Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          l5FD1xWpd8KEMHn0P9dLDp8euzwY5/xlZx0NkwK7mLU=
Subject key identifier:   35:21:8D:3D:BE:C1:4A:1E:46:4E:4F:57:3C:07:D5:E0:19:F0:46:8F
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       0193549BB180A9F7D36E26FA86A2C56134B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          1003
Signing time:             Fri 22 Nov 2024 16:01:49 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:49 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:49 +0000
Files and hashes:         1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: 7vo6eKjEbkvxUlCsrsAcDLAkM3YoaBkFEVNwNlvEdFk=)
                          2: ZCCXyxSxofpWvFbPyfQfVjynh4U.roa (hash: x5C5mlWp9oFULTkrm03N9EIWX+r9tGjYo+poQ3X+iLA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:b1:80:a9:f7:d3:6e:26:fa:86:a2:c5:61:34:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Nov 22 16:01:49 2024 GMT
            Not After : Nov 23 16:01:49 2024 GMT
        Subject: CN=35218d3dbec14a1e464e4f573c07d5e019f0468f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:1c:4e:85:c3:95:8a:48:a1:65:1a:dd:75:
                    6b:0d:87:67:41:90:02:49:0a:f9:58:31:6a:d6:6a:
                    0e:26:d9:37:86:d3:e4:61:2e:ab:4e:1d:d2:0d:11:
                    de:09:5b:69:be:38:d9:50:b7:36:ae:18:6f:41:5e:
                    ab:b7:3d:c7:ba:63:22:68:38:ae:21:c5:61:7f:e1:
                    b0:24:49:27:0d:26:2f:77:12:08:e2:65:79:5b:ab:
                    8f:04:51:52:98:ff:71:31:07:b5:88:f3:97:8d:aa:
                    0a:d6:35:4e:2d:8e:c8:48:0c:38:2e:21:5b:08:e6:
                    75:11:db:8e:45:13:ec:34:35:28:5f:58:d4:59:cd:
                    cd:78:58:c3:62:d8:a4:3a:35:54:ab:f3:c9:13:ca:
                    85:77:25:30:1e:7f:74:e8:2c:c3:ef:d6:a0:27:6e:
                    65:ea:73:58:09:6d:83:a7:19:d8:0e:7b:f8:44:17:
                    02:72:e9:ac:b6:5a:c8:cb:f0:96:77:ad:fa:0c:31:
                    23:8e:4b:18:1b:e0:32:7a:07:4d:ef:74:d1:d7:00:
                    81:d7:e0:58:50:9b:2f:32:57:cc:56:13:aa:bc:1d:
                    f7:d2:9a:ae:8b:db:b8:35:ed:37:87:30:30:8c:c9:
                    3a:78:10:0b:88:62:1f:af:64:d8:ef:8c:56:56:3c:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:8D:3D:BE:C1:4A:1E:46:4E:4F:57:3C:07:D5:E0:19:F0:46:8F
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:a7:3b:67:57:b2:94:4d:36:d9:78:4c:8a:92:a7:f1:8f:
         e1:2e:b6:4f:a9:81:65:6e:46:fc:ac:59:a6:32:c2:5d:cb:4d:
         b9:f8:34:8e:86:a1:fb:49:15:d5:d6:4c:b9:7c:4f:e4:51:cb:
         22:57:f3:0d:b6:46:27:e8:65:03:30:fa:c0:a9:bd:b5:ff:fe:
         1f:22:ee:89:48:48:d9:28:66:97:c4:17:b7:27:2f:8b:24:6a:
         d4:b1:8f:de:fa:22:a9:2d:6e:d9:a3:0c:06:85:4c:29:53:be:
         ae:5e:05:55:4d:27:d0:84:fe:85:d5:70:5e:e6:15:7e:bd:8b:
         2f:25:da:84:26:e1:83:97:fa:a3:aa:ce:f3:86:d5:6b:8b:94:
         9a:4b:ae:0c:e0:13:b6:e3:e3:c6:28:77:fc:e7:36:0e:bb:f3:
         03:cb:40:bb:13:a7:8b:d9:32:4a:1e:40:60:dc:31:59:5c:22:
         f3:3d:ca:0e:2c:84:7c:b6:c7:a1:f5:03:b3:b3:00:b8:b8:d2:
         00:3b:a3:2e:f7:c2:82:c5:79:ee:07:e0:1f:7b:ae:4f:60:f5:
         32:36:cd:ec:05:e8:58:1a:0a:54:71:66:89:2a:6d:25:e6:94:
         9f:bf:53:0b:7e:ab:d4:53:41:84:17:fc:bd:14:a7:5f:86:02:
         80:3b:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:24:18 2024 by rpki-client on console-ams.rpki-client.org