Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier:          S6x5Qyix0PjIZuJlV7RP9V+RdzS5UEFmo9AxR9AGWuM=
Subject key identifier:   A6:5A:6B:D7:03:46:29:F7:E6:5F:DB:6A:A3:A9:C5:BC:FF:14:AA:5C
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer:       /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial:       0193568A242824CDB757805C56DFB7163685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number:          02D1
Signing time:             Sat 23 Nov 2024 01:01:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:53 +0000
Files and hashes:         1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: BrVHTDa26iyM4TLH8qsTOfTe01mDXIHLyYYiw+92qN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:24:28:24:cd:b7:57:80:5c:56:df:b7:16:36:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Validity
            Not Before: Nov 23 01:01:53 2024 GMT
            Not After : Nov 24 01:01:53 2024 GMT
        Subject: CN=a65a6bd7034629f7e65fdb6aa3a9c5bcff14aa5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:ab:f2:9d:8a:25:59:9c:2b:2c:b8:f0:31:
                    49:ce:4c:7e:2d:73:90:cb:60:eb:94:c8:ff:20:3e:
                    53:27:33:11:86:c3:4c:fc:14:3f:3b:d4:c0:fa:06:
                    45:8a:65:3a:37:ea:0c:00:93:68:24:b1:05:f9:32:
                    0d:97:6b:a5:ba:61:c7:5e:88:d1:69:4e:71:d4:e2:
                    24:94:11:20:a9:f9:62:75:6a:d4:1a:1c:ed:7e:8e:
                    92:6a:6d:c9:1f:7d:e8:45:df:65:f9:51:6e:35:d6:
                    fa:90:fd:04:81:40:cf:6e:96:61:70:a2:2e:3c:d2:
                    95:78:cc:0e:7f:1b:82:39:2f:a7:2f:7e:11:cd:de:
                    dc:ce:76:f8:6f:f5:2d:58:d0:c2:05:b9:17:57:da:
                    0c:f2:9c:6d:7c:65:2f:66:c0:0c:97:cc:1d:e5:e1:
                    f9:2a:9e:ac:5c:ae:cb:49:c0:9e:3e:a5:2b:b6:f9:
                    4d:81:76:d0:22:78:21:4b:2b:14:7a:0e:fd:c3:e5:
                    97:eb:0c:cd:35:bc:71:75:af:17:85:55:33:b8:dc:
                    ae:81:50:fb:63:d3:8f:ed:c7:b9:34:48:c0:9e:3f:
                    f9:1c:d2:f4:f6:6c:10:76:1c:e8:57:9b:69:49:98:
                    a5:8d:9c:d6:ac:ac:77:10:a8:ee:36:15:05:c1:3e:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5A:6B:D7:03:46:29:F7:E6:5F:DB:6A:A3:A9:C5:BC:FF:14:AA:5C
            X509v3 Authority Key Identifier:
                keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:82:14:fb:2a:33:34:1a:c1:b1:fd:2b:19:20:1f:90:04:4e:
         45:08:8e:2c:80:08:a9:55:ec:dd:72:51:82:c5:90:e7:d2:e8:
         84:ca:cc:be:d6:b1:cb:00:51:a8:11:04:e8:65:c5:61:c0:48:
         1a:c0:11:ad:da:ca:b8:e6:28:6e:2a:37:a6:f5:dd:66:4b:8b:
         78:74:d6:3c:52:a7:fc:ca:a6:0d:b9:1a:b8:a3:e1:c0:88:ee:
         37:58:c1:19:55:37:54:f2:37:ac:c4:a5:5a:d9:4e:a0:a5:00:
         52:f8:5e:4e:bc:09:a7:82:86:66:7d:0c:ae:e5:cd:17:45:f6:
         fe:2f:c2:95:d7:ce:28:12:08:d4:eb:7c:4b:68:36:00:a7:c4:
         9b:ed:ec:c2:2b:64:3b:61:a4:84:a7:4e:81:30:63:bd:e8:f9:
         a7:47:9e:d8:01:aa:8b:07:39:a8:46:7d:e4:72:b1:30:53:90:
         67:6c:4b:9b:d2:1f:79:42:e1:3c:a5:8f:05:98:12:88:de:35:
         23:d8:3a:3f:bc:a3:9f:57:a1:a8:4c:f6:18:6b:bc:64:b5:2f:
         51:88:8b:35:2c:2f:2a:fb:21:3a:2c:70:07:d8:87:59:b2:02:
         b0:bf:ce:b9:8b:de:a0:4e:0c:e8:67:dc:13:24:d0:a8:11:c1:
         69:52:0b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:34 2024 by rpki-client on console-fra.rpki-client.org