Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File:                     vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier:          LLcvR8MOsFs3xWWry6Iqxwx3Ms1M2iWRJN+voWFic6U=
Subject key identifier:   48:1C:17:F2:40:7D:FA:D0:70:0B:44:F0:13:62:76:AE:94:0D:11:5A
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer:       /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial:       01901D468163487EC83F297672AA9BE36BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number:          1156
Signing time:             Sat 15 Jun 2024 19:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:18 +0000
Files and hashes:         1: 1M0fs8Ru2Vxpmw5C7pVWGaVK7xI.roa (hash: xzzsuqqg/1GhRDZ5kHqyxkZvbkKgqULisM9EADRyrG0=)
                          2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: HxjTWRWOEl7fssgKpUfo/u/oGze3+7/MJ1tcEEGGZEw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:81:63:48:7e:c8:3f:29:76:72:aa:9b:e3:6b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
        Validity
            Not Before: Jun 15 19:01:18 2024 GMT
            Not After : Jun 16 19:01:18 2024 GMT
        Subject: CN=481c17f2407dfad0700b44f0136276ae940d115a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f6:0d:e6:40:f6:ef:2a:41:88:c2:1a:52:a5:
                    fb:11:f8:9e:9c:4d:49:92:bc:96:4f:5a:97:e2:a9:
                    19:04:85:cd:b1:1d:f3:9b:8a:1c:2b:81:a1:5d:7b:
                    37:1c:db:5c:34:77:8c:dc:31:ce:c5:0c:43:b7:85:
                    23:66:7b:e7:47:3f:b1:6c:9c:1a:b7:b9:5d:c2:ad:
                    26:3a:ba:5d:09:74:b8:a9:ad:56:19:90:fb:8f:96:
                    cf:5e:76:e0:1e:37:ab:1c:77:02:b3:85:3f:78:d6:
                    96:2d:c7:9c:b3:0b:55:2a:f2:77:61:c6:f5:6c:4f:
                    44:1e:02:7b:58:41:81:ca:46:01:32:23:dd:c2:c9:
                    0a:22:3b:ab:e0:49:d2:10:a6:b2:69:85:81:b5:4a:
                    71:6d:d6:71:0a:85:ae:9e:49:c2:9d:e2:2c:45:12:
                    a4:e2:a3:45:7e:a4:fa:5d:f2:90:b2:68:7e:27:c8:
                    d6:f7:49:fb:93:de:c1:8a:08:42:db:bf:53:65:90:
                    7d:58:23:98:83:1d:bc:89:07:8e:00:00:17:be:5c:
                    70:93:f1:2a:4b:5b:21:e7:f0:9c:3c:92:8d:30:cf:
                    72:3e:aa:f8:97:1a:8e:20:a6:7d:e9:d2:4b:05:7f:
                    c8:5b:24:6a:47:06:85:16:d4:46:97:8f:7a:bd:86:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:17:F2:40:7D:FA:D0:70:0B:44:F0:13:62:76:AE:94:0D:11:5A
            X509v3 Authority Key Identifier:
                keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:a6:ec:04:92:7e:30:c7:d3:9b:57:b7:da:fb:23:36:fd:
         d6:ac:77:56:af:00:6b:47:0e:2d:ce:d9:eb:67:79:5b:23:4f:
         ec:34:37:10:59:ff:ec:68:92:06:3d:75:6c:fd:1d:92:a9:3b:
         e9:dc:4c:11:4d:85:7d:27:cc:ba:23:74:d9:ab:58:51:43:39:
         eb:b8:3a:53:85:dc:fe:05:52:3f:87:0e:95:fb:93:5f:aa:1b:
         1d:ed:0d:a7:8d:bd:f6:d3:42:fe:fb:33:32:cf:1d:fd:79:15:
         f1:74:81:04:fb:78:59:95:2c:e6:da:95:27:80:a3:f9:19:ad:
         e4:8f:c1:e9:ec:65:ff:28:52:46:4b:78:d7:7c:a8:89:96:4c:
         3b:96:01:44:11:0e:2c:fc:16:82:c4:5b:13:ae:05:6f:97:7a:
         fe:b4:fd:d5:37:ce:7a:ec:87:c2:a6:01:d8:0b:76:ab:b9:39:
         c9:75:55:d8:88:cc:1f:ae:6c:54:3b:0e:f2:fe:b8:20:29:ae:
         f8:fd:fe:82:a6:41:d6:de:78:9d:61:64:dd:14:69:21:bb:97:
         38:44:f4:27:5f:e5:b1:d2:3d:2d:2e:b9:af:75:9b:2a:d2:fd:
         c1:a9:96:85:43:9b:1e:a8:73:6c:af:39:7e:45:2d:eb:74:46:
         82:cd:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:55:10 2024 by rpki-client on console-fra.rpki-client.org