Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File:                     vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier:          SMHI3UDWmf25cqHNoQhN1dAG8UPW7TgU9buIHavwFyI=
Subject key identifier:   53:33:2D:CA:F1:54:E6:F2:2E:22:0D:CE:53:32:4B:5A:FE:47:BD:ED
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer:       /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial:       019355AD6C4D99A29615FE9A73E15E6A836D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number:          1041
Signing time:             Fri 22 Nov 2024 21:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:48 +0000
Files and hashes:         1: 35xjOqxW6rFHScqa9K2M7EFP5IY.roa (hash: OE/LRPVkfS18gE8Re0BnKo7k/Ftr56OgDuFw6SsSqeo=)
                          2: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: tFuovvMV17sbDBSRxhfMUzQZogaWF0z0t/BYQeSFS1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:6c:4d:99:a2:96:15:fe:9a:73:e1:5e:6a:83:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
        Validity
            Not Before: Nov 22 21:00:48 2024 GMT
            Not After : Nov 23 21:00:48 2024 GMT
        Subject: CN=53332dcaf154e6f22e220dce53324b5afe47bded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:f8:43:48:10:b4:5b:02:2a:ac:99:28:13:
                    3a:03:02:85:6b:b2:25:66:43:c9:41:fe:c2:4b:b0:
                    51:a7:1c:05:38:da:82:d0:4b:3f:73:18:35:c0:77:
                    71:97:a7:94:3e:16:16:cc:51:aa:c7:e8:44:e1:62:
                    3d:11:8c:8a:63:48:7a:cb:32:52:8a:87:9c:9e:c6:
                    00:bc:de:03:ab:1c:6f:f2:70:67:ea:04:f0:f5:97:
                    ee:a5:82:fb:a7:51:33:e3:5a:f9:c2:6a:d5:e4:b6:
                    2d:8b:41:7e:07:1a:66:55:00:2d:da:b5:32:1d:4e:
                    81:80:77:30:27:91:04:fc:23:82:e1:25:8d:8e:e8:
                    15:30:9f:ee:d1:94:1b:15:2e:2b:f9:b6:d6:24:4c:
                    bd:08:4f:a0:6d:8f:ac:89:d7:25:a6:12:b7:3d:55:
                    70:24:b2:76:ee:1d:57:2c:e4:83:7a:bd:55:7b:8f:
                    b6:b8:0c:34:78:57:65:5a:cb:f5:65:e4:b3:fb:12:
                    3b:f9:77:45:db:99:f5:ba:bb:12:40:f8:97:16:47:
                    77:68:f3:6d:82:d0:56:42:3a:cd:8d:08:53:cb:a8:
                    8c:ee:10:4c:d7:a5:db:2b:73:1b:b7:94:7c:29:6d:
                    61:65:1a:c2:e7:3d:61:ba:26:40:53:2d:31:69:13:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:33:2D:CA:F1:54:E6:F2:2E:22:0D:CE:53:32:4B:5A:FE:47:BD:ED
            X509v3 Authority Key Identifier:
                keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:19:39:f5:95:62:ad:16:78:2f:ac:bc:20:db:0a:b8:12:
         cf:09:98:0e:37:9f:35:36:06:c4:e8:27:36:0e:ad:be:ef:5c:
         a0:1c:5b:6f:dd:9a:76:24:c9:b5:94:54:3d:49:e6:66:61:bb:
         67:28:ba:b5:b7:db:4f:92:a7:f6:c6:f4:07:1a:d1:27:fa:c5:
         b5:53:90:f6:20:1c:19:28:55:b1:aa:1f:c9:0b:d1:e1:03:50:
         b9:52:90:ae:19:c4:be:9f:d9:38:92:d9:02:69:21:f4:ab:92:
         c5:9a:07:32:2f:bf:73:4f:43:c4:5f:b2:32:96:85:91:09:52:
         f4:b5:1c:9d:b6:9d:67:dd:48:b1:3b:53:b7:d8:6b:0b:43:64:
         2d:5c:ea:8f:4a:1c:b8:73:92:4c:40:56:ed:5b:ae:48:26:7b:
         df:e6:ce:7a:3e:20:75:2c:56:4a:76:ff:0b:5b:49:95:8c:c0:
         3d:0f:c1:8c:27:e4:0b:d7:8a:25:fb:06:c7:43:02:df:f7:62:
         7d:6a:bb:86:3a:44:5d:4f:35:87:71:58:84:11:25:b8:4c:c6:
         38:86:35:3b:7c:0a:db:fc:81:75:f2:36:bb:11:98:23:4d:55:
         bc:9f:15:a8:25:f1:b2:fd:85:8a:2f:9b:e9:79:f7:fa:4b:09:
         46:9e:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:40 2024 by rpki-client on console-fra.rpki-client.org