Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File:                     VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier:          DfaqcrKCC84H/j9q+FnAOVJMrFatknP38Lqo4Bjqpu4=
Subject key identifier:   E8:3A:80:0D:2F:49:3D:C5:20:B7:E6:F8:AD:6B:88:C8:5C:D6:C6:46
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer:       /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial:       0193579BAAE4168169F46BB028718D3253EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number:          01CD
Signing time:             Sat 23 Nov 2024 06:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:39 +0000
Files and hashes:         1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: /f/cC5kFbXtqYkAb5k6VXQdwg/qIrfQNvt15XaSLfrY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:aa:e4:16:81:69:f4:6b:b0:28:71:8d:32:53:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
        Validity
            Not Before: Nov 23 06:00:39 2024 GMT
            Not After : Nov 24 06:00:39 2024 GMT
        Subject: CN=e83a800d2f493dc520b7e6f8ad6b88c85cd6c646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:f2:d5:2c:b0:0c:b0:3c:85:6b:7c:25:37:
                    b8:d1:65:7a:01:04:7e:d2:7f:62:25:f8:91:0a:d7:
                    ab:df:9f:1b:05:8a:83:da:3d:b0:e0:b6:35:79:30:
                    c9:64:d6:6e:f5:6d:46:26:6c:fa:1f:1d:7c:f5:31:
                    00:4e:12:a1:86:ee:c7:43:b0:c0:18:13:ac:18:3a:
                    f1:46:db:c8:c3:44:e5:88:39:b8:80:63:63:03:93:
                    de:e2:90:50:37:c9:cf:fa:6e:b0:5a:10:0c:53:3c:
                    a4:42:99:e5:de:1d:a6:7b:be:40:68:fc:c4:37:c4:
                    87:6b:6a:5b:88:bb:2e:7a:5e:7d:68:1e:e5:9c:d5:
                    ca:f8:a4:e1:e3:94:1b:46:3b:68:75:de:a1:c1:a5:
                    7c:b8:20:ff:c6:37:d0:5d:65:f2:44:ef:09:07:51:
                    89:80:e3:e2:3e:1b:44:4e:f3:84:23:95:46:72:1f:
                    31:b5:14:4a:43:73:7d:28:6a:2d:37:55:f0:88:97:
                    6f:15:d0:37:63:aa:e9:fc:82:f4:7c:19:66:77:05:
                    89:83:63:44:7d:df:be:c1:3b:64:35:2c:d4:18:87:
                    8e:c1:93:1c:eb:6f:4d:4c:b5:d8:d3:8d:f8:0a:c3:
                    c5:1f:6d:bf:34:32:89:01:25:82:48:35:06:d2:8d:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3A:80:0D:2F:49:3D:C5:20:B7:E6:F8:AD:6B:88:C8:5C:D6:C6:46
            X509v3 Authority Key Identifier:
                keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:13:6a:a2:ca:05:22:81:3a:86:7e:fd:62:d0:4b:0d:74:
         18:06:c0:a5:be:56:c6:ac:b8:f0:3b:2b:67:12:88:8d:84:46:
         37:5c:2f:d4:a9:21:c2:cc:80:10:91:0d:6e:a3:16:06:fa:d3:
         19:55:af:30:49:cc:85:a5:a8:71:7a:d8:7e:99:6e:61:39:a5:
         2f:21:20:c2:7b:4a:85:87:7e:2e:65:b9:1c:7b:fd:39:0f:90:
         61:c9:ca:a9:d5:1e:31:58:10:5c:53:8d:d1:a1:15:63:96:b3:
         3a:86:d4:3f:7c:b7:94:81:ae:ae:17:87:46:5c:ff:c5:3e:d5:
         5a:5c:4d:24:36:3d:e7:98:de:78:06:84:1d:df:d5:dd:25:f4:
         c8:24:83:44:88:97:2e:92:80:2e:f6:0f:b8:31:71:b2:9c:df:
         b8:e4:2e:f0:56:86:e2:ff:c9:06:c2:96:e8:7a:74:00:13:2b:
         ff:33:30:ea:21:1d:86:c4:18:07:c4:ff:5d:91:44:dd:b0:3e:
         2a:66:35:90:fa:fa:56:54:bb:89:01:a2:5c:e9:0b:77:47:7d:
         bf:31:70:3a:b7:4c:cc:c9:34:7b:a3:1d:54:ab:41:4a:20:cd:
         eb:8c:b0:f5:af:9b:d1:0e:f0:e1:34:14:8b:1a:9c:2f:9c:2f:
         93:be:b9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:54 2024 by rpki-client on console-fra.rpki-client.org