Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
File:                     vfG2nIL3gagXzhAhFxeM23-yY68.mft (raw, json)
Hash identifier:          jvq4iePQ7qqiO47KGgcZ1onlXli2+3039WTz8t1i7CM=
Subject key identifier:   2E:23:4B:ED:00:FE:BE:C7:B5:8F:6F:08:CF:21:58:04:54:68:CF:9F
Authority key identifier: BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
Certificate issuer:       /CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Certificate serial:       0193572DAED9B2AD2280951BED609FA03921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
Manifest number:          1247
Signing time:             Sat 23 Nov 2024 04:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:31 +0000
Files and hashes:         1: k-oFJQZ_63TPEinZjggZcgd6EJ8.roa (hash: KkTpKgNM+VESuHqvSOTmmbD5Drpd04UQPhOFslYqG0A=)
                          2: vfG2nIL3gagXzhAhFxeM23-yY68.crl (hash: IZNmdvXR0SCZT2VaXYIKbBVyIGVWGUiMwKNMYxJCnAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ae:d9:b2:ad:22:80:95:1b:ed:60:9f:a0:39:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf1b69c82f781a817ce102117178cdb7fb263af
        Validity
            Not Before: Nov 23 04:00:31 2024 GMT
            Not After : Nov 24 04:00:31 2024 GMT
        Subject: CN=2e234bed00febec7b58f6f08cf2158045468cf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f1:32:59:15:e9:b0:02:09:2a:a1:e0:ae:57:
                    d8:9a:aa:a2:7d:18:44:ed:15:c8:38:99:3b:bb:e9:
                    cf:43:f5:ad:ed:04:ce:84:08:0d:6c:ae:9a:fc:20:
                    0b:3e:dd:75:38:92:e7:f1:60:8b:f0:28:34:b7:f3:
                    c0:44:17:c9:4d:62:9e:3d:31:50:c2:bc:e9:b5:8c:
                    3a:6a:c6:ed:c4:67:ba:b5:9b:25:57:8a:86:3b:eb:
                    05:52:02:b9:99:8c:71:02:25:30:0c:b8:2c:6d:e3:
                    60:81:34:66:1b:bf:f9:e3:9c:98:fe:a0:38:af:2d:
                    2b:27:5f:38:ce:2c:41:c2:8b:d2:a4:56:8f:3d:e0:
                    68:4a:a2:98:4a:ba:00:72:6b:b9:48:23:89:36:8a:
                    b1:fc:1f:b4:b9:1c:43:50:4d:ea:19:b4:47:20:4a:
                    62:bc:8a:a0:56:12:f6:ce:8e:01:71:b6:5e:53:f5:
                    1d:f6:18:1f:0d:21:8a:67:20:a2:f5:7a:1a:66:1a:
                    4e:8e:c6:ac:92:89:17:36:d6:70:e0:95:74:f7:ec:
                    36:5e:9d:53:02:57:b7:c0:1b:f6:90:18:12:7a:d9:
                    6c:9b:b4:64:94:d3:72:7f:d8:77:99:2b:55:71:5b:
                    ff:a7:4b:84:f6:ee:4f:35:8e:e6:06:e9:b6:cc:16:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:23:4B:ED:00:FE:BE:C7:B5:8F:6F:08:CF:21:58:04:54:68:CF:9F
            X509v3 Authority Key Identifier:
                keyid:BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:06:30:e2:52:aa:a5:4c:b7:7a:bc:f8:d3:d3:d4:75:2a:
         5a:47:15:ad:62:ae:b2:02:36:1a:91:35:b0:a4:0c:64:5e:3b:
         bf:a4:d6:6b:e3:00:31:1d:da:4b:82:36:bf:f0:a9:23:9a:1e:
         cf:43:52:e1:3e:83:ac:0f:e9:63:5c:f6:a3:8d:46:5d:1b:cd:
         75:cf:2c:41:ac:49:6b:64:6a:70:da:49:97:3e:8c:a7:02:f3:
         f7:70:fa:b5:e0:2c:1a:3b:e9:1c:af:ad:1d:43:30:00:6c:13:
         3f:46:49:2c:52:4c:6a:d0:ec:03:9a:28:2f:d9:68:42:bf:74:
         00:6e:2d:9b:a3:ac:e2:c1:be:c5:dd:a3:7f:70:5f:cf:24:01:
         67:d4:79:ec:40:87:8b:95:7e:f1:12:a1:50:6b:12:74:3c:2e:
         9f:70:c3:73:4e:a8:f3:57:fa:08:d6:ad:c3:8a:92:68:a1:bb:
         94:4d:cb:1c:f1:8e:ec:74:c2:00:c7:fb:d5:6f:a6:83:f8:c8:
         47:c2:3a:18:f3:f2:f7:89:54:54:e8:f0:a5:96:89:09:78:68:
         f6:7e:6a:a4:9f:be:8b:f7:a5:e8:49:7a:2a:63:b2:04:ca:2a:
         83:13:97:99:28:b8:1d:a6:57:78:95:a2:81:20:77:60:1d:fd:
         77:b1:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:44 2024 by rpki-client on console-fra.rpki-client.org