Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File:                     VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier:          NpJ0ajYj+CYzw/ABnjcoJSCMHkv5HQaH08SqlXkbJy4=
Subject key identifier:   2C:55:03:11:1E:9B:DA:EF:29:29:AA:66:3A:6B:F2:18:5E:88:06:F6
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer:       /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial:       01901E9016D5B28E494CF12F9BA1BF0D921A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number:          030C
Signing time:             Sun 16 Jun 2024 01:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:17 +0000
Files and hashes:         1: 64vfCO4QFqKJ5KmJXi_HetaFXVc.roa (hash: 6ezupoKrftKHi8nkJOdbuFxPjzDU+lBEdzROrTkFqrs=)
                          2: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: RriaQgbLTEi4YZmS8OSf+X9zKFfdF2I+TNUO6JrSgng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:16:d5:b2:8e:49:4c:f1:2f:9b:a1:bf:0d:92:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
        Validity
            Not Before: Jun 16 01:01:17 2024 GMT
            Not After : Jun 17 01:01:17 2024 GMT
        Subject: CN=2c5503111e9bdaef2929aa663a6bf2185e8806f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:64:e9:33:64:be:bb:33:17:38:8f:cd:99:
                    26:8a:a5:ea:d4:c1:48:8e:05:6e:09:9f:13:fe:ec:
                    49:f6:45:9b:17:6b:44:01:dc:4b:5d:1b:07:0d:26:
                    6f:c0:2b:08:dd:19:97:0d:74:44:6c:f3:0e:8b:4e:
                    b0:80:8d:57:b7:a8:20:fa:df:1b:84:eb:2d:3e:19:
                    8b:1b:cb:a2:46:30:be:19:cb:01:38:de:a7:c7:2b:
                    f2:c6:bd:0f:2d:a4:d1:20:50:93:4d:cc:a6:cf:64:
                    ad:e1:58:92:b7:bc:38:bb:32:ee:1d:9b:06:2b:8a:
                    ea:12:53:60:d6:c7:34:e8:0a:84:e8:30:da:56:20:
                    fa:73:c1:fc:c0:ef:06:66:39:63:a4:35:0e:bb:74:
                    e3:4a:e9:31:f3:d6:06:c7:55:29:e8:c9:ea:ea:73:
                    22:88:a5:de:e9:c0:20:e2:5a:75:ad:aa:e2:b6:61:
                    68:ff:c4:21:4c:a5:b4:b2:fa:fd:30:9b:d4:d1:ef:
                    a0:03:ad:99:0e:5e:66:ab:6c:89:8e:0f:d1:c3:44:
                    b0:8c:04:dd:a7:f3:d3:2b:70:90:7f:f9:40:b3:3c:
                    87:68:4b:66:a5:3d:1b:ef:62:42:66:60:c7:57:ae:
                    eb:2b:a0:20:7f:49:f2:19:4a:60:01:a9:e6:2e:bf:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:03:11:1E:9B:DA:EF:29:29:AA:66:3A:6B:F2:18:5E:88:06:F6
            X509v3 Authority Key Identifier:
                keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:75:be:af:2e:7f:55:12:aa:20:a7:48:fe:f0:e7:23:fa:
         9a:2f:f9:ee:39:22:73:4f:41:a0:14:56:cc:c0:6e:f1:78:93:
         69:c4:62:45:8a:7f:da:d9:e2:ff:f5:6d:76:45:7c:74:eb:87:
         cf:0e:c2:c8:37:d9:5d:83:09:64:94:99:f5:c3:70:06:a6:ea:
         fe:c9:e1:1e:f4:66:54:cf:16:e3:be:6e:31:3f:39:5f:31:8b:
         d0:f2:dd:c1:ff:33:77:6f:73:ce:7c:77:92:d2:cf:1f:da:d4:
         3d:dd:c1:7a:76:f9:50:19:6b:72:e6:a3:fc:cc:f6:45:a1:90:
         90:a2:0a:d5:00:d2:fe:a6:30:61:f8:95:a2:42:b3:f2:ec:05:
         86:c3:b2:9c:58:65:c9:57:aa:51:d6:28:a0:3b:aa:6e:5f:94:
         33:b2:3a:f7:db:0c:a4:df:d5:4b:73:2f:02:d0:bd:b0:74:db:
         19:32:15:95:a5:4f:ed:8a:d3:ae:31:ce:2d:9c:d1:68:17:91:
         15:5f:7c:a4:13:47:9a:7c:ca:25:19:28:f0:b8:94:9f:b4:a0:
         7f:14:23:e0:e8:23:98:a1:74:8e:fe:52:ef:f2:bc:22:73:21:
         3b:7b:68:71:17:9a:31:f2:1c:6a:50:4f:15:f5:dc:7f:fa:a4:
         e6:f7:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:37 2024 by rpki-client on console-fra.rpki-client.org