Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File:                     vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier:          J3bjqn3mcu0zt20JvwkHa9kDGlZBzupzOUmmOHINmQs=
Subject key identifier:   D7:2F:18:96:9F:6F:C0:CF:ED:74:2E:60:96:5C:54:3A:F2:6A:AA:AD
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer:       /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial:       019369D9B371DC351E3493A5EC7B6576805B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number:          02FB
Signing time:             Tue 26 Nov 2024 19:01:35 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:35 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:35 +0000
Files and hashes:         1: 6rvEeL6iOs0Fn_ktbh3CyWg5DvQ.roa (hash: 7fLeyCEkqqPlJ7QNr1XpoZ+U71R2uAxJKfNGouHBPiY=)
                          2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: xngSC56jAIRorruXyHV7yzp4YqyQJpk82X8U1vZYqFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b3:71:dc:35:1e:34:93:a5:ec:7b:65:76:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
        Validity
            Not Before: Nov 26 19:01:35 2024 GMT
            Not After : Nov 27 19:01:35 2024 GMT
        Subject: CN=d72f18969f6fc0cfed742e60965c543af26aaaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:83:65:fc:c8:12:55:93:fe:d3:6d:06:41:
                    6b:74:d1:9f:3e:08:df:69:18:25:41:37:66:5c:48:
                    13:a6:28:f2:62:3a:51:fe:f9:f1:16:14:cf:86:f2:
                    0e:d8:54:3c:53:dc:f2:29:82:4d:05:49:d7:74:d5:
                    4b:6a:46:d4:8b:0f:b7:d6:3c:0f:6a:56:80:5e:a7:
                    55:ef:9d:26:49:b0:68:b7:6b:2b:47:9f:dd:02:83:
                    7f:00:f3:e9:20:e9:3f:5c:76:b6:23:d8:b3:54:91:
                    5f:97:19:28:fc:41:73:5c:d3:cd:5f:34:74:a6:4b:
                    6f:5b:6e:f7:4b:9b:d7:9b:3e:15:ce:8d:8f:d9:a0:
                    6e:a0:9b:dc:b3:7a:d8:3d:ba:c6:63:68:d3:32:cf:
                    3d:d1:14:fb:e9:2c:f0:b1:8f:8c:e5:1e:e0:f5:a2:
                    83:69:ba:69:66:1f:e5:00:20:67:c4:44:c2:8c:6e:
                    af:d6:96:ef:55:b1:8e:5e:b9:8c:c8:3f:44:6c:20:
                    46:d1:ce:27:0c:bb:a8:32:38:ce:2e:9c:61:6a:c4:
                    e1:7e:e5:dc:bb:1b:5f:f1:a8:c3:14:40:96:3f:01:
                    a0:ea:1f:fe:09:c4:c5:2c:a6:67:8d:81:f4:08:8c:
                    75:4e:4c:78:ed:58:47:e1:97:ef:d4:4d:bf:71:22:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2F:18:96:9F:6F:C0:CF:ED:74:2E:60:96:5C:54:3A:F2:6A:AA:AD
            X509v3 Authority Key Identifier:
                keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:08:f4:b5:f0:9c:0c:64:4e:ff:ff:94:48:ca:d6:a1:dc:1c:
         dd:d6:56:42:d7:5c:b8:28:59:ae:b8:1e:ae:93:e3:bb:52:70:
         b3:b5:e4:9d:06:db:9e:4d:c9:c6:27:17:5f:0c:57:fe:3c:6c:
         9c:a3:00:73:13:02:e8:2e:94:cb:87:5e:64:44:ef:39:c7:87:
         7e:11:a2:75:12:2a:10:be:50:ca:45:7c:5f:51:bd:32:df:4d:
         dc:8e:dc:59:4e:35:ec:9a:13:cf:47:78:dc:4b:6d:05:87:69:
         3b:89:f1:c9:ad:c2:b1:31:b9:a3:db:a9:61:12:ad:8a:a8:6c:
         35:9a:2a:4c:10:b7:4a:7a:13:b2:6e:c1:cc:04:ec:bd:83:b1:
         35:54:66:90:5d:5c:4e:7c:3b:16:59:ae:0f:19:44:a6:bc:55:
         9e:8f:06:fa:8a:58:b6:ab:5e:d8:d4:c9:91:d9:54:e5:e9:58:
         2e:b5:ba:d9:39:4a:70:c6:3f:8a:04:ff:05:3f:ac:f3:0a:d7:
         1c:c0:6f:4d:bb:ca:fc:33:46:f4:2d:1a:90:8e:bb:f8:ef:f0:
         86:b3:1e:43:74:88:9b:19:64:fb:23:ea:99:78:03:da:97:df:
         54:fa:38:e6:47:89:63:70:37:45:bb:54:8a:36:7b:2e:fc:7d:
         fa:8e:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:10 2024 by rpki-client on console-ams.rpki-client.org