Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File:                     vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier:          rxEOCtHwlccaKHoAXXNv+PxxGzZzU7O+YX/7dpWyGmo=
Subject key identifier:   93:29:4A:5E:8A:47:76:86:D9:0D:EA:FD:BD:34:AA:20:8D:09:D0:24
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer:       /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial:       0190448C086D919C76B0683EEB255FF8C0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number:          05DB
Signing time:             Sun 23 Jun 2024 10:02:26 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:26 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:26 +0000
Files and hashes:         1: GgJdPsHuLCIf8BTIcMaxNdkYmhQ.roa (hash: RyQQafLZSrOi6/IKrK3H/U2Ad0d57drO+N5Q6T96vkE=)
                          2: hi0YC7IdH6Z6d3YOsc_nfai7K7Y.roa (hash: B4unnEaHFiR3fW0gwbSwsWm95UOF2faY9g12yuUAF10=)
                          3: npZk_DsmLHG4lKguA5kZdCZ2iAg.roa (hash: voZZjwP91UbnQk5UTSLktPRGQBsjJTeT9M0gsM16tVk=)
                          4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: a5hl1Aa6ARyZDRl1Cxso7QzmB67MLKreVKRhMhgG9Iw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:08:6d:91:9c:76:b0:68:3e:eb:25:5f:f8:c0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
        Validity
            Not Before: Jun 23 10:02:26 2024 GMT
            Not After : Jun 24 10:02:26 2024 GMT
        Subject: CN=93294a5e8a477686d90deafdbd34aa208d09d024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:3c:0c:ed:41:5e:72:1d:1b:c2:f5:3b:81:
                    79:11:41:ba:f6:40:c1:fa:0b:f4:d5:a2:7c:6e:b8:
                    6d:b5:be:4b:a3:6b:56:77:13:53:3e:d5:37:64:2b:
                    11:ac:40:76:bd:eb:b9:9a:19:69:dd:84:78:36:55:
                    6a:a3:5c:83:71:cc:25:af:73:99:dd:7f:f8:89:86:
                    98:d0:37:7c:d9:33:1b:89:a9:e2:63:12:c4:49:f9:
                    e5:5b:d4:84:29:de:b9:c3:f9:4e:cd:74:c9:54:fe:
                    80:c9:47:0b:f2:a3:cc:e9:86:3a:93:c3:41:58:fc:
                    4c:c6:5c:f9:bc:68:73:b5:59:85:25:44:81:dc:ca:
                    e7:a5:28:f2:eb:bf:11:f2:b1:18:bf:5c:f5:24:3a:
                    1a:df:74:cf:9b:5b:f8:24:b9:8f:38:fe:c3:28:44:
                    53:4d:ea:02:95:db:38:ec:2c:90:5f:a1:60:1c:b1:
                    f4:f3:1d:13:b8:24:82:3f:92:97:f9:57:00:82:08:
                    3b:db:29:90:03:be:b9:1f:7e:fc:c2:88:76:90:b1:
                    a9:9d:19:77:a8:f9:ef:78:7b:c8:a4:45:69:07:d2:
                    5b:59:0d:c7:71:e9:57:2e:30:08:e0:b0:41:8c:5b:
                    ff:8e:5f:62:c1:ba:d1:bd:50:de:3b:58:8b:d8:5c:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:29:4A:5E:8A:47:76:86:D9:0D:EA:FD:BD:34:AA:20:8D:09:D0:24
            X509v3 Authority Key Identifier:
                keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:a1:81:62:9a:b3:0b:e4:dc:96:40:7e:a8:d2:a9:81:d3:
         d5:a0:7b:2f:00:8d:56:e3:54:82:c2:c6:8d:35:a0:82:76:84:
         31:68:5f:c3:c8:92:46:43:94:2f:ac:8a:27:af:79:ac:52:cf:
         1f:0a:e6:b7:12:a9:38:37:1e:28:d4:30:ac:dd:a8:8d:7c:d7:
         aa:9c:5e:c9:e6:30:bd:9d:53:73:45:4c:9e:1b:bc:36:1a:7d:
         e1:4c:37:f6:80:3f:f0:b2:d7:8f:38:6a:bc:22:61:38:95:a8:
         b0:25:e2:82:29:b6:d5:36:eb:72:4f:01:03:f8:e4:76:32:4e:
         8b:45:ac:37:04:b2:6a:3d:0f:70:55:a1:73:e7:f9:87:56:2a:
         e5:3c:d8:27:02:cd:96:60:53:c9:b4:3a:c7:1b:f6:1d:5e:63:
         2a:1b:40:fe:ae:37:46:c7:0d:fe:30:39:02:1b:75:05:72:56:
         53:fb:7c:87:fa:7e:56:25:36:3d:1d:e1:e1:54:cf:1c:09:13:
         91:f0:99:cf:f3:78:ab:5b:76:b8:90:ab:f5:26:86:ed:f9:1e:
         6a:f0:ba:20:58:15:f3:7e:35:90:bd:4b:4f:94:a3:9a:5b:64:
         45:7a:ac:64:c9:81:da:ba:fd:cf:7b:07:f8:d1:d9:59:9b:2f:
         ad:16:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:37:35 2024 by rpki-client on console-ams.rpki-client.org