Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File:                     VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier:          uWMEFALvm3fnbO84tFjcFbqClHQqsQm1UqwnU4B77vI=
Subject key identifier:   D8:90:D6:E0:88:18:B8:30:D5:5E:66:4B:89:C0:CF:E3:4B:CF:3D:37
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer:       /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial:       0193568AB1C49906C3925F70C087C523B0AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number:          077E
Signing time:             Sat 23 Nov 2024 01:02:30 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:30 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:30 +0000
Files and hashes:         1: 1-JdTPkn31C9whIB_F2Gg7blK6dE.roa (hash: eFr+hwCRwNacOnfgognhWu/gnye8/oQpo0wIyqVNgBk=)
                          2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: nOAABVNbLCQ0/zdVc/1n8Mm5faXT02v11QEhJfO1kaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:b1:c4:99:06:c3:92:5f:70:c0:87:c5:23:b0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
        Validity
            Not Before: Nov 23 01:02:30 2024 GMT
            Not After : Nov 24 01:02:30 2024 GMT
        Subject: CN=d890d6e08818b830d55e664b89c0cfe34bcf3d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:87:47:c9:c3:8f:51:b8:ee:8f:56:b1:17:
                    6b:59:84:db:26:a1:8a:87:07:91:9c:0f:a1:8f:6a:
                    5a:e7:35:ed:f4:0b:a2:c6:e8:c1:fb:24:a9:7e:8d:
                    2a:14:1e:55:e6:9b:19:d9:7b:7f:1f:a7:27:ba:96:
                    6a:e5:7c:16:ff:94:ef:ca:24:2d:ea:3e:2d:43:a3:
                    bb:90:21:ee:ec:de:aa:f5:d1:91:6e:53:61:a9:e3:
                    8e:d1:67:ba:51:3d:23:0d:f6:4b:00:3e:d1:b6:f8:
                    81:e3:1f:f8:13:56:16:49:89:40:ea:f3:d1:f3:21:
                    3e:b1:40:c2:a8:fc:76:32:bf:29:ca:38:20:94:b5:
                    1b:9f:fb:07:8a:86:32:14:ae:31:84:39:37:a3:aa:
                    23:05:6a:16:d9:9a:b0:d2:9d:32:47:e5:51:a0:04:
                    fb:dc:29:6c:d4:3b:e4:61:76:2a:2d:c6:0a:a1:65:
                    e2:2b:bc:35:cc:15:49:cd:4b:0b:ea:2b:1a:23:72:
                    52:2f:33:a0:98:2f:de:cf:38:cd:47:d5:f7:c6:af:
                    68:63:a6:86:5d:4d:a5:ed:30:63:97:6d:67:d7:ee:
                    84:c6:35:13:40:a7:8d:a5:8b:fb:bb:4d:cd:bf:16:
                    45:10:04:1d:30:95:bd:7c:a3:14:23:18:6e:4d:74:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:D6:E0:88:18:B8:30:D5:5E:66:4B:89:C0:CF:E3:4B:CF:3D:37
            X509v3 Authority Key Identifier:
                keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:38:e1:2a:c0:89:90:65:21:34:4d:51:b9:f3:36:0a:d3:dc:
         ba:08:00:c2:49:63:54:f7:63:3b:06:ec:49:80:2e:0a:fe:98:
         25:15:0d:83:38:68:00:7c:77:5b:dd:61:79:10:89:34:b4:81:
         ae:74:04:a3:72:34:1b:cc:7e:42:67:c0:3d:9c:e2:28:a1:ef:
         56:de:00:00:8c:8f:84:7c:8b:7f:d6:03:06:9a:79:46:74:c7:
         ee:e7:3b:d1:3a:9a:90:bf:3a:15:f0:74:71:60:51:14:b4:be:
         58:4e:77:73:19:ab:ca:8f:ea:fa:fd:c0:a5:02:db:71:be:e9:
         89:33:e0:06:d0:09:e7:ed:41:ea:98:9f:8e:5a:8f:f0:30:7a:
         8c:c9:e3:34:c9:98:48:3a:2b:cb:e6:00:8a:89:7a:b7:d3:ae:
         36:47:f7:50:97:f4:48:b1:b9:e1:1a:b3:61:39:70:c3:03:e7:
         53:1a:7e:8b:ca:49:7b:f9:c1:7e:a4:60:ee:1a:dd:dd:c6:3e:
         ce:8e:a9:44:5c:c0:98:25:ca:24:f5:ab:21:69:d8:64:a7:1a:
         f1:7e:9d:a3:7b:9a:31:6b:53:c3:8f:f2:42:1e:0c:37:47:99:
         00:1e:20:ce:b6:87:2e:24:8a:b9:06:89:3d:16:4f:35:05:19:
         0c:29:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:53 2024 by rpki-client on console-fra.rpki-client.org