Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File:                     vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier:          9xZzrSPwf1IEINepJuDiud+2t79w4LDk9u855gQwFu8=
Subject key identifier:   BA:4D:03:C8:24:2D:4C:A8:0F:C7:DA:CB:A6:9F:09:3A:6B:1D:8B:2F
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer:       /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial:       01901DED421168C23ED8B84FC25A2B873908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number:          0B99
Signing time:             Sat 15 Jun 2024 22:03:26 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:26 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:26 +0000
Files and hashes:         1: hTNK2icVxU-8_PmpqPhWd2E06UI.roa (hash: OCStp8XsHHd6WpEuw1np1vOjzNgXUeLV/VUsKHUQ2GE=)
                          2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: I4X8my2+kzJr0+YmA3y2gTgIYyVnO9OGQ84dc2N0/bc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:42:11:68:c2:3e:d8:b8:4f:c2:5a:2b:87:39:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
        Validity
            Not Before: Jun 15 22:03:26 2024 GMT
            Not After : Jun 16 22:03:26 2024 GMT
        Subject: CN=ba4d03c8242d4ca80fc7dacba69f093a6b1d8b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:b9:90:47:50:ee:2c:08:00:9f:69:67:42:
                    df:dc:c0:74:00:0c:80:4a:9c:66:69:e7:93:71:cd:
                    e8:9f:f6:8b:9d:d4:d7:ab:5e:0a:94:a2:85:a8:3b:
                    72:a9:8a:d1:c8:e1:a3:bb:24:10:e8:fb:bf:ce:71:
                    7b:ac:6c:c6:88:14:ea:30:e6:de:9d:69:8b:be:90:
                    af:31:f5:21:7e:e8:a9:ad:b1:bf:38:ea:3b:89:dc:
                    28:bd:3c:0a:53:a7:01:a1:a1:74:fd:94:0d:4a:61:
                    37:65:a3:6d:37:bc:d2:69:71:d2:04:b4:a8:ab:9e:
                    5f:8b:ef:f4:e4:f5:f6:1b:5e:36:ce:00:9c:2c:fe:
                    49:6f:be:4b:5b:c4:92:d2:0f:8a:a5:36:99:c1:67:
                    5d:e3:7b:3f:50:10:ab:0b:32:bf:da:87:67:ff:fd:
                    7b:46:d7:e7:c7:ad:25:27:2c:85:ab:bd:a5:ca:01:
                    0f:e4:dd:4a:69:04:be:d0:46:1c:c6:21:47:fb:bb:
                    d6:16:b1:ed:7b:31:f6:10:99:58:8a:a6:35:2e:5a:
                    2c:95:11:30:80:e8:61:e4:cf:33:57:1e:e5:0b:97:
                    4f:c9:71:06:7f:24:cc:b3:04:aa:86:7c:a4:01:a7:
                    25:5c:a5:24:21:97:b2:3d:33:cf:ba:2e:db:ab:8b:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:03:C8:24:2D:4C:A8:0F:C7:DA:CB:A6:9F:09:3A:6B:1D:8B:2F
            X509v3 Authority Key Identifier:
                keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:fa:61:68:6e:21:38:84:e6:e4:c4:04:80:6f:53:c6:da:8d:
         20:b8:f4:d8:8f:73:13:95:5e:a4:07:d9:33:87:3d:8e:9f:f4:
         f2:e4:5e:a1:ee:b4:0b:8f:ff:86:0e:c6:44:cf:e8:4a:fc:f6:
         a1:dd:97:69:d0:16:8e:c3:53:9d:5d:5a:21:8b:90:30:70:6a:
         5b:82:ae:ac:dc:1d:81:17:1c:01:ec:95:28:49:cd:8d:5d:83:
         e4:b4:0d:ca:b0:75:9e:29:27:19:55:fb:e8:5d:f5:39:8a:46:
         e9:b9:db:89:14:b9:b2:b9:8a:cd:a7:cb:a0:ad:88:94:23:cf:
         c9:e5:13:47:e6:31:d6:0a:07:80:28:ed:cb:80:89:01:e1:4e:
         fe:12:97:be:0f:e7:29:64:bb:15:19:bf:ce:57:29:f8:75:f8:
         bc:c3:16:8e:8f:15:94:c0:31:fa:9f:2b:ab:3f:a8:67:b2:7e:
         cb:74:72:a1:62:1d:ff:8d:f6:c0:35:a7:2f:f8:5d:c7:a3:21:
         7f:ce:58:da:31:b8:ab:33:a6:4a:75:c3:00:a6:a0:86:97:34:
         a3:e2:ba:90:ac:8c:64:0a:98:7a:dd:59:64:16:42:f0:42:11:
         fe:a7:5d:b3:95:08:cf:62:f3:ab:6e:46:94:99:98:40:a6:48:
         89:b8:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:11 2024 by rpki-client on console-ams.rpki-client.org