Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File:                     VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier:          8H9jK4g3ZU94Wwi2msrzMT5BGeLFCrcVslxtlAYkyPg=
Subject key identifier:   A8:52:B5:1C:B4:72:1F:D1:2B:C3:D8:E7:C6:A5:67:CE:D0:5F:72:4C
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer:       /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial:       01901E8F82385E95355930F4BA5F8FE6285F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number:          075B
Signing time:             Sun 16 Jun 2024 01:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:39 +0000
Files and hashes:         1: T7KMFg8StGihvVagpjRGwWRhrug.roa (hash: b5Ma5VvJPcCZVvgCkc8D08+xzFGoHxq96VSAVgslE30=)
                          2: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: Zqi4mgtJiukIYdPPG6YJbCvu5XvhYsjy2l2/qgVQLdA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:82:38:5e:95:35:59:30:f4:ba:5f:8f:e6:28:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
        Validity
            Not Before: Jun 16 01:00:39 2024 GMT
            Not After : Jun 17 01:00:39 2024 GMT
        Subject: CN=a852b51cb4721fd12bc3d8e7c6a567ced05f724c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:12:8d:37:96:20:7c:8c:96:84:b7:b5:45:
                    a1:ed:ee:21:37:c4:f4:53:cf:ce:18:33:bd:2f:8a:
                    a8:89:b0:af:28:51:13:37:a2:b8:4e:ca:2c:aa:a8:
                    a5:e0:e6:47:92:bd:89:83:bf:56:35:e9:6d:0d:6d:
                    cf:0e:96:58:fe:f7:19:f1:2a:66:f4:f9:77:5c:74:
                    fe:52:dc:3d:42:ee:5d:5d:9f:be:1d:19:e5:73:e1:
                    1f:6d:53:64:5c:cb:c7:ee:88:2c:e1:de:0f:51:d0:
                    0c:ce:3a:c1:16:9b:23:14:70:74:2b:64:f6:c8:ad:
                    7a:80:ff:26:8d:82:7b:22:5f:d2:89:00:fb:ca:e1:
                    81:7c:95:a2:fd:fd:c0:b8:05:52:c2:6a:a9:c3:01:
                    74:27:ca:80:06:91:c2:de:68:92:e4:38:52:10:71:
                    fe:ed:46:78:0d:54:13:bb:53:65:55:4e:13:0a:bc:
                    7b:05:b0:6e:aa:3a:9d:ee:15:a3:3b:d5:e1:32:53:
                    f4:7c:15:83:b9:4f:5b:47:64:ae:74:37:cc:c5:f6:
                    be:97:37:60:44:ac:e0:30:02:1f:d1:3d:df:a9:b8:
                    92:bb:3f:96:57:d3:77:27:e5:32:e0:41:a7:f3:f0:
                    0d:26:e7:34:5b:d0:c5:19:4b:b4:73:5c:bd:17:2e:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:52:B5:1C:B4:72:1F:D1:2B:C3:D8:E7:C6:A5:67:CE:D0:5F:72:4C
            X509v3 Authority Key Identifier:
                keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c3:f6:02:91:6f:3c:68:4e:92:18:f9:ca:53:13:61:5e:ff:
         48:28:e7:92:8b:cc:96:cb:40:7d:f7:6c:04:11:cf:78:d1:63:
         fa:bf:8a:72:45:23:50:29:8f:0b:96:f7:72:0e:3b:f5:fa:39:
         90:9a:c6:40:2e:b4:6e:55:c3:db:ce:ee:4c:2a:c9:92:90:6b:
         c4:e1:e0:30:3f:dc:f3:2b:06:28:da:95:3a:bc:d9:cd:37:7f:
         7b:23:a7:79:97:33:6f:0e:da:64:b8:c4:bd:89:7e:c4:4d:1e:
         80:c4:2a:ab:50:13:10:6c:ee:ec:36:4f:76:82:7a:bb:01:1b:
         2e:dc:4f:21:1e:b7:a6:1e:93:31:58:b2:d8:6d:7e:ea:73:4d:
         e8:7f:2e:63:f9:99:e7:cb:38:00:ff:04:b5:b2:da:9e:1a:39:
         5b:fd:e2:80:07:af:21:46:f6:34:3a:54:29:ca:30:c1:7d:a3:
         3d:cf:67:13:f7:97:50:4d:8e:17:e6:17:4c:d6:b7:71:07:0e:
         9b:6e:e8:d9:22:c6:80:5c:98:70:76:08:51:dd:c5:6b:3d:b9:
         ec:8b:b0:70:44:84:e7:6c:70:b4:8b:ca:df:c6:31:27:7a:a9:
         74:ff:e6:ed:3e:cf:a6:13:02:66:04:a9:bc:38:4a:c8:d3:21:
         c9:e4:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:14 2024 by rpki-client on console-fra.rpki-client.org