Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File:                     VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier:          F3B2zCuWvp6mctKVVJ97FrziY4jOGmdoGbf5DZoR8I8=
Subject key identifier:   EE:28:E3:31:B8:BB:66:9F:4A:5A:8C:91:86:78:4C:BD:E8:39:14:7D
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer:       /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial:       019037E169BD2FF163FDF8B4E469FDCCFDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number:          0654
Signing time:             Thu 20 Jun 2024 23:00:37 +0000
Manifest this update:     Thu 20 Jun 2024 23:00:37 +0000
Manifest next update:     Fri 21 Jun 2024 23:00:37 +0000
Files and hashes:         1: 9wH--QKsaygOzrJ5IxO0-1frRQ8.roa (hash: GoWNE7t9B5aKd1IAZOkf0xJeI2xFhb4mLiMBr9MkbZU=)
                          2: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: RE2ki0Q4CLEB+rG+nfMwlzncZLiPQn+NXbxG7xJSCWg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:e1:69:bd:2f:f1:63:fd:f8:b4:e4:69:fd:cc:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
        Validity
            Not Before: Jun 20 23:00:37 2024 GMT
            Not After : Jun 21 23:00:37 2024 GMT
        Subject: CN=ee28e331b8bb669f4a5a8c9186784cbde839147d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:00:b4:aa:d0:8d:18:f1:f4:d7:a6:c0:37:
                    b6:33:d1:e4:b8:5a:4b:9f:e4:0b:62:00:fa:81:27:
                    42:8b:28:04:18:de:13:60:dc:58:7d:c8:e4:05:36:
                    99:e6:0e:7e:ad:36:cc:82:dc:40:e6:db:ed:8b:1d:
                    99:6a:3a:c5:51:8b:1c:c6:d1:e4:c2:1f:48:5b:60:
                    b6:4b:4b:bf:1f:e1:46:77:df:aa:90:41:d6:0c:83:
                    82:98:e9:e9:7b:9f:8c:2a:32:91:6f:1d:41:1d:5e:
                    fc:89:d0:57:8e:83:9e:a5:bd:f7:b5:3c:45:74:2a:
                    db:f1:66:9f:2b:19:26:35:86:37:63:65:44:75:57:
                    42:5a:ef:c9:20:6c:b0:0e:3a:56:9a:28:23:b3:4c:
                    af:1a:e3:2d:55:0e:ed:51:18:2a:3e:dc:45:e8:0d:
                    ae:3d:7a:85:73:f3:2e:d1:80:2a:af:98:26:36:47:
                    9b:a5:69:ee:eb:34:ed:2f:81:33:60:af:9b:48:54:
                    f6:65:d2:e6:41:24:83:c8:5e:7e:ee:da:0d:bc:b9:
                    d0:a8:00:e0:ab:05:5a:30:17:b7:61:3e:df:2c:51:
                    28:25:f8:75:2c:de:7a:9e:aa:c5:49:4f:55:46:0d:
                    05:d1:4b:33:4f:0a:6a:68:ae:55:6c:e8:fb:9d:8a:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:28:E3:31:B8:BB:66:9F:4A:5A:8C:91:86:78:4C:BD:E8:39:14:7D
            X509v3 Authority Key Identifier:
                keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:7a:4d:46:72:69:92:3a:4b:03:24:b9:76:d3:65:b1:61:
         6c:fc:dd:e1:7e:15:e4:de:55:88:72:06:0b:6e:51:07:3d:3d:
         e5:0e:8e:d0:bd:a2:b7:9b:7e:64:50:4e:db:54:0d:ef:0a:7a:
         21:1d:29:b0:7c:06:34:83:a3:73:23:b0:85:31:59:7a:a5:9d:
         e7:95:20:76:ea:50:f3:05:12:b8:87:82:c1:93:64:e1:d0:2c:
         b5:61:e5:d9:31:e0:26:e0:40:3e:d3:9f:b0:66:eb:1c:15:be:
         46:97:28:93:87:fb:ed:a3:89:60:d3:ce:d2:c9:5a:04:36:97:
         ad:3e:84:01:b2:e3:dd:27:a0:1d:41:1c:97:78:c3:a1:52:32:
         e2:91:ca:6c:04:ad:2e:6f:20:ca:94:c0:54:89:4d:bd:44:35:
         ac:50:3e:6e:6d:b7:4f:d0:9c:6b:78:bb:73:fe:d5:d9:33:f3:
         2a:b4:43:95:b2:84:70:24:21:7e:0e:57:fd:45:91:63:e1:be:
         a2:77:ae:c9:f9:fa:c5:92:ec:51:4f:bc:b9:05:b4:5f:4e:5f:
         4a:1f:30:7e:80:cd:0c:85:4f:45:1e:27:93:6c:f0:74:55:ea:
         bc:60:5d:71:0a:63:39:b1:7f:ec:8f:8c:3f:51:11:6a:8c:63:
         90:cc:bf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:43:08 2024 by rpki-client on console-ams.rpki-client.org