Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
File:                     vouurnYAGofa7rC8Ko3RDOZfhl0.mft (raw, json)
Hash identifier:          zVqx40BNfv4yCkt3RF1ohHoJQHQyZu1nFIp3dNpHbs8=
Subject key identifier:   21:5F:40:50:5B:5D:CE:13:AA:3C:C1:04:01:19:D2:B0:73:7F:FA:BF
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Certificate issuer:       /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial:       0193572DCDDCAD61AFB1228628EB84AF82FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
Manifest number:          0D2A
Signing time:             Sat 23 Nov 2024 04:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:39 +0000
Files and hashes:         1: AC48e80nrR6iXJ_Y4pdvY2J95Zc.roa (hash: thWAPKzvM3KimOd2GmTVQHRQVu/w4dBHCI+hzvicfpA=)
                          2: vouurnYAGofa7rC8Ko3RDOZfhl0.crl (hash: bF4c4pmkyxzp4Wc9ovjPQulKdckD3o0XHI/EJIso/P4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:cd:dc:ad:61:af:b1:22:86:28:eb:84:af:82:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
        Validity
            Not Before: Nov 23 04:00:39 2024 GMT
            Not After : Nov 24 04:00:39 2024 GMT
        Subject: CN=215f40505b5dce13aa3cc1040119d2b0737ffabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:79:c9:9b:95:79:53:e0:f8:23:20:77:ce:
                    09:97:23:8d:52:af:9c:13:41:15:e1:67:ac:af:36:
                    8f:46:a9:1e:ad:df:69:06:d1:e6:af:4e:87:3a:96:
                    3e:c6:65:b2:3f:8f:6e:0b:20:95:a3:76:8b:cd:11:
                    4d:2c:8f:2c:6d:d2:3f:06:19:1b:e6:6d:ba:65:bf:
                    71:bc:85:da:fa:da:fe:4f:d1:eb:0a:1b:86:f8:03:
                    1a:1b:79:20:57:af:3f:a3:9f:2b:32:1b:73:14:fc:
                    c6:2a:1e:14:2f:8f:89:ec:be:72:eb:d0:2e:b6:49:
                    28:ae:41:2e:18:e5:08:6e:ef:e1:e6:e9:3a:69:58:
                    5f:3e:df:9b:51:96:9a:a9:b7:e9:3a:b3:84:e1:ef:
                    d5:2f:40:21:aa:ca:18:e6:bf:fe:f6:34:68:81:45:
                    6d:c0:06:07:b6:87:d6:da:4d:d8:da:20:6d:82:65:
                    58:27:9f:9f:72:3d:73:e2:bf:f2:5f:ff:1f:d2:c8:
                    97:ae:76:77:8b:c6:29:f2:23:16:8c:ee:6d:ee:cc:
                    67:e9:02:6d:c2:02:6b:59:32:6f:a3:6e:6c:8b:ee:
                    29:95:89:ee:0d:c2:e9:98:16:72:f0:34:8a:d9:47:
                    90:f9:fd:61:4b:bd:d8:be:41:6e:0d:5a:5b:96:6d:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5F:40:50:5B:5D:CE:13:AA:3C:C1:04:01:19:D2:B0:73:7F:FA:BF
            X509v3 Authority Key Identifier:
                keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:bb:7d:8d:61:17:f7:88:64:f6:9b:ef:60:c0:7f:53:4f:57:
         4c:4a:5e:a6:41:28:d6:3b:ed:71:e8:55:bf:ba:ca:9b:5b:6a:
         d6:3b:71:62:3d:76:4b:a9:bc:85:07:e0:a5:1a:34:9e:b0:dd:
         86:8f:55:d6:c7:27:9f:78:e7:38:ae:ad:99:f9:21:dd:31:72:
         b4:2b:1d:87:5f:13:f3:6c:28:8a:cd:b9:91:de:76:b3:e1:be:
         6f:da:bb:d7:ad:51:8f:35:44:8d:cd:fc:c7:bb:c3:92:91:d6:
         c4:a8:f4:21:3d:82:69:81:b8:5b:53:4e:54:6d:98:b0:ad:ec:
         77:cd:84:88:8e:04:61:60:7d:5e:4b:a9:31:00:94:59:8f:60:
         cd:be:8a:5a:14:bc:2c:1d:ec:9a:5a:e2:ee:21:0e:c7:f1:69:
         f9:c2:b2:67:5f:a7:54:f5:ec:b1:47:e6:5a:42:1a:c2:67:be:
         c4:19:55:58:83:ff:98:80:40:4f:af:e1:08:3d:cb:b0:30:09:
         f8:7e:22:72:7b:b6:38:64:cb:87:7a:c3:32:6e:25:be:7b:d3:
         2c:77:6a:18:00:41:f6:2e:55:b1:43:c5:76:77:f0:82:f1:0e:
         f8:1e:a9:69:01:0f:64:cb:2c:2a:59:5c:c4:a4:48:00:0a:2c:
         33:b3:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:40 2024 by rpki-client on console-ams.rpki-client.org