Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File:                     92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier:          TKvziUvgt3o/9tBjPQ03BYJVDlOLai8Jk+qjnvaPeHw=
Subject key identifier:   9A:01:C4:BD:9F:07:A5:54:DA:BA:8F:4C:D3:8B:AF:96:76:27:9F:01
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer:       /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial:       019352ACE0ACAF72B965629ED1B9BEC34D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number:          0B85
Signing time:             Fri 22 Nov 2024 07:01:21 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:21 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:21 +0000
Files and hashes:         1: 6LutgqR6q4o7_5UE-NRjJCPX8xM.roa (hash: 9cvxYnbAPLQ+DK6e1jAH/dJZYY+/cogrV/TOPQYtgl0=)
                          2: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: 4l/qk0hUGi/LMyqvG4nMxkRWgiwN0oVSRDla/hJ7tOA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:e0:ac:af:72:b9:65:62:9e:d1:b9:be:c3:4d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
        Validity
            Not Before: Nov 22 07:01:21 2024 GMT
            Not After : Nov 23 07:01:21 2024 GMT
        Subject: CN=9a01c4bd9f07a554daba8f4cd38baf9676279f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:c1:68:31:42:7e:f0:d5:e9:94:43:6b:3a:
                    9c:14:84:bf:88:de:81:5b:35:27:f6:cc:8b:00:5d:
                    93:7e:2b:38:cd:0f:4b:0e:63:6a:79:6b:bf:f1:7f:
                    21:e5:fc:46:71:84:3b:bf:b8:fd:35:a7:d7:9b:2f:
                    88:07:82:23:9b:cc:44:aa:a1:33:f0:b4:48:d3:34:
                    20:72:16:a2:d5:98:d4:fb:a9:99:24:94:aa:0a:89:
                    fa:69:cf:41:69:6f:85:15:67:b4:c5:cd:fe:4e:a1:
                    76:7d:ad:2b:11:b6:ff:cb:ce:2b:99:47:9e:e0:eb:
                    b7:9a:d9:1a:41:9e:7e:8e:78:8c:70:58:f9:22:4b:
                    a2:9a:41:61:ac:e1:b1:7f:73:52:fc:e7:8b:84:42:
                    6d:27:d3:f7:ec:cb:54:cf:4d:08:dc:71:ff:21:15:
                    cb:d8:0a:18:f2:e9:65:11:79:11:d2:51:e1:cd:d7:
                    f5:31:b9:d8:9b:63:30:97:44:7f:ee:7f:38:b0:b7:
                    9d:d4:b8:40:f0:a2:31:4b:95:f4:f2:18:e0:57:aa:
                    47:bb:f9:57:97:54:7c:c0:bc:96:14:3c:e2:d6:f2:
                    ec:d0:44:e9:53:1d:2b:48:26:ec:6e:1e:df:bd:19:
                    f1:3e:38:97:3f:05:3d:8f:31:d5:4a:ee:67:a8:63:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:01:C4:BD:9F:07:A5:54:DA:BA:8F:4C:D3:8B:AF:96:76:27:9F:01
            X509v3 Authority Key Identifier:
                keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:a4:66:8e:c1:c2:50:cb:84:de:0b:2e:ef:68:8f:07:76:
         dc:d1:8e:7d:04:76:eb:5d:5e:e8:b5:94:c9:37:bb:c1:74:14:
         59:dc:1e:18:d8:a8:b4:f0:90:1b:d9:50:2c:6d:da:cc:93:90:
         4c:e9:cd:86:8e:78:e8:e6:2f:17:14:c9:9c:07:35:a0:36:35:
         07:ab:3e:be:cc:ad:70:7d:50:a7:ac:8d:55:2c:3d:40:e3:b6:
         f1:33:ce:d3:db:b0:35:80:78:de:6f:1d:e0:7c:0b:80:1d:b6:
         62:cc:9a:84:11:03:44:c8:66:10:7f:4b:06:c1:46:4e:9e:16:
         62:7f:f7:2a:2d:a2:94:79:98:05:83:6d:09:0d:fa:c5:11:62:
         12:2c:be:78:2d:d7:69:6a:16:7d:28:c6:e6:b9:bb:f0:05:9b:
         86:01:b7:d1:37:47:48:24:08:65:54:a4:62:34:4f:e9:60:bc:
         b0:e9:e5:bc:9a:fe:4d:e3:d3:86:03:3e:71:ed:36:6b:ae:9a:
         a3:77:01:25:92:85:dc:e4:11:59:6c:e4:f4:d2:05:16:7a:b3:
         50:54:a0:69:77:77:ee:00:30:14:d0:49:b4:7f:59:e8:7f:95:
         c1:04:23:30:d0:58:14:00:2d:9c:41:df:fc:f1:fb:1d:e0:e0:
         2f:67:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:54 2024 by rpki-client on console-fra.rpki-client.org