Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File:                     VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier:          zlV9g1Z8Zzp9N4aV5u0pdhJcE4k5KbIln7keWJ8X5wQ=
Subject key identifier:   BF:10:CA:96:8F:BF:6A:CC:E9:55:71:CB:99:50:75:74:69:09:3D:E1
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer:       /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial:       019352AC36CD7ADC49393C801D03EC3A16AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 07:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:38 +0000
Files and hashes:         1: R18NffYwWqRzOtej2ch1H8lZ5LM.roa (hash: TaPII4XTEUii23CyMbidQ1VnIAtkRffLpTPrpJeW0vo=)
                          2: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: r4bh9E229q9+JBpj12uDj15+hdnfONtmi6izB6e6ruk=)
                          3: f2ucMYd3qJKsilduk7DK0LN-MKs.roa (hash: du1a6n/60BqkqDDV6RnzE4PHLtlWPyj7LEGA8hUiyX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:36:cd:7a:dc:49:39:3c:80:1d:03:ec:3a:16:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
        Validity
            Not Before: Nov 22 07:00:38 2024 GMT
            Not After : Nov 23 07:00:38 2024 GMT
        Subject: CN=bf10ca968fbf6acce95571cb9950757469093de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:61:02:47:1c:b9:1e:23:05:31:a8:e5:e5:
                    d8:d7:05:a7:50:fd:d0:16:36:20:93:6e:6f:5a:6e:
                    d4:38:db:a0:c9:c5:1e:e7:d8:96:92:7e:d1:4b:9f:
                    e9:ac:f4:b8:29:41:c8:24:96:d2:55:e6:1a:a1:25:
                    c6:9e:a2:e7:6e:7b:25:95:23:5d:2a:a0:5f:73:5a:
                    95:fc:37:19:54:53:9e:e9:45:76:b6:05:da:c2:3c:
                    71:2a:7b:3c:13:0e:0b:6f:df:98:30:43:8a:37:c6:
                    60:7f:6a:c3:31:88:81:b5:32:b0:39:8c:0a:c5:e7:
                    79:0c:6e:b6:52:8f:0d:ce:06:b6:bc:e0:be:9d:d2:
                    70:89:08:ba:9c:5f:73:d9:9b:65:52:96:74:9f:a6:
                    1d:98:2d:62:91:a0:45:db:19:9a:5c:cc:13:11:ce:
                    c8:9a:a9:70:d8:56:4b:8e:ae:bc:6d:a7:a1:8c:a3:
                    77:46:81:ba:0b:e7:86:93:56:09:12:9c:0b:c7:9f:
                    fd:03:09:38:6a:e9:e6:7d:51:ba:62:e0:db:9a:e9:
                    2b:eb:89:e6:ce:aa:4e:3e:60:3c:a3:4a:2f:56:a8:
                    0a:a9:59:db:50:95:4d:b7:62:a1:eb:6d:89:b1:61:
                    cd:1b:b1:2c:fd:13:3f:36:6f:00:b5:ed:38:84:ca:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:10:CA:96:8F:BF:6A:CC:E9:55:71:CB:99:50:75:74:69:09:3D:E1
            X509v3 Authority Key Identifier:
                keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:1e:88:ee:56:e0:52:2b:e5:ec:df:e2:e4:18:69:15:d5:
         c0:df:14:7b:48:30:02:f6:0e:21:2d:49:c2:9c:be:31:8b:a8:
         fb:3d:cc:d8:2c:ba:8a:cc:35:b4:4d:18:f4:a0:9e:a3:b6:41:
         28:02:d3:3c:4d:d4:eb:de:d6:a4:3d:44:7d:d0:b2:66:43:65:
         ce:91:50:64:17:ad:6a:43:05:60:fb:46:70:30:20:24:ba:98:
         f1:59:f1:2c:a4:0b:54:87:fe:a8:6a:a9:63:c5:ca:c3:e1:ae:
         d3:8f:05:9e:78:fc:4a:2a:12:2d:8c:b8:e8:7d:b5:37:3f:f9:
         c8:ea:2e:84:5c:dd:d9:4a:40:f6:c8:2e:da:2f:b8:33:65:ca:
         6b:3c:27:e5:33:51:7f:18:e3:8a:76:5a:19:e0:72:34:12:ea:
         ee:bb:55:f7:17:6d:64:81:72:a9:e3:86:b6:4d:fe:c2:91:6c:
         13:30:22:3f:16:84:16:13:cc:7a:8a:ff:b8:b5:01:fa:5e:91:
         5f:08:b7:9f:8d:96:32:4e:0e:d3:f9:2f:63:7c:b3:cc:2c:05:
         5c:51:08:d0:e9:66:d6:a2:09:cd:e3:a5:4d:8d:52:85:38:71:
         65:9b:f1:0b:86:ca:2f:df:1c:a2:7d:9f:98:fd:8a:37:80:50:
         1c:59:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:59 2024 by rpki-client on console-ams.rpki-client.org