Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          h7QOzTenxZkmhhTj8f4kP0eZpiI/NE8erpzCtSfkb/k=
Subject key identifier:   4A:8F:5D:EB:A1:B3:F2:D1:A3:F5:68:63:22:6F:F5:A7:F3:E6:01:AB
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       019352E2F805FB34574675CF48689F2D1E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          0227
Signing time:             Fri 22 Nov 2024 08:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:26 +0000
Files and hashes:         1: JlhRl0uLppmmLALr-hlGhPQ06ws.roa (hash: qemfp1EDPxHNZUgskMQMESooUQzg2M+K/canaQ0Gj3Y=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: rsGpavwgax6aI3vqkZEVMVaqOW+hiT/IbgdGDXyLms8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:f8:05:fb:34:57:46:75:cf:48:68:9f:2d:1e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Nov 22 08:00:26 2024 GMT
            Not After : Nov 23 08:00:26 2024 GMT
        Subject: CN=4a8f5deba1b3f2d1a3f56863226ff5a7f3e601ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c0:98:9e:68:45:a9:23:f5:85:eb:bb:6e:3a:
                    d2:7f:47:06:7b:36:fd:94:60:67:a1:a6:7b:87:f5:
                    5f:1b:88:1f:94:1f:e4:08:be:99:01:8b:79:fe:96:
                    b6:76:8b:9c:a6:9e:b8:0a:4c:8a:33:0e:ad:ef:ca:
                    25:ce:62:9d:69:83:81:2a:b3:80:1b:88:ba:a9:45:
                    1e:78:2e:19:57:85:32:36:07:f4:ac:f1:c6:e5:46:
                    8b:af:62:3a:a0:6c:c3:3c:19:0e:7b:71:d8:3f:62:
                    1f:ac:2c:9c:74:f6:22:49:39:9c:1a:5c:99:6a:51:
                    0f:ac:53:a2:44:ce:0d:5b:01:5a:e8:85:28:31:29:
                    6f:73:e5:23:cd:b4:c8:34:60:be:97:df:2a:0f:69:
                    69:5b:1e:c8:b9:ec:24:fd:3c:09:44:a2:8d:c6:69:
                    13:0e:8a:66:e9:c9:58:40:3f:01:66:a6:49:3e:36:
                    79:fd:46:9b:b2:9a:1a:fe:c9:09:b1:3c:24:ee:f7:
                    de:1f:5d:e3:32:d3:2c:f4:35:8d:5d:37:eb:32:a4:
                    b6:f4:af:7e:b2:cd:4f:a0:78:f3:a3:62:eb:fc:54:
                    2d:44:57:6c:f8:9c:d7:21:ca:bc:56:17:c2:dd:77:
                    32:d0:1e:1b:f4:4b:90:08:fd:db:8a:ab:35:08:09:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:5D:EB:A1:B3:F2:D1:A3:F5:68:63:22:6F:F5:A7:F3:E6:01:AB
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:a2:19:f7:ba:2f:29:ba:ba:cd:83:47:71:41:11:d4:15:
         4b:92:2e:38:9d:c1:3d:ed:8e:11:57:85:a0:d9:3e:e4:48:cb:
         ac:f0:ac:ec:15:cb:c9:f8:8c:b4:c4:7e:ca:10:b3:90:ff:ef:
         32:64:bd:13:25:6e:99:a2:75:37:da:19:c7:db:d1:d3:fe:0f:
         8f:25:78:b4:b0:a5:df:75:2d:92:27:0a:a1:01:34:76:ad:04:
         f3:f9:fc:80:0a:5d:6d:1a:f5:96:6a:1f:6c:3a:c9:98:39:d1:
         fe:31:d9:42:b7:42:80:ef:34:3d:58:54:78:29:8a:e5:15:95:
         bf:a5:5a:5f:a9:d1:58:cd:b4:e3:cc:43:ef:96:87:a5:88:62:
         04:81:13:65:cc:ea:fc:ca:6c:36:e0:79:ef:7c:cb:f1:f5:c1:
         86:90:f2:bb:0a:74:56:a9:3c:5d:68:9f:26:87:c8:35:cc:4b:
         2a:32:cc:c3:ce:ad:3c:44:ab:44:08:89:75:b8:54:19:ba:6b:
         64:53:39:00:83:06:3a:27:83:4f:b4:02:69:ab:7e:7d:82:cd:
         39:8e:16:6a:53:66:47:98:e0:10:db:55:8d:6c:cd:6c:62:7b:
         1b:b2:20:57:b9:e8:bd:5b:f3:5d:35:de:2c:4d:3b:2c:af:fe:
         b5:57:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:43 2024 by rpki-client on console-ams.rpki-client.org