Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
File:                     VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft (raw, json)
Hash identifier:          lYlHPz4LG3yFPk5Yf8Dlh7hOxOqHaN9dsdghGTQMfXQ=
Subject key identifier:   BC:8B:6C:35:B4:D6:D6:8B:62:76:40:8A:E1:0C:AC:EC:31:9D:E4:25
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Certificate issuer:       /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial:       01935275140D5137E7C616EEBC1DCFC3A2A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
Manifest number:          0536
Signing time:             Fri 22 Nov 2024 06:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:24 +0000
Files and hashes:         1: 0xL6TyDfROMag54isEDYw0KFAn4.roa (hash: Taqqp+oVWOiohukIRo7yiigD/trHO7UpnU3xGb32Vik=)
                          2: O17RWCi-pLi3YhhIrnMSmouAkuk.roa (hash: 4IHKpjZkQusVR7kpTs0R/laM4axahyWp04AAnseHGr0=)
                          3: VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl (hash: GKcHZNBGcvz/wdlb/C+gvlcoVC4QK3FSYBSBnKKihA8=)
                          4: jHnotDV7V6OxC85rj5hYvFh4VDY.roa (hash: UaQKius45ykOYxEnUFum/AgEHa7oHy9augFMRTvQWmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:14:0d:51:37:e7:c6:16:ee:bc:1d:cf:c3:a2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
        Validity
            Not Before: Nov 22 06:00:24 2024 GMT
            Not After : Nov 23 06:00:24 2024 GMT
        Subject: CN=bc8b6c35b4d6d68b6276408ae10cacec319de425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0a:65:d0:37:3e:9c:08:20:ec:4a:b3:4a:77:
                    c2:f4:5d:ab:c0:9a:55:6b:58:cb:e9:2e:e7:ed:c1:
                    07:a6:c3:9c:fd:c3:ea:be:99:84:e7:e6:64:b7:85:
                    63:a7:13:21:32:bf:e2:02:e9:f7:25:89:c9:95:ce:
                    cc:71:31:7f:14:10:5a:40:98:4e:3f:4d:c4:be:3d:
                    2c:e1:64:c7:a4:88:37:cb:cf:d7:ce:6e:d6:76:4a:
                    cd:7a:98:24:51:84:c4:0a:87:be:37:7f:6b:12:0b:
                    05:d7:35:bf:84:a1:fa:31:22:a5:91:6f:79:e3:83:
                    45:87:f9:98:39:ac:ff:b6:19:b1:b9:3a:33:50:65:
                    4d:4b:5d:53:e9:62:83:62:06:e5:19:cb:c7:72:27:
                    1a:11:49:9e:b0:a4:47:a4:f2:b8:29:da:97:9c:4f:
                    10:33:b7:5d:c0:01:cc:1d:27:ba:84:e3:f2:d7:87:
                    2a:a4:6d:e9:c5:59:9d:5b:7c:71:d6:6c:0a:c8:38:
                    0e:e8:c3:db:3f:47:40:d8:a1:26:d3:4e:53:7b:3f:
                    cd:c4:40:b5:88:7b:8e:b1:cc:98:54:a5:b9:f2:6b:
                    57:9e:9e:8a:e0:a7:af:ef:90:1b:46:5f:aa:66:9f:
                    84:7e:23:46:62:be:45:c7:db:11:b1:77:1d:b5:f0:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8B:6C:35:B4:D6:D6:8B:62:76:40:8A:E1:0C:AC:EC:31:9D:E4:25
            X509v3 Authority Key Identifier:
                keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:47:38:54:94:2a:f6:7d:67:db:a7:ee:d4:d2:1e:53:b7:cf:
         93:73:02:3f:fb:6e:26:e2:c1:e2:29:ba:c9:8d:2a:aa:db:7a:
         ad:4a:3c:dc:9c:9c:aa:0c:8c:0b:53:6c:73:1f:3a:7b:b7:3a:
         be:a5:ed:b3:96:3e:ca:ec:98:b2:ff:94:04:42:1b:64:70:3a:
         2a:02:37:2b:16:ed:c5:28:8b:13:78:49:fb:98:7b:e3:c1:63:
         70:1e:46:b1:2a:d0:b2:28:4b:65:3c:13:94:ea:1f:ca:55:df:
         de:ff:af:58:15:d0:43:c0:4f:a5:6b:e9:3a:83:1b:eb:48:d0:
         a9:49:20:12:0e:25:4c:2a:8c:5b:37:3a:80:6f:db:3f:ec:ec:
         31:b3:7c:1d:9e:62:34:4c:ef:3e:a5:36:6a:58:b0:31:0c:19:
         06:b7:6e:08:a9:84:0d:13:45:e8:a4:68:fb:26:d7:23:f5:62:
         1b:13:06:c5:1f:ea:dc:0b:3e:b1:9f:20:27:80:2c:71:9e:15:
         f5:64:f4:08:32:01:77:32:09:70:85:4d:57:76:ae:eb:02:25:
         35:a6:d8:f2:01:f8:2d:bf:cf:f6:59:18:4a:93:c6:5d:ca:8f:
         57:c1:d2:d7:8e:c1:82:cc:d5:0a:09:37:01:ee:64:38:73:57:
         cf:a1:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:02 2024 by rpki-client on console-fra.rpki-client.org