Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File:                     vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier:          30qc9mXjqpygH0Lrhuo5MOirsiys0pd3izFmL3lglSg=
Subject key identifier:   65:1A:C1:FB:FA:A8:20:10:7A:74:CA:B7:E5:87:13:25:3F:4F:79:E2
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer:       /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial:       01901DEDB5C1B9B18062211032FB26EDA2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number:          1098
Signing time:             Sat 15 Jun 2024 22:03:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:56 +0000
Files and hashes:         1: 5CEedrztj3k5GHCmEu0l7FD51HI.roa (hash: hADG4rMP+nwQD+pgzEv6L+QhbhQlU+76UlPm2jcrsjM=)
                          2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: 2TzSzpKCawRYinxP+444QMk0GdpP3ZvB4PiWp8wGtFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:b5:c1:b9:b1:80:62:21:10:32:fb:26:ed:a2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
        Validity
            Not Before: Jun 15 22:03:56 2024 GMT
            Not After : Jun 16 22:03:56 2024 GMT
        Subject: CN=651ac1fbfaa820107a74cab7e58713253f4f79e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:3e:83:b2:28:df:6f:94:21:0d:c9:ec:98:
                    1e:7d:ca:a1:c1:72:ec:75:a1:cf:f6:80:4c:89:1d:
                    8e:8f:47:25:9e:68:33:e2:89:69:24:36:54:2a:f4:
                    59:b7:56:98:99:84:21:91:f5:00:51:b3:2a:e2:fc:
                    9e:af:77:52:d8:e4:8f:08:85:99:cd:88:1f:3f:a5:
                    d4:c2:ff:96:9f:80:b0:7e:92:65:7f:14:23:dc:80:
                    05:74:17:9f:9e:a0:8d:dc:93:6e:8b:46:10:83:7a:
                    20:39:5f:99:e7:d1:c8:68:83:ec:75:5d:29:9f:39:
                    bc:d8:ba:d9:84:8a:6d:8d:74:f8:0a:23:8f:48:e6:
                    5c:82:73:26:36:04:d4:55:bc:2c:ad:c4:6d:94:5e:
                    5c:19:1d:39:fe:6b:38:d3:17:1a:dc:06:bb:02:32:
                    a7:9f:6c:88:ca:d2:1e:8b:7c:5e:bb:1b:46:19:0c:
                    7e:96:ad:0c:8e:35:78:61:93:87:3c:9c:ef:b0:b3:
                    24:6e:64:2c:5b:fe:da:6b:6e:00:9d:9a:88:16:e0:
                    12:02:ea:23:4e:22:0b:26:10:49:e4:9b:fb:8f:73:
                    ba:ed:68:b4:93:ce:98:27:4e:ab:10:8e:48:dc:67:
                    53:64:10:c3:16:3a:e9:94:16:aa:e4:80:f0:ca:82:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1A:C1:FB:FA:A8:20:10:7A:74:CA:B7:E5:87:13:25:3F:4F:79:E2
            X509v3 Authority Key Identifier:
                keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3f:4f:bc:b7:95:85:12:6f:8b:6c:34:b3:3f:a7:0c:1d:1b:
         d9:c3:1c:aa:4d:1b:98:75:45:08:3b:6e:4d:88:34:cf:8e:4d:
         48:1d:36:fb:7f:82:71:b8:d7:d9:e7:0b:0a:47:b4:72:9d:fc:
         59:a3:77:2c:62:c5:f9:be:ec:a9:80:d1:33:7a:82:80:2f:79:
         9c:07:e1:9b:a0:de:91:34:f5:f0:0a:cb:09:71:b9:36:80:05:
         7e:32:2e:d3:a3:88:98:06:13:19:0c:10:a8:b7:37:ba:4d:fe:
         1d:7d:17:5a:4c:6e:85:04:03:bf:d2:49:c3:8c:96:59:8c:44:
         19:5f:54:19:cf:bb:42:90:55:76:7f:30:c3:b1:64:26:c0:9a:
         42:ad:e0:8b:f6:bc:57:3e:e8:ce:c6:38:fd:84:6e:ba:93:ba:
         93:c0:6e:30:e1:dc:42:80:93:47:5b:b5:5c:e6:25:bc:7f:8c:
         cf:c9:3c:f4:9c:63:87:2d:ef:12:45:7d:4b:96:37:91:ee:bb:
         2a:e2:3d:22:4c:1c:e5:4e:d5:d7:bf:a2:fa:a7:a7:90:fc:a1:
         52:5e:0b:bd:ca:fb:7a:f8:dd:1e:be:98:4f:eb:62:dd:bb:43:
         dc:b5:22:bd:0a:21:ec:c2:a8:0d:8f:a0:ec:dd:4a:e1:a7:55:
         2a:59:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:39 2024 by rpki-client on console-ams.rpki-client.org