Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          LTRaSUDxzm64LCxt51RA5NzR3IsAW6m8LRNHaCSzNYs=
Subject key identifier:   D8:AE:F1:C6:16:83:0C:EC:DB:6E:67:57:C6:B8:D1:E0:54:7E:A4:BF
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       01901F6B3D539BFA473CC00AF0BE0DCAEDE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          01F1
Signing time:             Sun 16 Jun 2024 05:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 05:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 05:00:40 +0000
Files and hashes:         1: Tz9DFUQ81o4ILZ4GHfDFbxliX2M.roa (hash: Y8wVNY5QD1pW/a+6DGP5FlQ1grb8hf1mNtMWzsEoN44=)
                          2: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: a5vUjlBu+hg/V06p6cHT1j5RMrCwEhk1Yqo6ZtEw/3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:6b:3d:53:9b:fa:47:3c:c0:0a:f0:be:0d:ca:ed:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Jun 16 05:00:40 2024 GMT
            Not After : Jun 17 05:00:40 2024 GMT
        Subject: CN=d8aef1c616830cecdb6e6757c6b8d1e0547ea4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:be:a5:f7:60:8e:63:dd:93:c2:63:55:39:fc:
                    6b:24:7a:1f:c6:6d:b2:e4:be:7f:ec:91:4e:ab:57:
                    0d:b8:a9:0f:14:45:b6:94:1b:1a:1c:9a:a5:c7:97:
                    da:91:b9:d8:35:e3:01:36:13:a6:37:75:c1:e9:32:
                    35:47:9b:5b:92:c7:16:cc:27:5a:3a:78:8e:b1:f0:
                    15:ff:89:af:25:10:00:d6:86:85:a6:e5:13:e6:d8:
                    60:fe:9c:5a:35:ba:38:c8:54:3c:de:84:54:67:db:
                    79:a9:68:12:39:01:60:f0:7e:46:30:9e:b5:30:09:
                    78:91:87:a5:91:13:01:36:ad:ae:55:eb:fd:64:aa:
                    29:c3:39:98:7f:e8:81:25:82:24:5e:2e:76:31:f3:
                    91:e6:e8:ba:98:0e:0f:bf:ef:be:a2:01:ce:a8:41:
                    ef:f3:e2:6a:dd:9d:9b:d5:63:4f:11:58:6f:27:35:
                    5d:2f:a0:1a:b0:7e:1e:4d:40:d4:7f:f3:66:fa:6e:
                    8c:ac:d9:32:dd:b1:8a:97:0b:61:d4:2b:33:e3:44:
                    63:04:62:e3:d8:51:51:3a:d7:f2:7f:99:3e:27:37:
                    a2:1d:37:c9:4e:42:16:d7:f7:79:02:c8:df:66:55:
                    19:ca:bb:46:c7:e6:89:c3:fb:a9:eb:60:ef:24:6c:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AE:F1:C6:16:83:0C:EC:DB:6E:67:57:C6:B8:D1:E0:54:7E:A4:BF
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2d:bb:a6:cb:4f:75:6a:68:ba:22:c0:aa:a0:1c:31:d9:7f:
         96:94:99:0d:a9:68:71:9b:f8:5b:29:57:fc:cb:53:1b:61:34:
         1a:a5:f4:e9:23:8a:67:2c:fe:10:0d:6b:9e:66:c6:fb:db:50:
         dd:c4:83:bc:b0:f4:4d:8c:9d:ba:8a:0e:99:82:a0:f9:0e:42:
         7d:23:ab:2f:da:2d:74:44:1d:cf:81:c4:08:ba:ef:00:82:83:
         74:41:75:9f:5b:f9:fe:5a:c6:fc:b6:69:44:8e:79:88:38:31:
         d9:ce:48:90:ac:45:3c:25:c1:eb:06:be:72:da:69:e4:0f:8c:
         88:d3:db:10:8b:ea:28:45:e7:f3:35:5f:8e:13:0f:da:a4:cd:
         a3:51:9a:58:28:80:22:94:7d:99:b5:3a:92:90:6d:b0:83:5f:
         fb:aa:44:aa:e5:76:a1:8c:2f:15:12:97:68:a4:7a:60:99:ea:
         ce:b9:1e:a6:9e:22:21:23:df:4d:ee:88:5e:b0:c6:36:7d:ae:
         00:4d:a2:94:b3:9e:ca:e9:be:2a:17:fa:08:4a:54:1d:fa:d0:
         1f:d4:59:12:10:66:de:77:e4:32:7f:5c:c2:4b:70:62:bd:40:
         c5:24:fe:22:0b:02:92:eb:59:51:e6:78:05:af:99:73:2f:35:
         74:31:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:33:23 2024 by rpki-client on console-ams.rpki-client.org