSq/g8o2Sbt8G3HGhDLz2Tc=
Subject key identifier:   6D:F9:B6:4E:D0:06:C8:E8:2D:5A:A2:79:E4:C1:5E:E4:D4:80:4B:CD
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Certificate issuer:       /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial:       0193579B6E2A0939932A77F4C940ED2135BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
Manifest number:          91
Signing time:             Sat 23 Nov 2024 06:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:24 +0000
Files and hashes:         1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: ju6Cl1La9/r4u7fKVxe8fjg8wI6H7dIZIQ80v32l+l0=)
                          2: z71JE3vO85dUssRUb-Gk_3QfcBc.roa (hash: LDdZ8PKwiDI9GKY8fa2zhZ3VWA/2nILlFRh2ZXaGFRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:6e:2a:09:39:93:2a:77:f4:c9:40:ed:21:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
        Validity
            Not Before: Nov 23 06:00:24 2024 GMT
            Not After : Nov 24 06:00:24 2024 GMT
        Subject: CN=6df9b64ed006c8e82d5aa279e4c15ee4d4804bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:0e:56:f5:09:34:6b:57:da:ee:f5:86:45:
                    24:af:77:a4:57:27:60:46:05:e5:52:dd:17:a3:f4:
                    ca:3c:a2:e5:b4:60:3a:18:28:12:a9:00:7a:16:4b:
                    c2:93:2f:26:3c:e5:b7:92:94:11:d2:88:ac:4b:75:
                    66:86:a9:14:c9:5e:f2:72:13:db:ce:b5:dc:32:4e:
                    9e:9f:fe:6e:98:41:07:25:85:3c:a2:78:8d:af:07:
                    d6:37:ee:cc:5c:ab:a0:01:9d:c9:4f:80:5f:74:75:
                    d9:89:a8:d3:8d:d5:d3:05:ef:4a:f4:c5:c3:bd:aa:
                    d4:24:7e:b4:d8:a4:e1:f4:88:77:79:22:b0:5a:54:
                    b9:0e:b1:9d:2d:eb:59:da:11:42:a5:9b:18:0e:e0:
                    04:ce:74:2f:ec:da:0a:be:eb:b2:c1:b2:57:9f:9e:
                    72:c9:d2:51:17:c2:bb:ba:08:31:8e:cb:c8:d6:bd:
                    20:45:e1:03:f2:78:68:13:a6:66:82:20:a6:64:a0:
                    16:a6:99:e9:5f:9b:9c:92:0d:35:ae:ec:f2:4b:0e:
                    5d:6b:d1:c8:d6:31:9f:65:50:b4:d7:05:8a:10:f6:
                    18:f2:24:18:85:ee:89:59:56:c5:74:e1:ee:bb:f1:
                    ba:0d:24:37:71:67:20:27:c8:e6:5a:78:d4:05:05:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:B6:4E:D0:06:C8:E8:2D:5A:A2:79:E4:C1:5E:E4:D4:80:4B:CD
            X509v3 Authority Key Identifier:
                keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:7a:6c:d4:2d:d3:ea:9b:e6:63:e6:a8:4a:76:52:49:38:
         84:d9:ab:b7:ea:f4:e4:b1:52:ec:09:a8:03:f4:0c:c0:74:f3:
         d9:c9:42:e4:5e:e0:d5:69:a9:8d:57:b1:56:36:06:f4:e0:89:
         81:6d:20:89:83:93:c8:61:d9:6f:37:d3:64:96:60:7e:9a:19:
         8b:47:a8:ec:ba:d4:f1:f8:67:1e:b1:af:1a:87:d9:fa:45:a0:
         de:55:39:ae:db:30:a8:e1:f1:bb:31:f1:d0:00:06:61:65:f4:
         0e:a2:c1:2f:49:10:8b:c0:18:08:01:85:7a:e4:c4:82:26:1b:
         78:eb:36:4b:9d:a0:03:12:06:66:37:63:c3:8d:87:b3:90:6f:
         c6:d6:36:05:ab:c3:fa:a2:71:d1:5c:4f:9d:d1:b2:5b:ed:17:
         ce:ed:92:8e:eb:8d:09:24:65:49:bd:d4:55:84:24:d5:53:7d:
         57:94:fb:82:ea:a5:df:40:9d:56:ec:14:ad:81:a3:53:40:bf:
         4a:69:f0:e1:20:9d:fa:77:d2:c8:44:6c:ac:46:d6:82:a2:2a:
         e6:d2:41:b1:f8:63:f4:11:ed:3c:57:38:22:bc:b5:fb:b1:0f:
         c2:a3:6a:cd:81:f1:af:18:a8:f4:a4:d5:a0:a7:5b:ff:a2:30:
         bf:f9:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:17 2024 by rpki-client on console-ams.rpki-client.org