Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File:                     VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier:          U7LHbZy9unmz2aO9Gsx1qwF+jRbzFQcOwVI5ILPny6I=
Subject key identifier:   E2:44:44:C2:68:27:A8:BF:38:83:A1:AE:65:04:9D:EB:19:D9:3C:FB
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer:       /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial:       0193516284E107DB0C6D1D5BED8E6DFC9C69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number:          0163
Signing time:             Fri 22 Nov 2024 01:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:31 +0000
Files and hashes:         1: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: AugI15VZOndOZRmo8LrGm49EBFfLquayOdQPJXFVYtE=)
                          2: qaQWydk6FB7GEf8gIwZAiy68VWs.roa (hash: mytnFDuDw0yiy0H79vxRv/LVxQaED8L8Amgjxi3Soxc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:84:e1:07:db:0c:6d:1d:5b:ed:8e:6d:fc:9c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c7018034725963a971c96a8caab598cae638a
        Validity
            Not Before: Nov 22 01:00:31 2024 GMT
            Not After : Nov 23 01:00:31 2024 GMT
        Subject: CN=e24444c26827a8bf3883a1ae65049deb19d93cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:cd:78:62:91:7a:43:6e:70:10:0f:c4:11:
                    b2:63:ee:e9:a1:dc:d3:ba:c4:83:5e:07:53:5a:42:
                    c7:be:b3:08:0b:31:24:60:84:8b:95:ed:5b:7b:71:
                    49:79:30:4a:5d:cc:5a:0e:c9:6f:31:bf:a1:2e:a1:
                    73:dc:3c:db:ab:c1:11:59:94:a9:40:1a:eb:d0:f5:
                    69:69:a2:75:7c:c9:54:9a:f1:d0:65:dd:1b:2b:2a:
                    a8:08:f8:96:a5:9e:a6:cb:fb:11:5b:d4:ae:f3:a4:
                    94:c6:85:9f:5a:94:60:31:a9:e9:20:34:d8:89:7a:
                    a4:7f:fa:ee:78:29:ac:ef:cb:3b:d6:88:1e:e0:43:
                    1d:c8:0e:f6:a3:2f:a9:15:b5:0e:85:d2:f3:36:64:
                    89:1a:81:d0:6a:a1:56:c3:8f:81:69:2a:74:1a:cd:
                    dd:81:32:6d:a6:fe:46:b0:3e:2d:e7:62:f0:f6:91:
                    2e:24:84:b4:f0:30:eb:37:4d:c9:bc:f9:34:8f:c8:
                    37:79:df:45:1e:a8:a7:79:ba:e5:ab:a8:4c:21:ff:
                    4e:c5:8f:06:bf:43:7a:b2:1b:58:9c:e7:d6:ba:3c:
                    49:e3:e2:58:f2:b8:42:73:b8:f1:ca:7d:5c:49:08:
                    40:4e:a2:8b:be:10:e8:24:d9:cc:c2:a9:e1:2d:09:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:44:44:C2:68:27:A8:BF:38:83:A1:AE:65:04:9D:EB:19:D9:3C:FB
            X509v3 Authority Key Identifier:
                keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:67:af:d9:e7:ae:e7:0c:d1:38:9f:4c:ef:d7:90:15:18:
         5a:64:46:c5:98:fc:6e:5a:f2:5d:cb:a1:95:ca:3e:32:f7:0c:
         ee:8a:c9:ea:c2:6a:5c:45:f6:bf:61:7c:4f:f3:bb:4b:32:8f:
         5a:08:41:df:d9:11:e4:c9:c0:c0:76:85:5f:85:05:bf:04:58:
         b6:c2:a7:4c:a0:86:2f:0d:bd:ff:b8:da:1f:0b:b9:66:3b:b1:
         a3:3d:65:c8:7e:d5:2b:b3:f4:2c:3f:e5:28:0c:b3:97:3f:b5:
         83:d0:58:0f:d0:06:8b:2b:9f:3d:bd:ef:94:b3:d0:a7:52:4c:
         ab:51:a0:e7:12:30:af:43:21:7e:d4:fb:76:ee:c4:a3:26:ad:
         26:09:db:ca:1b:09:26:00:f2:36:fb:59:dd:ea:14:66:ae:c8:
         74:4e:0c:ce:e0:50:b2:8c:d4:0a:81:4f:7e:c6:56:0a:d7:91:
         0e:a1:c8:e9:e5:72:57:91:a6:a3:12:a0:41:05:37:97:d9:9c:
         5d:b6:47:fd:24:5d:49:db:a0:1c:d5:79:59:73:6f:00:96:5d:
         56:c3:f8:4c:c6:f5:12:83:fd:69:80:38:63:36:4c:09:77:aa:
         42:d9:ca:2c:ce:0f:5e:52:a9:9a:c0:40:e2:e7:60:3e:a5:3f:
         94:8b:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:55 2024 by rpki-client on console-ams.rpki-client.org