Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
File:                     VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft (raw, json)
Hash identifier:          InhzFCsC4D2cKTyyTOnrIVZG71uaItlBMn/RDKpdBYc=
Subject key identifier:   DD:D9:F1:FA:54:F3:43:11:5E:90:97:4A:E4:65:B8:41:4F:CE:B2:67
Authority key identifier: 56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4
Certificate issuer:       /CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
Certificate serial:       01936A46961DD7CA8BCC4E669ABB8FD6F004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 21:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:30 +0000
Files and hashes:         1: Jseuk-opRJo-NsNtV3RpZNtpaYU.roa (hash: fDzmqtmRo2J0oaOtp0QwHMX9ofOfqTAINm2p33uCElc=)
                          2: VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl (hash: L3a4G1clLMl7C4zFhC6hAN1M99o6pLeZx69pcKBP2nA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:96:1d:d7:ca:8b:cc:4e:66:9a:bb:8f:d6:f0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
        Validity
            Not Before: Nov 26 21:00:30 2024 GMT
            Not After : Nov 27 21:00:30 2024 GMT
        Subject: CN=ddd9f1fa54f343115e90974ae465b8414fceb267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:82:a8:e0:bc:1f:79:35:d7:61:2b:26:c9:
                    3f:04:8e:58:d7:79:ef:ee:92:4d:70:dd:21:3a:b2:
                    d4:ca:09:b8:62:6f:97:f5:a9:f3:31:7c:07:4b:b0:
                    0e:7e:37:ca:7a:96:b9:ea:f5:84:68:9d:74:f4:70:
                    d8:c5:01:38:40:a4:02:9c:b2:d0:5b:d7:f8:7f:d5:
                    21:99:a7:a4:82:d8:8a:a4:53:57:0b:11:4f:7d:6f:
                    e8:9d:db:42:6d:81:3a:71:ac:c3:32:8e:58:ac:7a:
                    44:d9:4a:ca:86:fc:29:40:ad:9a:98:a2:59:a8:6e:
                    28:cb:73:c1:0d:84:3c:77:f1:e3:04:f9:d0:a5:de:
                    29:c6:40:32:fe:69:2f:e5:71:0e:17:89:a3:bb:b1:
                    0a:ef:24:09:ac:9a:a2:7a:a0:4b:4d:40:6d:d4:26:
                    83:cb:46:23:9c:86:de:a6:d4:0c:35:5d:71:47:ed:
                    b1:5f:64:17:2b:ba:69:5c:d3:e9:95:51:ac:3b:fd:
                    d0:58:60:44:a1:37:6a:e7:d5:82:73:c9:0d:0e:17:
                    1b:b5:fd:f7:45:38:cf:b8:27:a5:8f:33:99:4d:a0:
                    d5:30:69:77:69:4d:fa:20:5d:8f:ef:1e:72:3a:93:
                    6f:35:dd:3c:f3:3e:03:0e:bb:6f:68:57:67:28:d2:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D9:F1:FA:54:F3:43:11:5E:90:97:4A:E4:65:B8:41:4F:CE:B2:67
            X509v3 Authority Key Identifier:
                keyid:56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:bb:b4:3b:14:27:8a:d0:1d:dc:41:ac:5f:51:31:97:aa:
         31:6c:60:a7:48:3a:f4:48:c5:0c:be:bf:9d:d3:6b:12:1f:53:
         5f:21:5d:31:86:88:c5:c9:32:87:cf:50:aa:c5:73:8c:85:43:
         55:98:fc:dd:90:ba:35:ea:34:ff:8a:32:39:d1:be:54:d4:6a:
         e3:da:16:a6:87:2b:6c:fe:e6:4b:a0:90:85:db:f5:d6:8a:28:
         ff:07:a2:d7:03:02:c8:0f:02:fb:7a:8d:c0:ca:ef:d4:7f:ba:
         bd:40:81:45:05:ac:f5:94:5a:3f:63:6b:e9:00:7e:92:34:26:
         21:ec:b9:2e:c0:f5:a0:11:27:eb:9b:29:e0:b7:8e:cb:a3:a3:
         f5:50:50:66:04:bc:e8:72:5e:b6:cf:8c:6e:c2:f7:60:fe:32:
         d6:62:84:d0:29:32:1b:d7:c4:95:41:af:79:b3:b7:5d:2e:e2:
         e6:7b:2c:0e:01:2c:a0:97:6b:64:8f:b0:67:46:58:99:e1:97:
         4c:a1:db:fd:11:dd:3d:8a:1a:00:56:2b:cb:9b:f7:97:8b:50:
         4e:16:18:9f:63:26:00:58:8c:fc:54:97:84:9e:86:21:06:0f:
         4c:9b:8f:c1:c4:89:51:07:58:25:1c:b7:94:6c:b6:42:13:ae:
         37:98:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:24:25 2024 by rpki-client on console-ams.rpki-client.org