Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.mft
File:                     Vc0sjb8xEofr96RanBeoxxBWvOg.mft (raw, json)
Hash identifier:          wASyJofKBqxTW/MFZOG9gag9euCOXa87vLCpWdXIzQE=
Subject key identifier:   4A:35:68:4C:68:D3:08:2A:98:B3:96:86:4D:12:BF:69:90:DB:67:62
Authority key identifier: 55:CD:2C:8D:BF:31:12:87:EB:F7:A4:5A:9C:17:A8:C7:10:56:BC:E8
Certificate issuer:       /CN=55cd2c8dbf311287ebf7a45a9c17a8c71056bce8
Certificate serial:       01901F346E31D55CA9069A57A684132B31A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vc0sjb8xEofr96RanBeoxxBWvOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.mft
Manifest number:          069B
Signing time:             Sun 16 Jun 2024 04:00:47 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:47 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:47 +0000
Files and hashes:         1: H4Q223_SSiEtdK5YRcqoyHINohM.roa (hash: NyK0nIcM3fSRd6J6ohAuPSTTiGB8wGIKOdr6RYUahko=)
                          2: Vc0sjb8xEofr96RanBeoxxBWvOg.crl (hash: X2tHggvS9e6yVqe1pHfWtpgzeZA4vln0XdefJE3Fjew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vc0sjb8xEofr96RanBeoxxBWvOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:6e:31:d5:5c:a9:06:9a:57:a6:84:13:2b:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55cd2c8dbf311287ebf7a45a9c17a8c71056bce8
        Validity
            Not Before: Jun 16 04:00:47 2024 GMT
            Not After : Jun 17 04:00:47 2024 GMT
        Subject: CN=4a35684c68d3082a98b396864d12bf6990db6762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:f2:7a:17:2f:21:c8:2d:e4:78:20:7a:1f:
                    65:ee:e4:76:b8:38:2a:8e:07:44:7f:72:12:89:ca:
                    49:3a:4d:d7:3e:51:06:62:a7:68:b1:e0:f9:0c:6b:
                    e1:ca:37:21:8f:97:77:2c:a4:c5:f0:64:9a:17:17:
                    08:99:b4:48:6f:55:56:d8:99:f3:dc:71:d2:4e:45:
                    e6:84:67:13:92:36:78:87:08:85:51:3c:2a:95:2d:
                    b7:fe:5d:25:fd:41:2b:f5:9a:0e:33:64:3b:37:a8:
                    60:ea:e0:a1:96:15:73:94:57:78:1e:4d:1c:99:89:
                    74:e8:86:27:c1:2d:65:9f:ed:de:9d:58:de:b7:fa:
                    7d:f4:0a:cd:a4:d4:a1:4f:e2:84:f9:29:2a:98:93:
                    f4:f6:3c:31:08:12:39:ce:a9:fb:57:30:cc:ab:39:
                    cb:11:75:57:5a:c8:a9:91:e0:a5:a7:7e:21:98:32:
                    97:5f:81:f6:7a:fa:13:5b:52:c1:9e:db:2e:d3:4e:
                    38:83:68:27:3d:41:fe:a0:ec:f7:59:f1:74:37:08:
                    d3:f5:f1:69:0e:5b:4b:b2:81:8d:2f:13:02:67:2f:
                    14:bf:5b:1b:6e:37:c6:89:71:db:5a:9d:72:51:09:
                    50:10:59:03:83:ca:f9:ed:55:6c:9b:74:fe:3d:2e:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:35:68:4C:68:D3:08:2A:98:B3:96:86:4D:12:BF:69:90:DB:67:62
            X509v3 Authority Key Identifier:
                keyid:55:CD:2C:8D:BF:31:12:87:EB:F7:A4:5A:9C:17:A8:C7:10:56:BC:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vc0sjb8xEofr96RanBeoxxBWvOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:97:8d:3c:02:f0:29:62:cd:ba:6c:4c:c9:4d:2e:ae:a0:
         96:73:9c:a6:ee:78:57:65:59:70:fb:7a:9a:f5:76:fc:91:2b:
         fd:1e:36:3f:81:51:32:05:a4:54:7b:92:19:7c:a1:81:ee:a4:
         18:a4:39:0e:30:18:bf:04:75:48:9f:36:04:bd:f9:b2:95:48:
         84:14:0a:39:20:80:e0:6f:84:fb:70:7e:22:8d:18:9b:00:0f:
         02:5b:58:61:4f:e0:a6:0a:26:c5:88:08:ff:af:85:0a:11:21:
         9f:28:30:47:03:cf:4f:ff:85:ab:8e:45:2f:c0:3c:e1:18:c7:
         9d:33:a6:50:c2:a7:0a:b1:76:0d:71:75:2c:ea:10:bd:c9:32:
         93:64:f3:81:20:31:9c:fc:1a:41:39:2b:8a:0a:ed:99:07:b8:
         ca:45:c2:f3:e7:0e:3a:14:28:dc:ef:45:55:aa:03:4f:34:52:
         17:b8:3a:31:53:54:ed:80:d9:ce:be:6a:ff:52:33:88:12:ba:
         39:77:a4:10:03:9d:45:36:12:af:73:2e:f1:b6:cc:76:cf:af:
         83:05:2a:8c:b3:b0:11:fe:a0:6c:98:c2:c4:c8:dc:95:66:72:
         bd:b4:5c:99:7e:7e:3d:28:f8:da:c0:32:98:cb:81:75:6a:29:
         93:64:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:07 2024 by rpki-client on console-fra.rpki-client.org