Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File:                     vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier:          Dp2t6lH9oRkW0O5Ukc+tH/E/FIcSdYiMwQLWIryyLZE=
Subject key identifier:   92:41:8E:42:3C:97:4C:30:98:11:7F:5A:42:E5:FC:29:D5:94:AD:4E
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer:       /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial:       0192395D7130BF1A7703A4B7F549A0786843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 16:01:18 +0000
Manifest this update:     Sat 28 Sep 2024 16:01:18 +0000
Manifest next update:     Sun 29 Sep 2024 16:01:18 +0000
Files and hashes:         1: 00ezFRoPq-YD_JIGpJpT7OK_lNU.roa (hash: VnffKYV07Oc5P15xud+Uy6AUA40x1JMBBtOm1bwiaTw=)
                          2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: 7wbLHIaA3jkjNDWrCnQDdJzu534tBJ1t+Y3cM3BEyes=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:71:30:bf:1a:77:03:a4:b7:f5:49:a0:78:68:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
        Validity
            Not Before: Sep 28 16:01:18 2024 GMT
            Not After : Sep 29 16:01:18 2024 GMT
        Subject: CN=92418e423c974c3098117f5a42e5fc29d594ad4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:4d:75:ef:e8:d6:aa:b5:6d:a9:62:00:81:
                    79:1d:f8:aa:b2:60:88:49:e9:48:38:fc:4c:23:3c:
                    88:10:21:96:e0:6f:03:49:28:fb:7b:1c:cc:10:fd:
                    1a:37:2e:7d:cb:11:69:2f:a9:ba:2f:42:d1:30:79:
                    a2:5f:f8:80:64:55:31:bf:78:eb:47:62:18:ef:0d:
                    67:ad:e7:9a:81:c8:a8:2c:70:c4:d9:57:3d:f0:65:
                    4e:17:3b:5f:78:17:02:2a:60:65:1e:00:1c:be:c7:
                    85:db:40:75:db:f7:8c:5c:6f:07:4a:42:ee:97:80:
                    36:b3:ba:3f:d0:10:ed:ec:74:0c:10:1b:7e:96:59:
                    ed:b9:b9:18:b5:5d:58:43:19:f4:71:1d:1b:7f:e7:
                    6f:df:af:0b:23:2c:ca:1e:ed:53:74:03:81:58:b2:
                    74:aa:42:c7:59:31:b6:94:a6:72:3a:8d:0d:d6:13:
                    50:63:86:24:85:08:14:d6:15:dc:ec:0d:97:68:48:
                    b2:7a:93:45:57:cd:cf:c6:60:3c:da:b2:b4:3d:4e:
                    ea:13:d5:b9:4e:19:b2:8b:d2:de:ab:08:13:cc:e1:
                    10:bc:6f:02:e0:f8:04:b3:2c:5c:c5:12:a3:2e:13:
                    5c:ae:f0:e9:94:7b:76:f9:47:0b:ab:6d:be:13:27:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:41:8E:42:3C:97:4C:30:98:11:7F:5A:42:E5:FC:29:D5:94:AD:4E
            X509v3 Authority Key Identifier:
                keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:9a:ab:ba:e2:83:43:5c:89:fe:ca:21:21:f0:d6:17:53:
         9e:c4:98:ca:b8:0a:8b:24:e8:af:a1:80:88:b7:32:0b:fd:43:
         16:88:bc:d6:ba:b2:20:cb:ce:04:33:0f:f4:01:c5:33:71:48:
         34:a4:4b:43:55:7f:fc:7d:5f:ce:64:de:61:b9:07:92:f3:48:
         45:48:8d:b5:cf:2d:71:df:87:d5:2d:19:63:1f:a4:73:0e:fd:
         1d:b8:9e:18:33:46:34:3d:62:b1:1a:40:de:e9:b9:6d:60:5d:
         f5:4c:c9:25:0a:cf:68:94:15:67:4f:b2:86:82:45:98:b5:eb:
         d9:3a:35:b4:87:5f:c7:81:a2:21:ac:bf:75:8a:72:ed:20:28:
         a7:be:73:94:2c:f5:f4:3b:5b:b4:b0:15:9a:65:ff:e5:cb:05:
         06:9b:e3:78:4b:7e:d1:62:a9:fa:1b:74:2c:63:1e:51:ce:05:
         ee:1c:4e:bd:3a:e2:ec:d3:c5:b4:d4:e5:44:71:d3:22:b1:db:
         27:b5:b0:29:92:98:09:bf:03:bd:46:7f:75:1a:1d:4a:72:9f:
         c7:ea:af:6c:0b:93:e6:d2:e9:24:a3:f4:26:9e:85:63:a4:d0:
         8d:19:65:34:7c:a3:ce:2b:4b:f5:1f:56:f8:68:a0:7f:e8:e7:
         98:bc:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:19:40 2024 by rpki-client on console-ams.rpki-client.org