Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          mbKWcNgUglZhY2DyiS1zNHVzqlRxgB2qF+qGErwCxzw=
Subject key identifier:   F1:B7:B8:90:EE:90:C2:FE:A8:42:E5:5B:6D:9D:F5:3F:FB:10:AB:E9
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       019369D8B955D2094BD7FC06C77BE01C8C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          0F14
Signing time:             Tue 26 Nov 2024 19:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:31 +0000
Files and hashes:         1: jo7grHdiLm0iiS1-h57taF-asAg.roa (hash: kH4gI0/SEdo6PdbG9KLhqSblMfwDwBe4bFL2AF5J1zQ=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: Zqzn/8/fjwNJV/dP0jIvyVz4g/Dz4l2TlGBT1M2ueus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:b9:55:d2:09:4b:d7:fc:06:c7:7b:e0:1c:8c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: Nov 26 19:00:31 2024 GMT
            Not After : Nov 27 19:00:31 2024 GMT
        Subject: CN=f1b7b890ee90c2fea842e55b6d9df53ffb10abe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:78:db:e2:81:eb:a1:cd:b5:c6:de:76:35:
                    ae:b7:df:1c:44:d2:b9:dc:e8:6f:be:05:4c:eb:77:
                    8c:1d:6c:84:f7:bd:7c:af:30:27:ba:21:3a:a6:c7:
                    a0:e4:f7:5e:4a:2f:1b:c3:d0:f9:ab:73:d6:ec:04:
                    19:c0:45:25:39:43:e8:24:63:a8:fd:da:d1:09:d2:
                    00:08:4d:0b:13:7e:00:d0:9e:b2:24:08:65:df:d3:
                    42:c7:8f:d5:ae:8d:ba:90:4f:c1:67:24:b2:1d:b0:
                    95:4f:2b:5b:a3:42:44:8d:16:75:87:e4:c5:de:c6:
                    00:af:cb:67:2d:f4:69:83:dd:c8:b9:57:23:66:3f:
                    57:f5:6d:88:b2:ea:3c:74:ed:62:29:15:33:05:f5:
                    b1:7d:da:ae:3b:41:4d:c3:c5:ad:1a:44:38:65:6e:
                    22:b0:c5:a7:e6:70:b6:8a:0d:6e:9d:a6:5a:4d:66:
                    ab:37:23:ef:31:43:03:be:63:d5:99:b5:a4:ac:88:
                    a0:19:40:7d:1b:0c:ac:ce:35:e6:b7:c3:21:ee:82:
                    62:68:27:d4:69:4f:94:ab:33:a7:9d:15:31:5b:f7:
                    c7:39:30:79:c5:57:99:e2:2d:90:d0:0f:79:e1:bc:
                    04:03:26:cd:e4:28:d3:3d:c1:f1:66:8d:f7:1f:f7:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:B8:90:EE:90:C2:FE:A8:42:E5:5B:6D:9D:F5:3F:FB:10:AB:E9
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:d6:23:68:80:18:cb:38:bb:04:c9:4c:c3:a4:75:5c:24:a9:
         14:81:7a:1e:38:de:2b:61:eb:62:57:bc:7e:63:09:27:95:6d:
         10:32:32:44:f4:89:e3:03:73:4d:c6:33:e9:24:da:d2:ea:2e:
         0f:ed:e3:75:c0:7f:d6:85:7d:32:73:87:96:26:8c:e7:42:85:
         dc:f5:d4:41:3d:32:5a:14:d6:2a:20:f1:03:4f:81:48:6a:4e:
         bf:d8:75:c9:18:b7:77:6e:0c:42:e2:93:83:a1:4e:2c:35:c6:
         7d:75:88:72:13:66:8f:c7:2b:7a:fa:49:b9:bb:14:45:76:49:
         5c:d6:ef:74:ee:f5:d9:4e:c7:d3:26:2c:48:9f:83:30:1d:19:
         94:94:8b:f1:ac:61:71:1e:22:4d:a0:1b:c1:75:36:b7:5a:87:
         31:be:67:a6:b1:4a:79:40:1e:ad:e0:3f:15:8a:95:d2:0a:10:
         b9:15:2b:c1:13:9f:77:6c:37:d5:90:69:4d:86:79:27:3d:3f:
         4b:cb:74:07:6d:51:05:43:bc:9b:bd:cd:6d:ce:73:0d:6a:21:
         41:31:fd:03:69:2d:df:41:90:c1:ae:de:a6:02:a4:ed:0b:95:
         a1:b7:c6:af:df:9d:da:fe:5a:20:46:c5:a9:77:88:d3:cf:b0:
         8f:ba:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:32 2024 by rpki-client on console-ams.rpki-client.org