Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File:                     vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier:          1zR1XGoYFKVxeM6f7477gt1DJplM6a6FxS1oPIC+4lM=
Subject key identifier:   FD:17:97:5B:E3:CF:B2:B5:36:AE:88:EA:87:A2:23:A1:DE:1A:03:F9
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer:       /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial:       0193587733DC42670757C6B6BD62E3CC2BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number:          0C19
Signing time:             Sat 23 Nov 2024 10:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:27 +0000
Files and hashes:         1: _pJ5WosBdTYR38dZLLCr1Wy2QAo.roa (hash: x6o03n45ppIEEHBsFFFfX49yFf9PMhPr4neNR3rhLQo=)
                          2: lrWYFQ2jllpk5JZfrMkbA1_6PgU.roa (hash: XqTJjZtuLrkTux3xE+h/HUaU+CELbHn+205QoWwF/U0=)
                          3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: jk241dO9lWjMxLIu5/MbH1Bexd8HZXuzmMLNQ+QPlfI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:33:dc:42:67:07:57:c6:b6:bd:62:e3:cc:2b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
        Validity
            Not Before: Nov 23 10:00:27 2024 GMT
            Not After : Nov 24 10:00:27 2024 GMT
        Subject: CN=fd17975be3cfb2b536ae88ea87a223a1de1a03f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:03:32:57:22:93:7f:fb:7d:b7:e1:81:98:
                    98:05:98:da:f3:a9:c5:33:f9:db:43:7d:b9:36:62:
                    54:2c:e4:12:9e:64:86:7d:ec:0a:8b:3e:32:bf:82:
                    9a:3d:d0:a9:1c:68:e4:73:b8:a0:66:05:c8:52:11:
                    36:45:25:33:0b:0c:93:e4:a1:a1:24:fa:23:ed:b6:
                    0d:19:2d:25:0e:52:d6:02:86:f9:b9:ec:6a:f2:88:
                    ed:bc:21:cc:65:f4:ad:7a:2e:b8:32:7d:51:26:0c:
                    ff:37:bb:bc:6b:47:c3:49:c3:35:41:07:b3:a4:fb:
                    4b:e8:81:5f:bd:a5:e6:2c:f3:0c:34:36:5e:0b:71:
                    cc:5c:1d:b7:7b:d7:2f:0d:6c:f1:ff:58:b4:96:62:
                    d8:e5:cc:dc:e0:2e:91:f9:13:0a:67:bd:b2:a3:7c:
                    79:17:a1:7a:d7:36:b2:23:43:38:3f:95:91:ee:d3:
                    1c:4b:85:14:d7:1c:c6:6c:26:51:7c:ae:e2:22:07:
                    a5:37:8f:e3:d1:f2:78:90:9a:ab:cc:a0:ee:b9:0b:
                    ef:15:f3:7a:65:d0:59:a1:13:98:4f:b8:d6:77:a9:
                    a8:2a:ef:1d:05:10:7e:86:79:f9:24:14:19:49:b9:
                    30:42:b1:a0:1f:c9:fc:00:4d:4f:6d:eb:87:70:da:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:97:5B:E3:CF:B2:B5:36:AE:88:EA:87:A2:23:A1:DE:1A:03:F9
            X509v3 Authority Key Identifier:
                keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:b4:9d:62:7d:d8:ef:e4:ca:9c:ec:25:d5:e9:3a:86:bf:
         a9:95:14:94:e9:c8:ba:44:c3:28:6a:d5:b2:c0:cd:86:67:76:
         35:45:87:3b:b5:eb:07:ac:73:5b:33:70:f7:7f:4b:3d:59:1c:
         4f:09:8e:46:8a:c2:da:f7:6a:20:2f:0f:aa:c2:91:b9:2d:e9:
         2c:45:9a:56:19:6b:bb:58:cc:c5:fe:7e:13:b2:e4:a3:55:2e:
         ae:f0:6a:47:67:09:53:d9:c4:2f:e4:0c:d6:cf:9a:50:34:4f:
         68:fb:4c:40:1e:d5:31:6b:3b:b2:8b:04:68:3d:c2:6b:7e:c3:
         de:88:d9:aa:a1:f3:2e:91:1d:df:1a:d2:05:57:42:56:c9:ea:
         3a:43:81:19:08:6e:8b:43:76:e6:9b:dd:27:55:a1:09:f6:78:
         72:02:e1:60:4a:aa:e8:ab:68:88:8a:cb:3e:40:5a:3a:af:1d:
         5b:5e:04:3b:b8:ce:e4:42:1a:db:6c:2c:a8:d2:d5:99:1f:66:
         57:a2:c9:2a:ef:d9:0e:41:c8:ce:cf:4a:81:5b:cd:9f:51:a3:
         d6:48:ef:1c:8c:4f:9c:14:d9:26:6a:96:3c:73:8a:2e:f8:b4:
         b6:7f:dc:37:52:ac:5b:e5:01:aa:cd:bc:a3:7b:cf:bd:c8:10:
         36:6a:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----