Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File:                     vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier:          w5r6Vbq8LvEzKBb7p7oIFGUGHELY7/MsIliKAhLvFF8=
Subject key identifier:   DC:28:E3:35:F1:41:1F:32:A9:91:91:69:51:83:ED:C0:DB:E3:FF:53
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer:       /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial:       01936A7DA9909F83848D496C742CB9DDC03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number:          08D3
Signing time:             Tue 26 Nov 2024 22:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:40 +0000
Files and hashes:         1: OLkNAP8aGt36I_csvICttlb430g.roa (hash: glcNHVgcPmIS6PQMqIvzqAF2DUY4sCF/w5OU3FHYLsk=)
                          2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: a5cemTmBtTn+GQb63eOCeAk87uxzaxrVdHpKUnN07Jw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:a9:90:9f:83:84:8d:49:6c:74:2c:b9:dd:c0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
        Validity
            Not Before: Nov 26 22:00:40 2024 GMT
            Not After : Nov 27 22:00:40 2024 GMT
        Subject: CN=dc28e335f1411f32a99191695183edc0dbe3ff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:29:c6:d8:b9:2c:33:38:2b:d3:06:d3:04:
                    9e:95:d4:08:ea:5f:d2:e0:23:1a:35:c1:e6:8a:62:
                    28:86:ca:ec:ed:e7:ca:86:50:04:39:25:8e:0a:48:
                    70:38:23:71:79:1a:a6:ea:1f:59:51:b4:3a:63:7f:
                    28:d2:cb:59:95:c6:5a:62:ea:6f:48:63:80:a9:73:
                    b3:62:bf:7a:04:21:93:ed:85:e9:e4:9b:cb:80:91:
                    66:73:72:47:10:24:62:75:01:65:5a:a0:93:a6:71:
                    1c:9e:6e:69:0d:0c:38:b1:28:15:72:7d:f1:ff:8f:
                    cd:f8:6a:6e:96:08:59:e2:ac:25:de:a5:7b:1e:7d:
                    84:34:d8:30:93:0f:92:ec:80:72:b1:22:f4:ea:19:
                    4d:7a:ab:25:d8:9b:64:5d:61:87:da:e5:73:b8:f8:
                    47:70:7c:36:42:7c:6f:a0:03:2f:5a:90:1a:cc:74:
                    5d:49:b6:a2:d4:fb:23:62:a8:20:c3:3a:b3:eb:3a:
                    02:6d:ba:20:b9:0a:6c:65:19:cb:af:f5:23:14:ef:
                    cf:68:2a:a2:85:99:b8:92:05:9b:87:ec:65:c5:91:
                    ea:30:35:06:ce:ef:2e:64:f7:7c:1a:52:91:47:14:
                    a0:bd:ac:ea:8b:08:d1:28:e7:24:fc:ed:1d:00:13:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:28:E3:35:F1:41:1F:32:A9:91:91:69:51:83:ED:C0:DB:E3:FF:53
            X509v3 Authority Key Identifier:
                keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:55:4e:a8:e9:7f:19:f9:c5:36:08:af:67:9d:cf:0f:82:
         10:ce:70:f4:66:b6:1d:ca:18:7f:9b:8e:23:53:b2:20:71:87:
         d9:2e:6a:a1:03:35:44:81:41:fe:d4:c2:10:6c:9e:6e:52:9c:
         e4:ba:17:b0:92:65:37:bf:fc:01:40:e2:fb:29:59:31:5b:a5:
         05:73:1d:7a:ec:ba:fd:79:b0:ea:7a:24:48:a9:ce:eb:ae:0c:
         1d:78:49:2b:d2:8e:2a:9c:1a:80:60:af:ea:7b:30:56:c7:57:
         0c:fc:47:73:8d:ba:64:c3:f9:bf:15:ba:4c:96:da:ac:15:cc:
         b4:3a:5c:7d:6f:df:50:48:b3:f6:f8:74:a8:0b:2e:22:1f:be:
         d8:a0:0c:28:21:e6:a8:3e:c6:83:e9:0e:2e:7c:84:46:e6:e0:
         d7:0a:64:51:a6:36:88:fa:94:e1:0a:7a:f2:67:d4:5e:c8:a5:
         85:f3:95:cd:7d:e4:fc:2e:28:db:a0:5b:bb:60:2d:d3:e3:0a:
         9a:ae:b9:26:91:4d:6b:3e:bd:f2:d0:59:ad:fc:2d:b8:da:bb:
         e9:e6:d4:1b:0f:9c:72:b2:fa:ae:c3:e7:58:7c:74:67:21:ed:
         9d:1b:1e:a4:1d:8a:84:eb:69:c1:32:2b:82:d7:2d:46:24:2a:
         a6:26:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:26 2024 by rpki-client on console-ams.rpki-client.org