Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
File:                     V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft (raw, json)
Hash identifier:          fydRHUM5LwZmv4du4EV+RFrqkczFdSd1fV6uFz7y5qM=
Subject key identifier:   85:FF:FC:5D:E0:30:23:3B:55:7C:8C:D2:9E:C6:BB:43:5B:08:65:51
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Certificate issuer:       /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial:       019356F6F40D2C1F26BCA837708CEBC02FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
Manifest number:          0D43
Signing time:             Sat 23 Nov 2024 03:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:44 +0000
Files and hashes:         1: V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl (hash: X4De3fygQ5w9Yhk/kyvL26W3+myckAiuIPKOko9lcic=)
                          2: tQ-_BIICIOH0yP-r9zhM_deW_4Q.roa (hash: xyAHvdp/vZxZ2ARZj0mJ96T8V3cSsX4n9y65qq2DK94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f4:0d:2c:1f:26:bc:a8:37:70:8c:eb:c0:2f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Validity
            Not Before: Nov 23 03:00:44 2024 GMT
            Not After : Nov 24 03:00:44 2024 GMT
        Subject: CN=85fffc5de030233b557c8cd29ec6bb435b086551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5d:c7:95:61:f1:68:20:b6:b5:93:aa:47:15:
                    10:04:b4:ef:73:0c:b6:8f:8b:1b:a7:46:77:26:bc:
                    db:2d:5a:29:58:49:fe:af:f4:a8:a0:32:f9:70:89:
                    a5:c9:07:35:c9:3f:76:af:f3:99:54:be:eb:cf:60:
                    1e:3c:31:fe:69:fc:1a:e7:54:a5:0e:60:79:15:36:
                    86:09:5a:c8:2f:e5:ca:e6:55:34:f6:8f:81:d9:7c:
                    2d:e3:68:cc:2d:0c:18:8b:14:fa:a2:53:8a:6c:3f:
                    c1:63:12:86:ca:07:62:85:18:6d:68:e1:fd:45:61:
                    56:7f:2f:b5:3f:d0:90:b3:30:06:95:2f:7c:00:6e:
                    5e:6e:04:28:10:a4:fc:a3:04:b3:9b:4f:31:e0:09:
                    ef:99:7e:f8:54:48:b0:4e:d2:b2:50:07:4f:1b:c7:
                    92:42:79:2c:36:ce:83:a8:43:be:03:3b:e8:49:97:
                    09:7f:44:08:e1:a5:dc:46:40:ae:f8:5b:4e:f7:18:
                    68:5d:e9:d9:f8:68:0f:da:e7:76:02:48:4e:78:f0:
                    d7:9c:1e:ce:d7:5c:0e:71:30:70:71:41:0a:c6:4a:
                    fe:50:95:76:10:aa:9d:d7:af:48:9e:d8:41:2d:be:
                    f7:2d:aa:d1:dd:78:11:ee:62:29:4f:ea:d9:5c:c1:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FF:FC:5D:E0:30:23:3B:55:7C:8C:D2:9E:C6:BB:43:5B:08:65:51
            X509v3 Authority Key Identifier:
                keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d2:c0:b3:f8:30:54:bb:11:a6:78:c0:07:ad:f7:ff:c3:2b:
         5d:59:4c:ed:ec:95:da:84:fe:20:ca:c6:58:f4:7d:6b:25:1c:
         84:ce:23:2c:a7:be:41:fa:77:7a:a1:50:c5:c0:ed:35:32:38:
         ca:ae:37:46:e6:55:3e:8a:db:02:d1:e1:95:c3:a8:82:4f:9e:
         c5:8f:00:47:18:e1:8e:1a:71:8b:0b:cb:ca:d8:c4:ce:2b:9a:
         79:7a:d9:ac:73:9e:00:81:26:84:39:ca:8e:f4:8f:7b:91:91:
         59:ff:08:11:48:da:f2:80:ed:45:7f:dc:54:71:4e:c4:2e:bc:
         4d:e6:b9:9a:35:3d:35:ef:23:6d:94:52:fd:b6:d3:69:a3:55:
         c3:9a:2b:56:36:b9:87:fc:51:55:f9:3d:e1:0a:b4:ca:32:0d:
         39:07:fd:c5:e2:b6:c6:46:ae:51:a8:86:65:13:d4:70:86:0f:
         d6:f8:f1:8a:fc:1a:8e:51:84:a6:28:cc:2a:98:78:47:f4:8a:
         d7:35:1d:86:25:d1:d5:e0:7c:e8:e4:65:8a:77:8c:b8:0b:eb:
         3f:83:5a:bf:9a:cf:7b:26:ee:fd:ea:bd:bd:75:dc:ce:ff:95:
         5c:7b:c9:f6:8e:73:be:cf:a0:f8:45:31:23:8e:49:6b:98:8d:
         d8:60:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:09 2024 by rpki-client on console-fra.rpki-client.org