Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          fl7nZpgMpHDky/rSfTb4Ej3xOugEqbDfykUvc1mbbes=
Subject key identifier:   46:84:A3:B5:1B:E7:B3:C5:D0:3D:79:10:0B:C6:39:C4:6A:88:53:C4
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       0193652071671168098D56959DB3D445243E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          0981
Signing time:             Mon 25 Nov 2024 21:00:45 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:45 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:45 +0000
Files and hashes:         1: A208EebRc_CgErhF0UYpCAoaSjg.roa (hash: +ucopGLU4+pXCCIxtHXKBuT6vx1/yXtaoKbhpTzneso=)
                          2: Vsrx3rbJTANuir0bCoh8Yud7dFg.roa (hash: KAmYjWnS5yoxIr/J/Qp2TZS7R2oEG6f5JVlbzGKuYj0=)
                          3: fkRQ9NJ0jiLpyIAaKHTgrMzkK6g.roa (hash: 8MjmxBUlVy1pmUC2RC4GSsuKvYQZlbqOexvPamX720s=)
                          4: jYk7yAuSTNOCzugG3X3kq8373LM.roa (hash: hRoaM3cXWjUd/CfYvZI6zBW+RfoWxnUN4/2GZdVIe/M=)
                          5: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: oO+drcL8h2F0iZJZVPUc60L5qNxk10wjZxcqhyk9thY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:71:67:11:68:09:8d:56:95:9d:b3:d4:45:24:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Nov 25 21:00:45 2024 GMT
            Not After : Nov 26 21:00:45 2024 GMT
        Subject: CN=4684a3b51be7b3c5d03d79100bc639c46a8853c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:ec:16:d1:85:0c:e9:48:32:50:90:7d:2a:
                    99:af:c0:1e:7e:82:66:df:ad:b2:64:98:65:50:25:
                    26:86:ce:c2:a1:88:c9:e1:d8:9a:cf:16:c6:0a:58:
                    af:fa:5d:c6:13:6d:39:fb:fc:ca:cd:47:0a:3d:df:
                    88:58:18:63:f6:ad:ef:6a:a7:b2:c1:d5:db:89:c9:
                    ed:54:1f:be:2b:85:1a:d4:21:6d:f4:e0:ba:e3:b9:
                    41:bf:72:0e:35:58:76:36:60:b2:f5:36:af:35:e6:
                    e2:a0:f6:f4:ba:e1:0b:0d:26:12:42:a7:4b:53:2c:
                    c4:dc:c8:ae:b5:9c:56:00:9e:61:6c:24:ec:36:d1:
                    12:e9:19:ad:bc:3d:51:72:e6:52:16:0d:59:1f:f3:
                    84:4a:e1:b3:71:15:5c:1b:53:67:8b:62:dd:9e:d9:
                    43:e5:be:fd:e9:c5:72:c5:c4:2f:f4:91:0d:1d:58:
                    fd:cf:53:6a:e3:2b:22:d4:1d:49:dd:51:56:98:60:
                    2e:45:5b:c7:15:51:b8:7a:ec:5d:0c:ce:18:a7:fb:
                    a1:d2:e4:ca:d3:47:ff:70:61:37:d3:a3:38:00:ec:
                    7f:7d:3b:85:12:7c:d9:1e:15:1f:34:e9:b4:d4:c0:
                    ef:f8:9e:17:9e:c6:56:59:2f:09:dd:d9:84:16:9e:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:A3:B5:1B:E7:B3:C5:D0:3D:79:10:0B:C6:39:C4:6A:88:53:C4
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:54:eb:2c:16:de:18:13:9f:62:78:80:c0:99:32:8d:dc:94:
         a2:0a:5c:d0:69:aa:a1:9f:29:c4:d0:1d:eb:31:e5:a8:b4:af:
         59:66:01:e7:21:6f:34:6b:40:e0:dd:96:9c:8f:d4:8b:de:7c:
         2b:aa:e2:c9:78:21:7a:68:f0:56:60:be:78:a6:9f:24:de:af:
         1f:93:9b:95:12:31:d9:5c:69:20:25:70:6c:42:20:f8:81:51:
         8d:6b:19:e3:67:90:c4:54:f0:5c:6a:97:40:d4:2e:9b:43:f9:
         56:0f:d6:e4:8b:8c:8e:f5:6e:a2:44:eb:f2:5e:29:dc:64:31:
         a8:ca:56:18:71:50:5f:dc:81:e0:cd:6c:9a:e7:70:a7:51:39:
         0d:20:1b:c4:e9:fd:92:bc:ca:6a:20:0f:d1:a4:26:60:2b:c0:
         a4:8b:4e:3e:ac:31:29:56:17:1c:56:53:b5:85:39:26:64:35:
         5d:49:1a:0f:c2:06:80:1e:e3:9c:78:a5:12:e3:a4:fa:c2:fb:
         b3:f5:07:55:d7:23:82:c3:69:97:bd:c9:a7:d2:7a:9e:22:01:
         31:49:2e:c9:ae:b8:43:33:6f:03:5d:96:77:cc:8f:dd:da:35:
         1f:7a:14:60:4e:19:a4:41:82:e3:2b:89:17:f8:38:44:51:30:
         c9:7a:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:20:16 2024 by rpki-client on console-fra.rpki-client.org