Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
File:                     VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft (raw, json)
Hash identifier:          hvbD7l8c6U7FeV5UMmlHynfOt4Wr1+iIizgX9gWkiSI=
Subject key identifier:   FD:F0:96:B2:D4:57:EB:2A:BD:4B:62:AD:7A:8F:23:8C:3F:24:8D:BB
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       01935207AAE0F6AFF6B006DFC019C72DA103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
Manifest number:          042D
Signing time:             Fri 22 Nov 2024 04:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:54 +0000
Files and hashes:         1: 4QsMx7IPQ9R8PSfkwsPVl7qLw4c.roa (hash: d2TBtc5tqRhgWCcjEUkEt3Qi/mjQ1XZhMV68ZYXR+CE=)
                          2: AclBH9NMUSs52btKJPf6eMiIKwM.roa (hash: uIVS7NhX87ckfW1T7tn9JlGUPPVUTG/BxctFB91CXbA=)
                          3: CrMTnBfTdRINWG16LBWPKRN0qFo.roa (hash: 0KBGsXwMDunxwYhr8VNOxzqm7Tb7AvyDWAswPdLW2TI=)
                          4: DDODy9O-gLdNuQPRPTUdz-MYrKM.roa (hash: U/52avz6JJp8fyHIg7vAYhZXF5ijoXi0le3iekTgYwE=)
                          5: HXn51sWo6NnltS1Y7Ot_v0fMPRg.roa (hash: 04vzFPUNmO1JTV7jZZM4HElKEHWMiVBovolXVk8s0X4=)
                          6: NjU6E2GjKMifiwQvRwMGney7f2I.roa (hash: qYmW97zWwGVcp75TCfkQ97lAtCCTY1LDL+IUA1O4GkA=)
                          7: OodCxvf3GjWkcuNj0EkGv25RPf4.roa (hash: NzQmG/viVCRIM9t8kAyuFhtTg9NIY9BsNYueeJqnvNg=)
                          8: VBm1I9Jt3dK4aPCbQMkKU3WlH-k.roa (hash: Z9qHPT0ab19W+gpdrpXQxewmfuOrU9J1ChhvDMK4M50=)
                          9: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl (hash: c4AlbeIeRFQbzoV3DMzoA2ip9s/WzJ8XcBx6OdOnjT0=)
                          10: a2KVndTe_hIaGqXtRdnsq8Ecy2Y.roa (hash: za8g42xmaHUTpqA1LLwEr4yjS36cuNPogK7K+yl01O8=)
                          11: cy-yQy1ppYJYkXv9M8NSQAnRDQ8.roa (hash: F1k2uyOLmuMWrJGz3JWqRK0etDU2O+s3WDacKofmB2A=)
                          12: h3aQxTdPC-HgXDYrBTBm269F5T8.roa (hash: UtQOwsPBex6Y/gaOFIvyrVP3f9gv/mUhr8M/KLSeTkY=)
                          13: iIS7f0TYsrBUmBGb7N_Eoc8hyEY.roa (hash: 51ySSXU+gQMsJJd0lwzZFjCyKpY8rXSp50W8MyZfWCg=)
                          14: iV_GjJJCcBVfKCR-qV3WPo6JfC8.roa (hash: fEaCTD91sHLnaq3Vf8VpolAHfK17IX64IhiADU99YbE=)
                          15: jjWUbzwB8IBxfWHPdUGXQvFw6-I.roa (hash: D6MdSYiqYBdY+DYrC2G9FIsLezWiD8DQl/N2mhREsxo=)
                          16: lU087P7wZlFSMjgoyXsxY9zXmik.roa (hash: 7O4xkPdjYcKY9zlyAkEK5+5UWHFzspkvrS/Kd21GvuA=)
                          17: nXQYMBaM7GKPKeBITcoqld6AXf8.roa (hash: RI5YIpgEb7cN1liA/mHPOoCygSfwaQ++ICDD1+ynQYk=)
                          18: oaoyO-qmCOzkLJAZ9NxvNZs0GsY.roa (hash: OjgvI+y+BzOgo+Jz0pCY/MIMgm7EpuhFElmFdZ7zq1A=)
                          19: pJxzYm4p1929BU4YpF5R9CCcSww.roa (hash: VyM8OWNXaEH/oo1AlEjjNHPrpYxYn1BvagpowLddAUU=)
