Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File:                     vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier:          /iqCGAKzBVEFCckCMcmr5EXvy9+y1c0LdKpWQ5HmR0w=
Subject key identifier:   A2:3A:05:69:AC:FE:4B:DE:DE:21:00:A6:14:F0:34:72:8E:1E:DA:51
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer:       /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial:       01901EFD5F30DDF1C11B35416681799E97FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number:          04F0
Signing time:             Sun 16 Jun 2024 03:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:39 +0000
Files and hashes:         1: ueue1Eb7dvhi9Se_koKhv7bvJZo.roa (hash: HCCw2h2eGSf1NN1Vs6cJF3OFs8i6zYCY/9AVkcYNXuw=)
                          2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: NFDjswLu+4bsXkvKU1GRn3vZRgr1hyzj90Pex1X7/Pc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:5f:30:dd:f1:c1:1b:35:41:66:81:79:9e:97:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
        Validity
            Not Before: Jun 16 03:00:39 2024 GMT
            Not After : Jun 17 03:00:39 2024 GMT
        Subject: CN=a23a0569acfe4bdede2100a614f034728e1eda51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:0a:1d:ef:f7:62:2d:3a:27:5c:59:8a:61:
                    8b:65:ea:5e:6a:7f:48:30:5a:20:d9:19:b0:41:52:
                    48:f3:15:6e:c1:f1:2f:fb:57:48:d9:28:95:2f:ed:
                    d9:3d:a2:23:d0:2b:d6:76:ea:4d:d4:c6:c5:ea:41:
                    07:07:91:61:21:f6:7c:cd:b7:0d:a5:67:90:2a:82:
                    8c:d3:00:fa:cd:0b:9d:0f:b3:3a:c9:d8:6c:d0:b7:
                    d7:99:7f:de:bb:26:0b:dc:e0:de:3c:63:39:59:c3:
                    58:df:e7:28:b0:52:36:3d:9a:b3:16:a5:1a:5a:51:
                    f8:39:d7:60:42:dc:c9:53:b6:9a:7c:1d:c6:83:18:
                    86:6b:0a:11:96:a2:4c:6a:9f:3b:af:c4:8c:96:fd:
                    5c:e1:26:3f:90:1e:21:04:64:2a:4f:6a:46:93:21:
                    89:a2:d2:58:80:14:06:25:2f:6a:9f:2e:ba:49:22:
                    d1:9e:1b:96:4a:bc:ce:1d:db:d1:9a:e6:30:c9:86:
                    c1:c1:e1:b3:d2:89:0d:b8:d5:33:3b:75:b3:80:97:
                    39:1e:ba:2e:68:40:b8:c8:28:2c:ec:e0:55:b6:c5:
                    31:09:26:71:92:b2:5f:e5:0a:7d:8b:22:68:36:90:
                    82:9f:12:58:19:24:ac:6a:20:91:1c:84:52:de:a0:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3A:05:69:AC:FE:4B:DE:DE:21:00:A6:14:F0:34:72:8E:1E:DA:51
            X509v3 Authority Key Identifier:
                keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6c:51:d7:d2:03:b9:13:c5:28:54:d7:34:27:07:f7:01:01:
         75:99:a3:61:4a:a4:0b:39:ab:55:94:24:88:a3:fc:54:ae:e4:
         12:f7:97:99:4b:c6:88:38:c9:97:5b:f3:8d:aa:dd:1d:9f:3b:
         da:db:29:85:a0:7b:b8:cf:80:1f:18:ac:35:8d:02:fa:8a:ca:
         2c:bf:39:f8:7e:64:a8:04:99:23:05:da:6c:5d:b3:64:40:0f:
         91:90:a6:e9:92:55:04:84:35:bb:06:2d:53:8f:f2:cc:3a:41:
         71:df:df:37:ac:4a:8e:31:09:ec:26:55:97:17:47:6e:8a:c1:
         70:c1:38:44:68:c6:13:94:c5:69:4c:28:8b:6e:b6:d7:11:4f:
         e3:0d:29:80:a9:70:ad:1b:5e:0f:dc:84:c4:b3:bf:86:01:50:
         3a:6b:53:30:e0:77:b0:0f:5a:8c:e2:01:7b:bb:ec:b7:25:de:
         d5:70:fc:f9:30:e7:ea:b7:51:2b:32:45:72:51:72:f2:3d:f1:
         eb:70:39:09:57:4d:79:ee:96:cc:31:3c:5c:bd:46:7a:8f:d9:
         60:6b:9d:eb:a7:a3:93:34:b4:41:ca:48:d8:3f:e8:ca:77:b3:
         3d:3b:3c:ec:b6:9a:35:50:e4:75:7e:43:57:e2:69:d3:e2:71:
         1a:2c:75:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:35 2024 by rpki-client on console-ams.rpki-client.org