Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File:                     vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier:          idwKiuae4+mxPYdxWR+CKmSoRSRaU8tI14/R9eXChA0=
Subject key identifier:   04:80:B4:69:45:FF:E3:10:4E:FC:CE:6E:25:76:4B:FC:56:17:08:93
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer:       /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial:       019369DAB24A3AEB6CC2F848046F098CD310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number:          130C
Signing time:             Tue 26 Nov 2024 19:02:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:40 +0000
Files and hashes:         1: Wed5u8TC0a5_XWSJS6lsNrlMS4o.roa (hash: MQ7CXiyMMFqyaADiY3/tPXFf/ibv3hPgw2NTj/FzpwM=)
                          2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: x0jeKpHmZL2W3QPQmiPgLiA0tUsoBEV5XMeQSE16htY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:b2:4a:3a:eb:6c:c2:f8:48:04:6f:09:8c:d3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
        Validity
            Not Before: Nov 26 19:02:40 2024 GMT
            Not After : Nov 27 19:02:40 2024 GMT
        Subject: CN=0480b46945ffe3104efcce6e25764bfc56170893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ed:0d:1b:fa:b9:3d:16:68:78:09:7e:a2:fa:
                    bb:35:d6:cb:2b:f6:ee:29:4f:9d:a0:8d:fa:6b:df:
                    89:d0:91:61:54:87:8b:76:fc:8d:b7:9e:87:94:35:
                    a6:61:cd:b5:cb:ec:a7:dc:cd:fa:cb:d9:f2:5b:c5:
                    cc:22:91:4b:bd:93:43:35:89:39:6e:d3:9b:d0:4d:
                    f7:a0:78:30:bf:80:6a:cd:44:a6:60:ef:c5:c7:02:
                    39:79:a9:13:c6:6d:80:62:9f:12:4f:ed:6c:67:41:
                    6f:d5:d6:5d:aa:07:77:0d:59:0a:9b:7b:8a:84:9d:
                    f5:78:6b:5f:1d:17:2c:4d:d4:e7:76:68:57:68:dc:
                    01:01:98:b7:e3:ad:a9:bd:be:c4:e3:35:7c:35:68:
                    ef:22:f7:3d:28:43:1e:6e:6a:d9:68:d8:d6:f7:a2:
                    78:74:83:a9:3d:10:50:bd:b9:91:f3:db:17:6d:e3:
                    fd:4d:9b:1a:89:bf:ea:59:fb:96:08:3b:71:ad:15:
                    8c:b2:28:f8:15:47:4d:34:19:f1:ae:c8:96:86:8b:
                    d7:3a:3b:63:60:f1:c8:5d:df:7a:b2:8c:ba:0a:e7:
                    27:ae:a4:40:06:23:cc:5d:b9:0c:a7:a4:ff:aa:7f:
                    67:c9:54:bf:5b:8f:ca:59:50:94:2e:95:30:f6:bd:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:80:B4:69:45:FF:E3:10:4E:FC:CE:6E:25:76:4B:FC:56:17:08:93
            X509v3 Authority Key Identifier:
                keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:57:01:6e:0c:c1:e0:0c:94:85:59:f6:1d:20:5c:1e:45:6c:
         8a:58:8f:fc:f6:61:ac:e0:2e:ca:25:35:16:3d:e8:b8:b4:92:
         72:50:98:90:9a:1d:c1:14:68:2b:a6:e2:02:11:aa:97:a2:98:
         0d:8a:55:9d:34:75:c3:d4:89:52:64:13:06:4a:c2:44:51:bb:
         5e:3f:d7:84:ca:ce:2e:33:41:68:ff:72:81:02:9f:5b:b4:25:
         9f:b3:7a:c9:da:94:8e:08:26:d7:c4:7a:d6:f8:94:81:66:13:
         65:c2:fa:f6:e6:ce:5d:97:88:46:48:34:71:31:69:3e:7d:a2:
         f5:e2:45:be:0d:c8:32:df:95:86:01:d6:da:5e:e9:11:6d:fa:
         70:c6:f0:29:77:b4:01:52:7f:bc:fe:1e:45:ed:b7:3c:b5:8b:
         9d:ac:77:09:f3:0e:5c:75:da:d5:ec:76:87:69:6e:84:3e:31:
         e6:73:6a:2d:dd:a0:b7:45:e4:c0:0d:65:ae:b2:e6:ca:b5:7f:
         31:98:f4:45:a1:b6:ef:1a:e9:a6:e5:94:8e:de:1c:01:aa:d1:
         3c:8d:17:0d:e1:65:65:e2:ed:07:93:ac:9e:b0:50:66:d2:41:
         60:75:91:0f:fe:38:26:2a:16:39:de:f7:e5:fc:b4:c9:e0:de:
         e1:63:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:22 2024 by rpki-client on console-ams.rpki-client.org