Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
File:                     vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json)
Hash identifier:          ybwjrMLFhizhLJufw6lf+3tl+mnWqUmeSQW/LH3OoXs=
Subject key identifier:   66:1F:AE:00:C2:1B:45:7E:76:B6:88:83:EC:5A:93:52:6B:2A:A1:34
Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
Certificate issuer:       /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Certificate serial:       0193568940CBBE8375D89C4E202418D13946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
Manifest number:          0314
Signing time:             Sat 23 Nov 2024 01:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:55 +0000
Files and hashes:         1: oSMEcrBBd7TDfKAxMztKLNbZomw.roa (hash: Ec88srn/tIVbi1C1HNnX0czbDs3/mYNiDCqxxdPeEMA=)
                          2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: qQIpHdaDUTNUV0AQqC0TiEIDbb75b9/hGzxU0EGCcEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:40:cb:be:83:75:d8:9c:4e:20:24:18:d1:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
        Validity
            Not Before: Nov 23 01:00:55 2024 GMT
            Not After : Nov 24 01:00:55 2024 GMT
        Subject: CN=661fae00c21b457e76b68883ec5a93526b2aa134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:a1:4e:8c:9b:1e:eb:a2:2d:e2:17:9f:28:
                    8b:38:d5:54:da:90:53:88:e2:9d:87:2d:53:b5:94:
                    64:15:47:a0:b5:d8:92:72:fe:c1:c7:a1:5c:2f:0f:
                    00:76:dc:3c:7d:2c:a6:76:21:e9:4f:74:f3:e0:af:
                    83:86:be:64:b6:a9:9e:51:5e:09:a3:eb:ab:f0:b7:
                    d3:d4:19:3d:cb:9e:39:7c:9a:20:78:bc:7f:d2:73:
                    6b:6f:73:e6:da:6b:ba:bc:33:2b:fd:75:e8:51:da:
                    fa:dd:e0:bc:12:06:f1:11:88:d2:13:05:81:1c:21:
                    59:57:f5:26:c2:05:e0:3f:6d:5b:38:57:1d:97:8f:
                    e9:e9:79:b5:45:83:98:e6:99:27:20:7f:9a:6f:03:
                    fd:05:64:11:87:ae:3d:99:e7:66:e5:be:9f:27:19:
                    f7:e9:82:1f:de:4d:e7:4e:14:58:8b:0c:07:79:bd:
                    bf:f5:70:14:6b:16:74:81:e1:b0:b7:3c:d1:32:0f:
                    96:cf:0f:49:ec:f3:73:db:24:76:e8:8c:f6:c5:11:
                    d4:7c:91:42:22:c7:d1:b2:71:25:9a:d1:c7:d5:52:
                    bd:18:11:50:e5:2a:5d:87:1e:ed:01:32:35:79:20:
                    2f:29:91:e2:80:15:d4:d9:1a:94:1d:20:86:cf:93:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1F:AE:00:C2:1B:45:7E:76:B6:88:83:EC:5A:93:52:6B:2A:A1:34
            X509v3 Authority Key Identifier:
                keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:02:c9:94:60:85:78:70:32:96:4f:c9:84:b4:4f:0e:37:e8:
         e9:84:79:c5:f6:92:16:30:35:3d:65:94:3b:65:7c:09:be:68:
         1a:54:e2:ae:bb:c9:f1:ac:7f:e5:b1:74:ef:87:bb:69:a3:23:
         87:21:da:bf:fc:cb:51:72:ec:e9:d9:c3:7d:97:d2:9e:85:58:
         4c:3b:e6:7f:65:3e:4e:f6:cf:e7:d2:0a:26:b9:fa:35:22:1b:
         e6:73:d8:06:8e:bb:f0:73:5a:05:f0:99:39:91:b3:2a:0a:57:
         fa:2d:b1:e1:49:9b:db:47:80:c6:b0:8e:5e:73:ad:6a:74:3c:
         d5:52:24:92:89:0a:0b:cc:57:97:20:a9:0d:33:df:81:f6:38:
         a6:3a:67:4f:12:a2:68:28:03:bb:10:01:d7:8f:04:e3:97:52:
         a7:66:ae:00:c3:8c:74:b7:50:59:4e:52:c5:a6:4d:a8:06:7b:
         61:42:ec:db:66:0b:75:83:6d:a2:5f:46:4a:82:b0:fa:7b:6d:
         86:f1:d6:eb:f8:eb:aa:80:90:72:f3:50:09:1e:a7:7d:12:e8:
         fe:06:28:29:45:da:19:7e:98:e8:7a:9a:8a:15:39:0c:9a:27:
         fc:11:09:1e:6b:8f:2d:15:fc:a8:1d:c2:81:68:da:32:8b:d9:
         40:6d:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:01 2024 by rpki-client on console-fra.rpki-client.org