Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File:                     vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier:          sQvUO24jmQKb2e6z5PeLzavK/fUtZWYFpgzgvtXlPfM=
Subject key identifier:   76:98:EF:54:CC:DC:07:63:2A:F6:53:A5:01:F8:25:15:7B:01:BA:4B
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer:       /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial:       0191FA7E3A6DC164E31695ABD4F50CD7F6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number:          A6
Signing time:             Mon 16 Sep 2024 11:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 11:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 11:01:01 +0000
Files and hashes:         1: 26ubqMdKveoANRM-Div24OdjsCQ.roa (hash: wPe3ag2C7a+zq9/YCa28f64WoNShlxl9gBNAB6xhd1Y=)
                          2: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: dv0fD3BIDvynWc5jQgUht/ZVXxThMsA+h0jEmKbXMgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:3a:6d:c1:64:e3:16:95:ab:d4:f5:0c:d7:f6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
        Validity
            Not Before: Sep 16 11:01:01 2024 GMT
            Not After : Sep 17 11:01:01 2024 GMT
        Subject: CN=7698ef54ccdc07632af653a501f825157b01ba4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:53:af:7f:8e:4c:fd:24:ef:11:c6:4d:3d:
                    54:69:f8:b3:41:91:aa:5a:56:fc:a1:8f:be:60:38:
                    ea:7a:bf:eb:0a:28:9a:19:7d:69:f2:00:87:cb:e9:
                    12:c3:3a:55:e6:4b:09:61:06:1b:3f:8a:95:16:9e:
                    bc:14:9e:ba:30:6d:7c:df:ad:89:87:63:b0:94:64:
                    5c:13:be:72:07:cc:40:48:0f:3a:44:57:38:72:0e:
                    9d:a8:90:83:06:ba:a9:20:a1:e8:68:cb:2f:4f:a0:
                    43:59:77:57:50:b4:cb:2c:fb:6b:c7:41:77:c3:80:
                    4c:7b:18:65:f3:59:81:0f:9a:4b:07:7f:57:03:8a:
                    9b:8b:49:eb:6f:65:6e:3d:93:9a:9e:79:27:81:f6:
                    7c:a8:5b:ca:81:23:1d:50:96:e6:29:1c:b0:2a:e3:
                    15:51:08:1d:ea:d4:d8:6d:fc:e5:a4:8f:47:3d:05:
                    72:af:74:30:72:07:be:9f:d4:c2:1b:bf:6e:28:7a:
                    9e:dc:16:21:6b:61:21:c1:51:cb:a1:8b:58:22:a8:
                    9a:9e:07:03:55:ed:c4:fa:81:a6:42:60:61:51:3a:
                    a3:e8:29:7e:54:6f:70:9c:95:7a:aa:7c:d9:3a:37:
                    c8:76:56:44:b2:1e:e1:78:ed:05:f5:19:62:40:b5:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:98:EF:54:CC:DC:07:63:2A:F6:53:A5:01:F8:25:15:7B:01:BA:4B
            X509v3 Authority Key Identifier:
                keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5f:a6:7a:9e:12:36:59:dc:66:f6:9d:1e:b0:c9:3e:59:60:
         c5:74:81:ec:b4:da:c5:af:f8:81:04:30:3d:71:24:92:ac:25:
         cb:a6:a0:8d:28:e3:3c:bd:31:b5:3c:d0:6b:8a:1c:9d:6f:bf:
         9f:57:5a:1e:4c:84:42:dd:75:1f:5f:98:0b:d4:06:88:a6:a4:
         ab:27:8a:52:08:b5:9d:8c:f5:f9:95:6a:d8:3a:7e:8b:c8:a8:
         45:5a:45:68:b6:4d:4b:5a:26:5b:a5:01:8a:2a:8a:09:06:39:
         1d:ac:a1:77:82:19:64:70:77:a6:a9:e9:21:9e:8d:50:71:65:
         cc:02:92:a6:82:c8:c5:29:6f:d2:cf:4b:e9:ec:78:c3:92:18:
         bd:72:dd:2c:63:c1:80:90:eb:5d:af:c9:12:ac:a4:80:70:dd:
         1b:1c:80:df:4e:21:84:91:f9:41:47:7d:30:30:df:8f:eb:5a:
         3d:24:1e:c5:77:95:91:f9:37:0c:26:ec:55:22:f1:c6:8e:bc:
         44:ce:45:b1:4b:4b:7a:48:56:d6:5a:24:68:f0:b4:b5:23:f1:
         07:29:b3:af:0b:d2:fc:ac:d0:39:ad:0f:93:0d:ea:c6:d5:4e:
         83:fa:d5:8c:10:31:76:6b:fc:3f:74:fb:07:c3:4f:83:29:1d:
         c7:be:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:11:14 2024 by rpki-client on console-ams.rpki-client.org