                          20: tr-7-LW22-F644QJA0E93mmq9e4.roa (hash: OJhI6XM+ynOcGfMMqRxrNrO4CJwzqAEyUwdqm+bMaHs=)
                          21: xzTWRGBZUqJe71WzlNjbK22Xz9Y.roa (hash: 2JJAzYqugQ9anH7n5tEYQ2DUBm7VjxL7KrxKSjDCUPw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:aa:e0:f6:af:f6:b0:06:df:c0:19:c7:2d:a1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Nov 22 04:00:54 2024 GMT
            Not After : Nov 23 04:00:54 2024 GMT
        Subject: CN=fdf096b2d457eb2abd4b62ad7a8f238c3f248dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:9d:f9:8b:a1:72:cf:8a:11:fe:dc:6a:df:
                    38:04:f5:7c:c0:23:ab:c4:31:4e:10:06:54:2d:b6:
                    d0:82:9e:11:d9:d5:2f:a7:b5:ba:3a:63:7b:cf:a2:
                    81:5a:52:d2:a1:08:1e:88:d8:c2:84:1b:ec:14:8f:
                    de:75:f5:56:05:1b:39:0a:45:59:fa:d5:8b:b0:06:
                    54:bd:8f:bc:1c:7f:5c:ad:b0:03:c2:35:f6:e0:dd:
                    6a:a3:72:a6:de:df:b9:3e:ab:29:17:82:ec:3a:53:
                    f7:09:31:25:34:da:28:b4:7b:29:a3:0d:5f:46:0c:
                    0d:44:a9:48:99:82:51:7b:27:b8:0f:15:f6:ef:b2:
                    d4:7b:ea:18:35:c6:4c:c8:24:e7:c6:91:84:54:5e:
                    97:1d:42:dd:78:28:1f:ff:20:0e:36:b9:44:b8:a3:
                    d7:ac:c3:ea:d8:0a:25:b7:95:13:7c:ef:7d:4f:bd:
                    3b:14:1c:d9:b1:30:20:80:d4:c3:f0:7b:70:13:35:
                    a1:2d:de:40:c4:17:07:72:27:b9:81:1e:55:d8:a1:
                    d7:6c:93:08:60:8d:3e:f5:94:b7:23:ce:4d:c7:f2:
                    95:0f:bc:0d:dd:c7:e1:76:c6:26:ae:e1:5e:60:0a:
                    48:07:9b:df:24:e9:f3:90:7a:06:1b:b9:a9:87:59:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F0:96:B2:D4:57:EB:2A:BD:4B:62:AD:7A:8F:23:8C:3F:24:8D:BB
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:eb:54:25:e8:dd:f9:6d:ca:ac:8e:16:33:a3:d0:32:67:75:
         4d:fe:1c:6f:b5:22:7d:81:eb:e0:da:d3:29:ed:ab:17:21:67:
         98:fd:0b:1c:c4:35:1e:09:66:0f:72:83:14:ca:4e:f1:b6:f2:
         d1:43:f3:46:00:e0:02:f6:c4:80:57:9a:0a:ef:64:d4:55:97:
         d5:35:b9:52:3d:ee:e7:87:7f:e1:77:37:bb:ab:1b:05:a3:f9:
         5a:46:1b:b6:64:04:41:6b:b9:c0:c6:34:04:ab:07:4e:84:0e:
         0e:7e:35:04:44:83:e3:16:ed:61:fc:c4:5d:60:a1:b7:a0:02:
         1c:f7:8a:5c:d3:fc:88:21:c9:1e:03:b3:ad:5d:a6:4e:76:7a:
         cb:dd:d9:48:a5:59:67:3a:a3:ea:e0:e1:6c:21:32:8a:cb:6e:
         43:f0:e8:94:8c:04:4f:e6:45:60:1f:2b:40:42:da:dc:2d:32:
         5f:5f:fd:37:e0:ea:31:2b:16:1f:f0:3c:dd:ea:bc:7b:9c:3f:
         c0:62:32:88:0c:0e:dc:72:0c:ff:d5:6a:43:8d:61:98:b2:98:
         f8:2e:4c:5d:24:10:cc:1b:ce:48:b8:e3:aa:f5:7f:1f:e8:65:
         6d:77:2a:83:54:bc:bf:05:d5:20:b7:68:fc:e4:42:50:3e:ab:
         e3:96:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:12 2024 by rpki-client on console-fra.rpki-client.org