Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File:                     VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier:          0UJeOlsRJSPIMuyr/gFBDiyC45h5RFt4RsF9CHIBl1k=
Subject key identifier:   B8:C6:21:71:D4:1D:0E:4A:8C:E0:8E:FA:04:D0:6D:48:DE:F7:48:25
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer:       /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial:       01935688DC392A9A73B33D965DDEC800B7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:29 +0000
Files and hashes:         1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: x/hE/0JcMfkzWECNGb6Dl2WhLf1VEd//BizTpZiuNJI=)
                          2: lVQR-VNJCQP7NFhUzxiS0W7izWc.roa (hash: cwP/jQATQ98emvHMd2QlcHrsRELNp+Ko5jOvPdUgshw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:dc:39:2a:9a:73:b3:3d:96:5d:de:c8:00:b7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
        Validity
            Not Before: Nov 23 01:00:29 2024 GMT
            Not After : Nov 24 01:00:29 2024 GMT
        Subject: CN=b8c62171d41d0e4a8ce08efa04d06d48def74825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:27:fd:ec:37:4b:93:6e:a5:53:f3:ef:eb:
                    4e:fa:3e:6a:63:53:67:54:e9:fb:f3:76:c4:15:b2:
                    4e:c8:61:1f:5d:ce:29:74:fc:ea:d2:85:e3:62:d4:
                    94:eb:ce:5e:49:03:4e:d6:9f:6a:3e:82:fb:b4:9b:
                    46:0c:15:18:25:7f:29:de:af:f8:54:e5:68:47:be:
                    93:d5:42:06:f8:28:05:ab:b2:3d:b3:88:1e:af:96:
                    6e:9d:42:b6:b2:0f:24:b0:c7:2d:e5:91:ae:f5:35:
                    db:8d:7d:ca:82:1a:c2:0d:f8:a8:a5:0f:d5:04:6d:
                    48:e3:0a:3b:03:8f:af:31:a0:c1:bf:16:9e:7e:42:
                    b6:7d:b5:4d:35:1c:e2:ef:71:1d:b4:83:c4:60:74:
                    d9:79:51:62:bd:93:3e:d2:36:3c:b4:d0:9f:8e:8f:
                    75:db:0a:cf:05:db:8d:b4:68:02:2e:cf:09:c2:c0:
                    13:df:32:b4:ff:ae:13:cb:14:a0:01:e3:93:0c:dd:
                    3e:9b:40:73:67:4c:21:c4:49:81:5f:6a:d6:30:b1:
                    ac:11:bd:bf:6e:ff:aa:0a:8d:fc:00:18:13:89:56:
                    5e:78:14:5d:34:01:65:fb:1c:fd:b2:91:e7:ad:ac:
                    cf:4e:b7:5f:1a:7e:bc:91:fc:f3:ce:fa:55:d3:9b:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C6:21:71:D4:1D:0E:4A:8C:E0:8E:FA:04:D0:6D:48:DE:F7:48:25
            X509v3 Authority Key Identifier:
                keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:81:1c:b2:af:83:3b:65:65:5b:48:93:14:d1:9d:c0:ec:
         23:68:48:24:50:fd:58:ed:ff:f8:6a:8d:36:fc:ac:60:13:bf:
         e2:1d:29:1d:8c:9a:98:4d:74:39:73:b3:7d:0f:84:35:7b:cd:
         74:68:d2:57:de:b4:e2:53:0d:d2:25:6a:24:f2:ff:d2:1e:bb:
         20:ab:29:c1:0a:12:7c:76:23:da:c0:b5:2d:2a:a0:d1:d2:04:
         7b:6c:10:b8:4b:a2:41:8c:60:7d:94:ef:ba:d1:36:66:e1:20:
         fc:17:1d:97:e0:86:40:3e:ad:d1:51:91:5d:81:84:ce:a0:cc:
         d1:ba:67:41:19:25:29:53:0b:04:79:76:5a:ca:64:be:dd:ca:
         ae:01:64:a1:de:0d:76:e1:6a:a4:ff:9a:4b:1d:5f:81:7b:21:
         92:f0:57:83:91:ad:41:86:e5:a2:67:b8:ac:8a:df:1d:f5:8d:
         10:2a:4b:9a:27:51:2a:59:3d:f7:ac:a1:75:cc:96:26:7e:14:
         ff:4f:85:f9:03:ed:f0:91:04:1b:95:af:20:d7:27:fb:1f:e3:
         41:02:2f:60:2d:23:cc:fd:68:4e:7a:7b:66:f0:9c:ee:ce:9a:
         3e:11:44:e6:be:3e:30:2e:93:c2:79:8f:79:54:6f:3d:91:1b:
         80:a9:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:51 2024 by rpki-client on console-ams.rpki-client.org