Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File:                     VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier:          jOFHoz7S3gXHeQgfIZJ4hbuzH/chigNKXGTRmhQrDog=
Subject key identifier:   EE:62:EB:38:47:A9:7B:7A:FD:43:1B:A5:A1:CB:0F:8C:F9:23:2C:A4
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer:       /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial:       01935689EA82D95E125E55AD34D4B2AD0195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:39 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:39 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:39 +0000
Files and hashes:         1: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: JD3WMSlhZXECl5kZHYiGCO2JybMsSsy6ATLlrqFXLeM=)
                          2: unZQZgi0VsnG2ND5sq4TexiiXQg.roa (hash: Jn32CjA5LHOciX9Ns7L7NTRV0wJSPFg4yAlNiII76yg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ea:82:d9:5e:12:5e:55:ad:34:d4:b2:ad:01:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
        Validity
            Not Before: Nov 23 01:01:39 2024 GMT
            Not After : Nov 24 01:01:39 2024 GMT
        Subject: CN=ee62eb3847a97b7afd431ba5a1cb0f8cf9232ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:ef:98:93:a1:38:5b:ae:fc:7b:59:ef:7b:
                    bb:4c:c5:b0:e4:de:35:7f:cd:ee:80:1a:f6:f7:3f:
                    13:68:f4:81:02:79:b4:2a:21:c3:d6:52:4a:5e:91:
                    8f:5d:ae:28:67:78:58:0a:c6:05:46:08:7e:d6:f5:
                    0b:7a:3e:df:56:2e:b5:0d:0a:ca:c5:65:9b:90:81:
                    0f:6f:ef:b8:7d:8f:40:5a:10:50:32:ce:7d:86:0f:
                    82:f8:9d:bc:b5:20:b0:11:3e:9f:7e:af:b9:a2:27:
                    7a:b1:50:0a:1f:ff:b6:87:7b:a4:8d:36:27:c7:82:
                    f8:34:ce:03:10:9c:0b:d9:d5:a7:ec:a3:78:ed:0d:
                    c8:30:54:0d:f9:4a:82:8c:97:9c:45:5d:ec:c8:7a:
                    43:9b:9c:44:cc:b0:c8:af:53:eb:43:f4:7c:03:4d:
                    85:1b:85:7c:7f:7a:49:4a:c0:ee:53:56:84:dd:30:
                    b5:98:65:3a:71:a6:fb:f7:bc:e6:8b:f2:5f:a9:34:
                    fc:b2:0c:32:2e:53:88:9e:81:d2:4e:37:90:d9:7c:
                    5a:ce:2e:81:ac:e0:a4:99:3b:64:85:43:68:5d:1b:
                    38:53:27:00:0f:fe:43:16:53:03:51:d0:57:1b:39:
                    ab:92:38:5e:e0:f3:d4:18:6f:c3:69:a5:7a:c8:f8:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:62:EB:38:47:A9:7B:7A:FD:43:1B:A5:A1:CB:0F:8C:F9:23:2C:A4
            X509v3 Authority Key Identifier:
                keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:67:ac:c2:cd:d0:c8:e1:82:8f:3a:3b:28:96:5d:a3:7d:ba:
         1b:3d:a7:4b:40:bf:1c:98:ab:7c:4d:21:e9:26:2a:60:ac:b2:
         00:92:65:04:5d:54:a7:9d:0d:3f:aa:19:dc:6a:70:ab:ee:1b:
         b1:db:60:4f:eb:b8:c0:1a:c9:f9:b7:39:5f:94:43:dd:7c:1a:
         a2:d3:dd:ff:59:d1:a0:e9:ab:cd:ec:88:40:11:04:be:c7:58:
         2b:b1:da:88:ce:d5:65:11:6d:bc:a6:a9:f5:c5:c0:9d:ae:2c:
         13:fe:9a:b2:b2:a1:f2:b1:18:39:fc:30:e3:f5:0d:ff:3d:1e:
         f7:ea:92:a6:c3:51:aa:c9:52:f4:bc:06:1c:7b:cf:bf:12:2d:
         da:7e:53:bf:c2:b8:89:b4:17:b8:70:a0:51:b7:8d:bf:fe:d6:
         11:21:89:6d:42:71:4a:c4:3e:82:71:06:ed:ef:0d:b7:aa:52:
         b3:65:bd:41:63:39:67:67:84:0e:1a:2d:aa:1d:4d:e9:1a:5e:
         91:68:6c:4e:61:bc:94:3e:aa:87:68:73:90:44:76:41:15:1d:
         5c:52:ff:dd:d2:3e:78:e1:55:39:d7:62:4b:5e:62:b1:18:d0:
         b0:4c:ed:3f:eb:fc:8c:7c:b6:ab:6b:6b:af:fe:2b:99:dd:d1:
         0a:ad:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:09 2024 by rpki-client on console-ams.rpki-client.org