Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File:                     vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier:          rOtdCe6fIwCzFK/yuxHcNBAKPFAXdWpsI//3bbYS6wI=
Subject key identifier:   93:3D:B1:40:5F:99:45:62:7C:7B:E5:E2:A6:8B:18:C0:39:7D:68:2F
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer:       /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial:       01903AE3B4C993003C177B35F5095746C999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number:          10A7
Signing time:             Fri 21 Jun 2024 13:01:59 +0000
Manifest this update:     Fri 21 Jun 2024 13:01:59 +0000
Manifest next update:     Sat 22 Jun 2024 13:01:59 +0000
Files and hashes:         1: 5CEedrztj3k5GHCmEu0l7FD51HI.roa (hash: hADG4rMP+nwQD+pgzEv6L+QhbhQlU+76UlPm2jcrsjM=)
                          2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: GjNJ6qgZuYkOEGMMN85kKiNEU1D3R/HesOpHrnuyWEQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:b4:c9:93:00:3c:17:7b:35:f5:09:57:46:c9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
        Validity
            Not Before: Jun 21 13:01:59 2024 GMT
            Not After : Jun 22 13:01:59 2024 GMT
        Subject: CN=933db1405f9945627c7be5e2a68b18c0397d682f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:a3:ed:7f:49:df:9c:e6:20:06:f0:dc:c9:
                    34:28:94:c6:91:a1:98:68:15:ab:e9:78:27:91:a7:
                    0e:77:59:03:be:43:bf:ec:cd:28:46:33:56:46:a0:
                    8d:84:f1:14:da:68:93:c0:96:10:bb:92:bf:8a:69:
                    78:ca:17:f1:8a:00:51:79:ff:6f:f7:58:54:6a:cd:
                    07:b8:fc:25:d5:6b:b1:99:7e:b8:9a:c0:f6:b4:80:
                    0f:18:05:bb:f4:f3:6e:3a:ec:4c:6e:13:8b:2e:ba:
                    ff:ad:e2:a2:6e:62:2d:f4:79:4f:5f:0c:70:cd:ef:
                    51:4b:44:ca:59:0c:56:69:2e:b2:41:32:da:b6:6a:
                    f2:5f:b8:de:10:b6:ba:d8:52:cd:a9:e9:d8:a7:8c:
                    07:4a:76:3d:6a:a3:02:54:4a:51:fe:16:42:17:d6:
                    5a:7d:ab:fb:8d:23:12:e2:71:6f:72:c6:77:b7:c0:
                    ed:89:02:d2:50:0f:f6:06:b3:d5:18:3e:25:80:48:
                    88:e7:b6:70:7b:c1:b1:7c:df:86:96:56:a9:eb:6c:
                    ca:58:68:3b:65:8a:32:58:45:7c:a1:36:b3:9b:18:
                    5c:29:51:23:a1:47:97:26:b4:29:a8:a3:96:0a:be:
                    02:21:ab:99:83:de:79:60:de:d7:b2:3b:4e:df:b2:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3D:B1:40:5F:99:45:62:7C:7B:E5:E2:A6:8B:18:C0:39:7D:68:2F
            X509v3 Authority Key Identifier:
                keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:44:95:16:51:cc:dc:34:d3:e8:6d:5b:9f:36:0b:29:2e:ec:
         af:8c:e7:58:ef:b2:c0:22:6d:1e:90:30:93:e4:4a:d7:30:bc:
         bc:f5:65:80:f7:b3:31:d1:63:f4:12:23:d9:2d:79:a9:eb:85:
         31:a2:4a:00:f1:cd:e7:ba:71:fc:22:83:97:91:ab:6c:08:e6:
         00:d4:f9:a9:80:d3:b3:b7:26:81:15:bd:35:b8:2a:16:8e:86:
         18:39:77:3e:2e:bc:a8:21:3c:0b:9b:8f:d9:fb:c3:3a:34:d1:
         29:9a:3c:1f:b4:0a:3a:2d:38:67:da:e1:66:5f:b4:4d:7c:14:
         81:44:95:82:2a:78:bc:a1:b3:76:68:e2:8e:fa:5d:f0:6d:29:
         06:a8:e8:a1:5e:c4:b7:9e:2d:23:7f:ee:95:7e:23:f8:36:12:
         b2:51:34:72:20:71:b4:4e:38:cc:8e:3c:d1:b8:cd:5c:9e:e0:
         67:dc:69:dd:df:3c:ee:99:8f:54:4f:6b:0d:45:f2:50:9a:5a:
         42:7d:37:ef:dc:dd:1b:a0:4c:d0:b4:e2:5f:b2:c3:81:67:ce:
         43:c8:2a:6d:0f:de:64:44:59:b7:7a:cc:37:d7:d1:00:a0:9b:
         98:93:be:df:45:c8:64:1c:cf:29:35:ae:e3:b3:94:ce:06:5f:
         64:25:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:55:30 2024 by rpki-client on console-fra.rpki-client.org