Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
File:                     VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft (raw, json)
Hash identifier:          PVQlSa1N7xY2buO70iGhB6G1BCqsWeM1p0Yha+6EuIU=
Subject key identifier:   26:5B:24:C8:FE:AA:0B:AC:35:F7:C5:B8:31:BB:0A:A2:C7:61:93:72
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Certificate issuer:       /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial:       019367EBF4DA329F72828B60D4A315900EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
Manifest number:          1268
Signing time:             Tue 26 Nov 2024 10:02:17 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:17 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:17 +0000
Files and hashes:         1: VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl (hash: 9e85yPedep0OkeZ2hFelh4Hxft+sWZzpEM1fXyuXR04=)
                          2: sxEh9CHK20m_JZ--Tiv-q8Wab2A.roa (hash: uDtluRyJ/A8BkqQbyzMN0ub/Rz2C7WOHTU0QXnSdjSM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:f4:da:32:9f:72:82:8b:60:d4:a3:15:90:0e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
        Validity
            Not Before: Nov 26 10:02:17 2024 GMT
            Not After : Nov 27 10:02:17 2024 GMT
        Subject: CN=265b24c8feaa0bac35f7c5b831bb0aa2c7619372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:b5:c0:db:b3:9f:3f:bc:d5:37:42:8c:cf:
                    56:ea:2e:60:40:b5:db:97:b2:0f:b8:23:67:95:22:
                    03:2c:6e:d5:15:e6:ca:87:27:ed:9f:76:09:53:07:
                    c3:c6:43:9b:a8:4e:75:c4:55:e0:01:fd:a7:22:19:
                    f4:d8:14:7e:6f:06:b3:12:56:46:7a:4d:fa:17:07:
                    d9:d0:e2:88:53:8b:db:fe:a3:70:54:9b:81:47:53:
                    68:51:fc:d8:50:63:c0:f0:84:d2:86:8f:d1:c0:3c:
                    59:a7:4c:00:27:f6:ad:af:f3:3b:53:ff:65:79:4b:
                    44:25:2b:45:93:10:f8:ff:45:9e:f1:38:9c:65:af:
                    26:08:eb:39:b8:8d:cd:25:38:be:61:a4:97:36:bc:
                    ef:7d:11:41:57:66:c1:7a:07:bd:0f:d4:5a:73:3e:
                    dd:74:64:a6:cf:cf:ac:4a:49:b6:78:32:52:7d:31:
                    97:70:5f:b2:cd:4c:9a:6a:e1:82:61:ab:30:14:ac:
                    d7:ef:2a:cc:68:e2:0b:7b:be:2c:c0:e9:b8:52:e6:
                    d1:f2:6b:8e:cb:ed:c3:0a:d2:6d:5b:a9:b3:7b:95:
                    b0:90:1a:b9:24:87:67:de:ae:fc:f4:c4:26:7e:69:
                    ab:49:f5:a4:56:9a:46:c9:85:4e:82:9c:27:2d:53:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5B:24:C8:FE:AA:0B:AC:35:F7:C5:B8:31:BB:0A:A2:C7:61:93:72
            X509v3 Authority Key Identifier:
                keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:90:7b:7d:4b:c1:7b:92:e5:69:f6:0f:d9:00:3e:d0:ca:
         9d:75:48:42:73:51:9b:5c:2e:6c:ed:3f:53:b2:f5:c5:93:e3:
         af:c7:62:36:63:5f:93:07:33:34:d3:0a:0a:12:b2:79:85:98:
         95:69:48:3d:66:7a:ce:c2:ce:8c:22:5d:72:0c:61:c0:b8:33:
         13:54:41:0d:9e:ff:5e:7f:7c:1a:84:36:3a:c3:bd:09:57:a7:
         0e:80:fa:a3:81:3c:cc:a3:7c:1c:18:71:2e:32:21:e5:d9:6d:
         28:56:dc:1f:e4:d6:e1:2d:3f:52:16:12:c4:b8:cd:3c:6b:46:
         7b:db:c3:cf:31:b1:c5:ee:41:84:5d:fc:b3:2d:3e:38:4b:ad:
         0d:a9:81:e8:e1:65:d2:5e:7c:cd:f5:94:d1:d1:09:14:3e:0e:
         e9:ae:20:8e:b0:25:67:87:a2:6b:ae:88:8e:41:76:ee:2c:3e:
         95:fb:d1:75:02:2d:ee:89:25:d5:49:b7:e1:f5:1c:6a:a8:3b:
         8f:b3:84:db:83:28:10:dd:9b:63:f1:0f:4e:69:d2:1f:41:9e:
         14:0a:e1:75:13:60:55:50:2d:8f:9d:4f:d7:e2:c6:00:f4:2e:
         9b:fd:67:26:1e:0e:89:53:ee:01:de:48:e4:9d:bc:d3:b4:ba:
         66:8b:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:58:28 2024 by rpki-client on console-ams.rpki-client.org