Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File:                     vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier:          tfGiJApzUnfI+En3DLuxaXcGT3ZrWGcEbV92wvksrCg=
Subject key identifier:   AE:FB:4D:A0:56:8A:DA:BE:5D:E1:51:69:93:B0:E5:80:F6:E0:EB:F0
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer:       /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial:       01901E8F9BF3F14EFCE9C8A30D8AC101CC5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number:          1145
Signing time:             Sun 16 Jun 2024 01:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:46 +0000
Files and hashes:         1: 1-4p8IVXZMjBey2XUTpIlwmHXC9M.roa (hash: /HuE5uOFR4+hhFAOV1xaFCanP8msA++8ExqFUIojs14=)
                          2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: dmNFtFHDdpBDABUFRdAGmOByzMxa49DZ+10lYNnUvXw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:9b:f3:f1:4e:fc:e9:c8:a3:0d:8a:c1:01:cc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
        Validity
            Not Before: Jun 16 01:00:46 2024 GMT
            Not After : Jun 17 01:00:46 2024 GMT
        Subject: CN=aefb4da0568adabe5de1516993b0e580f6e0ebf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:c3:8e:45:45:5b:7d:fb:43:d8:58:ff:f5:
                    87:05:3e:5c:34:04:06:2e:30:cd:16:c2:04:0d:9e:
                    c7:ed:d4:d6:08:75:d6:b5:98:30:6d:e1:67:6b:8f:
                    d7:0f:0e:a2:bc:55:03:19:a4:16:ad:2d:c9:76:b5:
                    c3:f6:96:e4:a8:21:d9:f6:1a:9f:48:9f:00:f2:ff:
                    54:14:27:de:7f:13:70:33:92:39:7b:8c:cb:db:c3:
                    94:d4:89:df:cf:5e:c0:bd:73:af:5a:80:5b:c4:21:
                    5e:7f:2e:95:5f:53:5a:c3:99:c1:35:d4:95:5e:15:
                    11:b9:c0:6b:b3:dd:e3:c9:73:02:ac:7c:37:4d:8b:
                    82:c4:fb:75:bb:34:da:a2:59:e5:a5:6a:83:83:50:
                    bd:0f:25:b4:be:78:f5:5b:31:95:bd:f3:82:0c:4e:
                    57:91:6d:19:aa:5b:06:32:8d:97:83:dc:bb:81:ee:
                    03:97:34:5d:41:62:94:68:81:16:91:a4:47:54:ff:
                    59:f5:1f:2d:15:6d:30:2d:38:ab:5e:20:48:80:a4:
                    c0:ac:03:8e:63:73:bc:62:e3:fe:59:c7:7e:79:6c:
                    1d:09:7d:98:9b:2d:53:09:f5:e6:02:e3:c5:28:e5:
                    7c:52:3a:1d:e2:2c:e5:aa:c7:ed:c8:c4:35:2a:04:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:4D:A0:56:8A:DA:BE:5D:E1:51:69:93:B0:E5:80:F6:E0:EB:F0
            X509v3 Authority Key Identifier:
                keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:69:8d:7b:b1:5e:cc:96:d6:7f:81:b3:ab:51:6e:a4:e8:
         34:f3:70:eb:9c:b8:94:11:38:3d:43:14:9c:66:6a:eb:8c:6d:
         21:f6:3c:62:07:27:a8:db:d4:2a:92:51:a8:3a:57:8e:1a:8a:
         df:b4:2e:ff:77:ee:7a:9f:9d:e7:b3:3c:12:a4:8c:7c:8b:e3:
         1d:f4:cf:b2:bc:14:27:00:bc:fe:f6:45:56:2e:e1:48:f7:c9:
         a5:a9:3a:72:f4:d2:5b:22:48:8e:5c:c4:bd:9f:d9:c8:7e:a2:
         c4:84:9b:a5:a6:0d:86:6b:f5:3f:0f:2e:6d:8d:98:87:4c:a9:
         fb:0c:77:0b:83:fc:00:6b:75:30:f4:e0:41:1f:2c:91:44:c6:
         88:e5:d6:2f:3e:d4:34:21:99:00:80:d6:60:8c:cb:f3:b1:53:
         f2:a9:dc:fe:8d:94:c4:32:eb:15:33:fa:bc:e9:88:24:15:a4:
         63:76:07:e6:31:ea:83:c0:53:86:04:0e:9d:85:fe:22:26:c3:
         e7:a6:6e:9b:05:8e:ef:75:54:2b:ae:da:71:b5:d7:47:a6:49:
         0f:fd:54:08:dc:11:e4:a9:3e:35:b9:f0:5d:67:77:a7:c6:4e:
         aa:d8:28:5c:41:77:e1:93:a9:f4:29:2c:d6:4a:67:90:ab:cc:
         c9:60:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:33:22 2024 by rpki-client on console-ams.rpki-client.org