Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File:                     VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier:          5NrIp2vDEe5z6uyg+fUJimsYCHVGoMR+28n22j8bBXE=
Subject key identifier:   28:76:7D:1B:04:28:5C:67:27:B0:0B:A9:18:B7:71:C2:80:E2:68:F9
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer:       /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial:       0193579B88C78BCD035AA0993BE956326595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number:          01B2
Signing time:             Sat 23 Nov 2024 06:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:31 +0000
Files and hashes:         1: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: xM+1IwhF4MUXDdeM7IVVsnXX4UiMvqUgkbeGrJofU+Q=)
                          2: fYfbjFSr4IgKxBVZJ9hShKmCfyY.roa (hash: 7jc2/oZRJiP8nbF8BC7Cz3r+1JCOggOg3TQclJ7qjRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:88:c7:8b:cd:03:5a:a0:99:3b:e9:56:32:65:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
        Validity
            Not Before: Nov 23 06:00:31 2024 GMT
            Not After : Nov 24 06:00:31 2024 GMT
        Subject: CN=28767d1b04285c6727b00ba918b771c280e268f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:84:6a:4d:5d:0d:80:79:f6:83:db:b7:47:
                    8a:4a:3b:e1:fe:94:9a:90:51:49:1f:a7:88:7d:db:
                    af:7c:71:b6:2f:c4:19:78:59:7c:94:2e:af:a9:b6:
                    78:20:69:24:9b:aa:2b:7f:cb:eb:4b:39:48:fb:83:
                    45:1e:26:06:e9:89:29:7a:72:73:50:c1:15:11:88:
                    04:89:f6:e5:78:7e:d0:f1:7d:c3:d8:92:4a:b1:9c:
                    ac:9e:58:8a:50:ec:40:be:a2:50:03:5c:2b:f8:33:
                    c4:ea:5b:76:8d:a8:d3:39:70:eb:51:04:8d:40:eb:
                    3f:aa:f4:d5:14:f6:81:5d:b4:d4:0b:0d:58:25:17:
                    15:c5:73:1f:5e:e8:32:d3:47:68:cd:65:e2:20:b7:
                    32:71:52:ef:ec:ae:69:5f:6e:75:d7:cf:69:1a:22:
                    9d:5d:1b:2a:63:74:96:2c:40:39:91:d6:34:a6:e8:
                    39:b2:ce:b4:d7:a7:f4:d9:a3:bf:07:44:0f:48:c0:
                    10:90:18:fa:c8:c5:3e:63:c8:97:d7:24:02:61:37:
                    83:64:a2:56:9c:98:0e:8b:f5:8a:bd:b2:fa:36:37:
                    d2:ba:6c:0a:bd:27:bf:df:c4:d5:f1:7f:df:2d:0d:
                    87:c5:f6:1f:1d:b3:85:4c:45:6b:a1:95:ba:ab:12:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:76:7D:1B:04:28:5C:67:27:B0:0B:A9:18:B7:71:C2:80:E2:68:F9
            X509v3 Authority Key Identifier:
                keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:57:fc:d2:48:9b:88:eb:85:6c:4e:79:e5:14:78:02:0a:75:
         e7:82:71:15:98:58:2f:31:0d:9f:0c:51:ff:9e:5d:c4:a4:7e:
         73:96:e9:1e:eb:a1:51:f7:c2:4f:4a:5f:b5:41:8f:c0:27:63:
         44:a5:6d:23:1e:04:fe:06:d2:15:56:7a:b8:f7:d6:70:3e:6e:
         d0:51:19:89:ac:48:c1:4b:44:25:2c:88:1f:db:11:32:19:ff:
         9b:10:e1:db:8b:bd:9e:c6:7a:86:54:57:d6:fd:4f:cd:44:4e:
         64:5b:77:de:31:0f:04:bc:80:dc:c5:1e:59:d5:be:e5:b0:e3:
         86:6a:3b:c5:a0:05:50:fd:ca:cb:f3:9d:ba:8f:e6:75:6a:c1:
         d0:1d:87:2d:7f:da:e0:29:9a:f9:43:3e:46:d4:27:eb:86:83:
         73:88:0a:a7:bd:48:29:42:b3:16:26:ab:31:b8:2d:49:19:4b:
         e7:4c:02:19:f3:16:a2:1c:82:6f:e9:b5:ff:47:5b:a3:25:9c:
         9c:9f:fd:d7:b8:83:fd:19:d5:fa:43:cf:f2:83:95:25:e4:d6:
         6d:69:d9:80:99:0b:4b:96:70:a4:e7:4a:49:a4:d5:ba:80:a0:
         bb:14:ec:49:5f:6e:3e:71:95:73:da:ba:e9:6f:25:de:95:89:
         b5:eb:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:31 2024 by rpki-client on console-fra.rpki-client.org