Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File:                     vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier:          V6mSTh6dliVTuNtjFdzGCuiQUyPXLPbMvcCLxvFAKk8=
Subject key identifier:   3B:95:A8:7B:07:97:AA:27:20:ED:04:C9:CD:46:57:F0:6E:9C:66:BA
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer:       /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial:       0193584060D584A26834AA3EEBBA4E9D25CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number:          3F
Signing time:             Sat 23 Nov 2024 09:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:34 +0000
Files and hashes:         1: PfRtFIpa3DkLOJoSmnAwXHnHqCY.roa (hash: OcgcdfMuPZj9VG2exRNZFcIMryuzYwdHgrEnD7BXTR4=)
                          2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: P/XCjJDO85RbzutAHGsy1reb92yBvKwlT8+FBnunLls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:60:d5:84:a2:68:34:aa:3e:eb:ba:4e:9d:25:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
        Validity
            Not Before: Nov 23 09:00:34 2024 GMT
            Not After : Nov 24 09:00:34 2024 GMT
        Subject: CN=3b95a87b0797aa2720ed04c9cd4657f06e9c66ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:d9:15:25:84:e0:67:72:8c:73:4b:a5:a7:
                    71:b8:a6:a1:9e:88:98:6e:45:9c:f4:dd:c9:2d:aa:
                    60:af:e5:82:e2:d0:92:70:89:05:8d:4f:bb:29:4a:
                    cf:b0:cf:91:ea:24:4f:2e:f0:5a:7d:6b:eb:1a:5d:
                    be:db:6c:86:cf:6a:c5:72:1c:e2:91:c6:c8:6a:ee:
                    b7:c6:d1:6e:a1:a4:d3:16:27:31:18:a7:00:ca:be:
                    85:7f:18:77:1f:ef:ea:8b:6d:57:cb:a5:7a:ec:05:
                    95:77:65:aa:49:d6:f6:ba:b3:5b:be:8c:27:94:9a:
                    87:b4:85:46:ca:89:c0:b2:0e:85:4c:d7:15:f5:30:
                    fc:e0:0c:5a:8b:8e:77:a0:bb:a0:79:dc:59:8d:f1:
                    c1:1a:66:3c:61:5c:29:fe:75:af:87:2a:0e:48:ae:
                    d8:f7:f7:44:e2:98:11:74:7c:a1:5b:8e:74:88:d3:
                    b2:4d:13:ac:7c:aa:52:ab:14:36:1f:38:e2:a2:c1:
                    1b:58:7e:0b:47:9f:11:78:90:9d:b6:cc:61:42:82:
                    29:5c:c4:5b:03:51:51:02:ab:8d:24:19:6c:d0:90:
                    fa:42:e7:26:9c:88:43:c6:1c:88:1b:ab:05:03:b8:
                    e7:87:c2:dd:2c:4b:a3:d9:9e:b7:69:4f:32:6f:4d:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:95:A8:7B:07:97:AA:27:20:ED:04:C9:CD:46:57:F0:6E:9C:66:BA
            X509v3 Authority Key Identifier:
                keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:31:37:33:69:12:00:a8:45:c4:86:0d:c1:72:f2:ae:58:
         05:8e:37:30:a1:83:1d:87:24:1f:85:dd:21:cb:1f:10:7a:48:
         56:6d:d4:9b:42:89:4d:08:54:d5:8f:f1:ed:64:57:fa:2a:a4:
         ef:91:8f:66:f4:cf:54:4a:72:bc:02:a4:73:b3:df:03:e0:ae:
         e0:87:7b:3d:50:2b:49:43:91:ba:ba:08:88:88:68:b1:60:ec:
         3b:6b:b0:8f:95:71:c6:9c:c8:c6:90:5e:c2:3c:da:98:c4:e0:
         91:98:c2:f2:fc:ff:8d:81:65:d8:7c:08:4b:7d:5e:40:d1:ab:
         d1:b9:c2:14:aa:15:e3:a8:47:b5:30:26:b4:fe:5c:77:b1:cc:
         02:d9:b9:51:5f:29:03:b1:93:42:80:e2:15:a4:d8:00:ea:db:
         a6:0f:8c:c4:cf:d6:80:64:40:33:9b:5d:3d:64:8b:50:0e:51:
         8b:03:9a:25:0d:7d:3d:d1:98:ae:f4:cf:6f:5b:72:ad:df:ad:
         73:2e:a6:16:9a:25:4e:64:90:a4:be:9b:c4:d2:36:79:f6:10:
         df:d3:b5:cd:b0:27:48:cc:e8:99:f2:c4:f5:90:f4:e7:2b:43:
         11:38:37:14:a2:9f:2f:21:74:ee:44:86:df:60:aa:df:2e:8a:
         4c:6c:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:41 2024 by rpki-client on console-ams.rpki-client.org