Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File:                     vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier:          WoOC7c1mSGSXDzTZygh1NaJTYux8QI6QUCEvcvOoHhI=
Subject key identifier:   31:A8:23:62:3F:F7:F8:4B:05:93:C7:89:A2:B6:13:69:EF:47:6D:FB
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer:       /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial:       0190459D1EB8C204B7EC8C982161A89C0B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number:          116A
Signing time:             Sun 23 Jun 2024 15:00:42 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:42 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:42 +0000
Files and hashes:         1: kl1n2sovkkDb-pBgXB_qf8TTd0s.roa (hash: W+5sg5lSPngB+bUGCvcukK5bvem7Ip2LML2QRIBvqbo=)
                          2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: tpuwy3+1NOmmBTI0/Mu3c5RlUjq6QWZqrk34xTGKdUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:1e:b8:c2:04:b7:ec:8c:98:21:61:a8:9c:0b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
        Validity
            Not Before: Jun 23 15:00:42 2024 GMT
            Not After : Jun 24 15:00:42 2024 GMT
        Subject: CN=31a823623ff7f84b0593c789a2b61369ef476dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:c8:8d:96:0f:9a:f2:c1:33:28:37:62:3b:
                    1c:b0:2b:a8:7a:b3:e2:29:7e:07:bc:69:39:74:a9:
                    88:fc:4a:bc:5b:21:aa:52:9c:c4:a4:a1:e7:d1:79:
                    8b:ff:5e:ca:7c:75:05:ff:cc:d6:86:40:64:82:84:
                    75:43:91:11:f7:44:e8:28:14:66:9c:86:3c:fc:5d:
                    63:b6:65:b3:b2:95:e0:35:64:ad:1e:ea:b5:d7:b2:
                    5f:7f:26:05:02:49:75:bd:3a:76:8b:a0:cf:56:16:
                    a7:72:13:c6:95:b4:59:6e:d3:f7:e1:ab:da:08:31:
                    ae:d7:9b:ed:7f:52:fd:82:b1:60:f6:01:11:58:e5:
                    ca:b0:a6:22:f2:a4:0a:2d:c7:9f:25:b8:08:1c:05:
                    19:87:bc:e9:ba:30:31:e1:25:c9:4b:48:df:1d:76:
                    c2:47:cf:bd:95:d1:aa:a2:d2:d4:92:f9:18:55:54:
                    7c:74:2d:86:d9:21:39:c6:b3:5a:53:5d:85:62:f8:
                    27:98:cf:6c:5a:8a:34:bb:ad:97:0d:dc:bc:9a:f4:
                    08:ac:c1:27:0f:68:f1:ee:64:76:64:9f:df:37:e3:
                    2b:5e:c9:3a:9a:e3:c8:21:66:9f:12:5d:2f:30:21:
                    47:b4:dd:dc:65:2d:a7:b0:74:00:98:e8:e3:27:26:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A8:23:62:3F:F7:F8:4B:05:93:C7:89:A2:B6:13:69:EF:47:6D:FB
            X509v3 Authority Key Identifier:
                keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e7:1c:0d:2c:fd:1f:fa:cf:79:94:de:21:a4:85:44:50:ca:
         7c:e7:42:5e:14:6c:31:b9:23:52:c8:7d:59:90:c2:0b:e1:91:
         e3:e9:00:67:77:69:8b:a8:3a:12:51:15:3e:b4:92:50:69:b4:
         31:de:d4:f6:40:1f:78:aa:6f:2c:f0:5a:a0:ac:40:d7:16:f0:
         03:58:57:f1:13:d5:8a:4f:4b:cd:25:38:9c:f4:37:b0:1e:56:
         07:a9:f7:2c:44:9d:9f:7d:ba:f6:a4:e8:66:a7:a0:55:b8:29:
         10:bf:39:d2:7a:fd:c6:c6:42:e2:7a:94:1c:9b:28:3a:d8:23:
         5f:47:de:7b:9e:a1:97:0a:79:5b:e5:b4:e0:64:3e:34:18:d3:
         fc:ea:12:3a:f9:f2:99:e9:80:30:cc:f1:d8:4c:88:77:d9:f0:
         db:9a:e8:59:47:00:f1:80:bd:48:6d:c0:50:6b:e3:94:cb:8c:
         e1:41:7c:2d:2d:89:4b:9e:4c:a6:48:49:45:c2:84:da:ac:68:
         c4:ee:19:b6:54:10:fd:99:d2:39:ad:0d:32:3e:c1:fd:86:5a:
         6e:6d:a1:8a:11:79:80:20:c0:4f:c7:d6:0e:3b:f3:b5:81:85:
         d6:d4:cf:7c:36:b0:e6:6f:a5:f2:b9:b7:b3:2d:f7:20:57:84:
         a5:51:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:46 2024 by rpki-client on console-ams.rpki-client.org