Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File:                     vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier:          gfeX7Zfj1Bv+4OZxPkKCVGUQG5osEOxJJvCCUV4bT6E=
Subject key identifier:   73:DE:3F:34:8A:E7:9D:BD:52:66:D1:EF:3A:34:47:17:62:39:FB:78
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer:       /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial:       019369D89732CB7C6F09619FEEF9D9565042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number:          05E4
Signing time:             Tue 26 Nov 2024 19:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:22 +0000
Files and hashes:         1: JXDvt7t6bNT_XkMpvNoK0SYWdy8.roa (hash: QmV2OiJ/MXcPCDT/zU2kpqnFpr/WLvftME7EbiguP5I=)
                          2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: NVk8xgw+NiRyxxf/oAv6M8iGX1HCYyqCOFIxmBzCjjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:97:32:cb:7c:6f:09:61:9f:ee:f9:d9:56:50:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
        Validity
            Not Before: Nov 26 19:00:22 2024 GMT
            Not After : Nov 27 19:00:22 2024 GMT
        Subject: CN=73de3f348ae79dbd5266d1ef3a3447176239fb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:c1:9e:2f:be:99:49:b8:fe:9a:c2:95:e0:
                    d2:f3:ed:a0:aa:e4:b8:84:1f:4d:58:9f:f2:e3:8d:
                    62:8b:1d:d9:d5:eb:01:21:a6:1e:57:b5:9b:a5:30:
                    06:2a:f4:af:65:1d:c5:82:c6:2c:59:08:c3:d3:10:
                    55:ad:d2:b4:60:f7:5d:1b:0f:c0:56:58:17:0b:9a:
                    95:9f:15:bc:26:0c:4b:91:2e:e4:6c:ac:f5:b6:1c:
                    60:a7:79:ef:0a:1c:ad:42:a2:83:e5:fe:96:95:c3:
                    f3:4a:87:01:e3:24:5e:c8:5d:3f:ef:0c:a4:29:4f:
                    42:af:80:a8:ee:72:11:50:48:a5:b4:2a:f2:1a:36:
                    61:56:72:d6:66:d1:7e:31:63:c8:a8:06:3c:49:63:
                    1a:a1:f8:41:b3:2c:e0:f5:1f:fc:a4:2b:e7:ba:92:
                    5c:7e:d9:0a:50:77:84:d1:45:5f:ec:49:ce:15:d2:
                    82:8d:2f:46:49:10:1a:86:01:00:e1:60:d3:2d:ca:
                    51:de:4e:a6:24:de:5d:a7:cb:5d:cf:23:4e:b3:ba:
                    1b:1a:39:41:08:8c:81:19:55:b9:75:54:89:8c:df:
                    3c:84:8e:63:e7:1f:87:7b:88:f3:f7:18:19:c0:86:
                    6f:c7:20:58:78:5b:9a:57:a8:2b:1c:4e:e9:3d:fc:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DE:3F:34:8A:E7:9D:BD:52:66:D1:EF:3A:34:47:17:62:39:FB:78
            X509v3 Authority Key Identifier:
                keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:41:fa:68:dc:39:58:7b:2d:4f:32:f1:0b:b6:ee:c6:4b:bb:
         49:9b:14:94:bb:bb:17:76:8d:0b:b2:99:4a:1f:53:58:b6:5a:
         ec:b4:57:c8:46:27:a3:c4:27:04:d8:e1:69:1e:d5:cb:13:7f:
         5d:7c:82:d2:32:a1:86:c8:ca:09:ec:86:46:f5:03:0e:66:1e:
         5f:5e:22:0d:a7:54:52:ed:72:a8:4e:7b:ed:a0:28:c0:17:a1:
         74:ce:30:ee:4a:dd:0f:00:43:9e:89:28:a0:88:77:84:21:ee:
         d9:b5:49:ed:d8:25:8a:8d:3d:be:28:32:f9:0b:8f:df:e9:1c:
         3f:47:8e:4f:82:80:cc:ef:e6:33:8f:1a:2a:f2:8d:a5:85:9f:
         3f:c6:03:bc:29:af:09:41:67:3b:db:9e:39:72:80:ac:0d:0e:
         e8:a3:48:33:fb:8e:3a:69:74:6b:2f:3d:ff:7f:1f:b4:9c:0b:
         32:34:95:52:2d:b2:bb:86:97:6d:7b:81:96:1b:22:b0:c0:3c:
         da:83:15:1a:c6:54:9a:b2:52:f4:fa:f6:2b:e0:08:68:a7:fd:
         88:f4:04:90:45:bd:ac:02:4d:a5:40:8d:74:d2:0d:3a:20:19:
         e1:bc:77:2c:fd:4c:51:3d:0b:99:2d:94:9a:34:81:6a:5f:e0:
         a5:b3:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:43 2024 by rpki-client on console-fra.rpki-client.org