Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          7Q9afR8Q7NEmp68T2a7abUEWV/yrCbhOG7EyClaWdU4=
Subject key identifier:   D2:75:43:F5:FA:F6:BD:C4:C9:4E:1E:B8:92:CD:2A:47:FD:E6:06:E1
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       01936AEB2ED60AE46E6E25A308744815C549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          0FCA
Signing time:             Wed 27 Nov 2024 00:00:17 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:17 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:17 +0000
Files and hashes:         1: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: sS0RaK6yYCJ3qMZxrucTqioSmiqsQ6KghSOAfEz/QzI=)
                          2: jZEeN2dD7zXNwcTRESJFU4B37E8.roa (hash: M+vv7jI0tG+bw2xMDomp0pBPfDPRqBlcu8CdqZPNxhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:2e:d6:0a:e4:6e:6e:25:a3:08:74:48:15:c5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Nov 27 00:00:17 2024 GMT
            Not After : Nov 28 00:00:17 2024 GMT
        Subject: CN=d27543f5faf6bdc4c94e1eb892cd2a47fde606e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:05:57:a9:d1:70:4a:b7:89:6b:5e:ca:0b:
                    72:d8:e4:35:55:5e:9e:27:e8:17:5a:0e:27:1f:4c:
                    90:b0:e7:fc:ea:36:90:9f:60:ff:dd:48:87:ee:32:
                    fd:6d:b9:fc:c8:df:4b:83:26:77:63:4d:08:6a:4c:
                    55:28:49:58:22:a5:94:ea:d1:6a:6e:d7:d6:83:62:
                    e3:3f:5a:97:24:a2:90:cc:24:f4:71:3d:47:81:86:
                    f6:92:ed:54:38:8a:e7:01:ee:c9:a2:49:21:c9:e1:
                    f1:18:8d:c7:94:65:2f:cf:c0:04:2a:fe:fb:2c:00:
                    c0:98:ef:53:b9:38:98:37:31:37:2f:e4:15:a9:7c:
                    8b:30:2b:13:41:1b:2d:f5:94:54:46:54:2e:5d:91:
                    a8:26:1a:d0:4e:c6:2c:39:80:7e:d2:17:92:15:a5:
                    e5:4f:32:12:65:67:3e:0f:52:1c:28:79:07:82:bc:
                    50:7b:a7:1d:f7:90:78:2d:74:d1:26:fb:ef:2d:02:
                    68:6f:61:4e:75:cd:a2:a4:12:51:de:ff:fd:b4:ac:
                    44:f3:13:74:5d:50:15:ea:5a:3a:0e:37:cf:f8:57:
                    e9:09:bf:5d:82:7c:62:a7:18:56:13:fc:7c:44:60:
                    e9:9b:3f:92:eb:f7:11:72:94:33:dd:10:ef:8d:11:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:43:F5:FA:F6:BD:C4:C9:4E:1E:B8:92:CD:2A:47:FD:E6:06:E1
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:69:81:6d:10:07:66:fa:03:f0:eb:fd:7a:52:fe:72:2d:95:
         6b:1e:28:30:9f:6b:45:df:6d:64:90:e2:57:9d:bf:12:7f:33:
         ad:ba:0c:2c:7f:ea:6a:19:10:b1:a5:49:9f:f4:b8:e6:f6:07:
         fb:c6:a6:96:01:fa:40:18:0e:63:c8:32:25:55:30:cb:73:b2:
         3b:4e:30:a0:37:64:e8:88:65:ee:fb:79:59:9d:0d:92:c4:1a:
         d3:93:17:ab:a5:b4:af:63:56:d8:f1:28:cf:07:ec:74:1f:68:
         78:35:05:c5:97:ae:f9:a0:93:90:b5:ad:84:ef:7d:92:06:d3:
         6e:ae:19:aa:60:e6:53:86:62:f8:db:67:89:8d:63:90:f7:5d:
         3f:0f:aa:9b:ba:da:f2:97:8b:2a:55:93:9e:e0:ba:99:4b:83:
         c9:e7:a4:98:a8:2b:f1:34:59:10:04:77:87:95:3e:1a:43:df:
         e7:70:c2:9f:6b:90:55:91:f2:d9:ed:49:d5:ec:2a:ac:07:72:
         7d:4d:af:c4:5f:47:02:eb:55:b0:ef:95:4e:3a:a8:6a:0d:e6:
         7f:1a:91:74:a0:59:bf:47:f7:9f:4b:5e:6a:ab:fb:60:9b:1b:
         28:70:13:9d:23:35:60:70:17:c8:43:04:e9:01:e7:a6:67:3b:
         da:3c:8f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq6y7WCuRubiWjCHRIFcVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi
NDExZDEwHhcNMjQxMTI3MDAwMDE3WhcNMjQxMTI4MDAwMDE3WjAzMTEwLwYDVQQD
EyhkMjc1NDNmNWZhZjZiZGM0Yzk0ZTFlYjg5MmNkMmE0N2ZkZTYwNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijEFV6nRcEq3iWteygty2OQ1VV6e
J+gXWg4nH0yQsOf86jaQn2D/3UiH7jL9bbn8yN9LgyZ3Y00IakxVKElYIqWU6tFq
btfWg2LjP1qXJKKQzCT0cT1HgYb2ku1UOIrnAe7JokkhyeHxGI3HlGUvz8AEKv77
LADAmO9TuTiYNzE3L+QVqXyLMCsTQRst9ZRURlQuXZGoJhrQTsYsOYB+0heSFaXl
TzISZWc+D1IcKHkHgrxQe6cd95B4LXTRJvvvLQJob2FOdc2ipBJR3v/9tKxE8xN0
XVAV6lo6DjfP+FfpCb9dgnxipxhWE/x8RGDpmz+S6/cRcpQz3RDvjRFugQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ1Q/X69r3EyU4euJLNKkf95gbhMB8GA1UdIwQY
MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt
M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4
LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWmBbRAH
ZvoD8Ov9elL+ci2Vax4oMJ9rRd9tZJDiV52/En8zrboMLH/qahkQsaVJn/S45vYH
+8amlgH6QBgOY8gyJVUwy3OyO04woDdk6Ihl7vt5WZ0NksQa05MXq6W0r2NW2PEo
zwfsdB9oeDUFxZeu+aCTkLWthO99kgbTbq4ZqmDmU4Zi+NtniY1jkPddPw+qm7ra
8peLKlWTnuC6mUuDyeekmKgr8TRZEAR3h5U+GkPf53DCn2uQVZHy2e1J1ewqrAdy
fU2vxF9HAutVsO+VTjqoag3mfxqRdKBZv0f3n0teaqv7YJsbKHATnSM1YHAXyEME
6QHnpmc72jyPFw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:02 2024 by rpki-client on console-fra.rpki-client.org