Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
File:                     vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json)
Hash identifier:          owetgKhuskyH0jrzwAXkDTumCRL6p7yLWdfWCVnMJsY=
Subject key identifier:   0C:89:7C:16:48:9C:34:D6:D2:D7:FA:E1:03:A6:23:81:36:04:AF:0B
Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
Certificate issuer:       /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Certificate serial:       01936B22452A9CC3469A68B73FA71DADE988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
Manifest number:          0D85
Signing time:             Wed 27 Nov 2024 01:00:28 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:28 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:28 +0000
Files and hashes:         1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: P5gIhUuHghKiO50TyUMvkGI42FS2RrEMO+Elm8B8is4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:45:2a:9c:c3:46:9a:68:b7:3f:a7:1d:ad:e9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
        Validity
            Not Before: Nov 27 01:00:28 2024 GMT
            Not After : Nov 28 01:00:28 2024 GMT
        Subject: CN=0c897c16489c34d6d2d7fae103a623813604af0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:06:a1:3a:22:71:dd:e3:bc:2d:99:e8:f3:
                    fa:bd:6a:b4:05:4e:90:8e:0f:53:71:97:fd:70:81:
                    f9:1d:ad:2e:02:e1:c6:ef:03:6c:2e:e1:a7:63:86:
                    90:7f:54:46:98:a8:1e:1a:b1:51:e8:b8:08:11:01:
                    15:04:96:a8:82:f6:7e:b9:ce:b7:76:41:cd:06:f6:
                    94:69:40:49:0f:c7:b3:0f:2a:90:e7:f5:18:de:e5:
                    6c:5a:04:fc:86:d6:22:e5:8e:14:aa:a9:43:15:36:
                    76:d5:8b:2a:58:f5:ba:53:4c:59:10:d2:57:0b:8e:
                    36:bb:aa:a4:88:63:56:cc:5e:64:cc:f8:0f:fe:f6:
                    76:7a:87:39:6a:e3:26:01:a7:01:29:2f:27:8f:2f:
                    26:bb:76:8b:36:78:5e:7e:f4:87:f6:b1:02:b3:8e:
                    4a:17:0c:52:a5:39:36:0d:32:79:f6:51:d9:b9:b2:
                    3e:91:c4:96:f7:50:9d:7b:44:a2:74:42:9b:51:8e:
                    22:1a:43:cb:ed:75:72:e6:51:aa:58:cf:0c:61:22:
                    b9:22:7d:b2:ca:c4:b0:ed:e4:73:9b:a1:0a:a3:cf:
                    49:ed:2a:3e:ae:8f:ef:08:c2:2e:a0:69:1c:48:62:
                    1a:0a:ef:1c:95:db:c7:6f:23:45:11:06:f9:c6:7d:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:89:7C:16:48:9C:34:D6:D2:D7:FA:E1:03:A6:23:81:36:04:AF:0B
            X509v3 Authority Key Identifier:
                keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:52:0f:61:50:56:1d:41:25:d8:7d:b9:ed:a0:dc:cb:b7:12:
         66:3a:30:c1:03:a2:dc:41:1f:71:56:1e:86:97:90:e7:cc:bd:
         f5:2a:56:90:2e:3b:33:8a:25:d3:37:af:53:e2:ca:a6:d6:b9:
         57:d0:bf:d7:34:8f:19:f7:2c:7a:e9:d8:49:01:39:2f:bf:09:
         e1:dc:61:a3:94:94:f3:cc:85:84:26:b5:09:03:30:2a:87:67:
         2c:3f:25:0c:2f:37:e5:e1:37:0b:89:1a:4e:0a:9f:df:79:fa:
         95:11:69:81:c3:28:04:d4:66:a5:a9:b3:a8:47:5b:64:44:56:
         d7:21:03:8f:cb:d3:2b:ab:86:d3:c7:81:e5:b7:b3:a9:6f:49:
         df:ae:37:36:ed:28:e6:b3:0d:77:ed:18:61:60:71:06:f9:df:
         03:8f:2f:66:52:43:d7:87:ab:ba:4b:a1:c4:5b:89:5d:df:dd:
         5f:94:32:8b:d7:5a:82:91:f9:72:31:77:a4:26:9f:3c:c1:aa:
         ec:e8:93:72:a0:fe:53:48:19:78:90:9e:b7:7f:32:0d:0f:40:
         d1:28:d3:9b:be:61:36:88:3e:92:20:d9:09:97:0e:a9:c5:e9:
         18:a1:e4:89:ee:e2:cb:09:a4:6b:45:71:85:cd:0d:85:4a:f1:
         d8:f5:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:18 2024 by rpki-client on console-fra.rpki-client.org