Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          fm5rJ4Pi+JXpiXQWiKbOeiGKtGOrZN0Arf+yXEtHFdY=
Subject key identifier:   8A:05:FD:66:CC:5D:B3:65:65:5F:4E:57:1F:71:03:A1:8B:6C:87:7D
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       01935207BD074CDF74CF5AE7BFF4996183F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 04:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:59 +0000
Files and hashes:         1: 0PgC0b3y-i_I6rlCGoCG3p7PLGk.roa (hash: Jl+KRqXqNF0H9Yc7bbHSJrhzI5MUQLnnbzlxvH9AdS0=)
                          2: HViatE0hypw_6ZOvQLxH0j3gJTs.roa (hash: I53S5B7yU16PbCXT4/+6Z0r275ywPOiyfxN6DJwxC5A=)
                          3: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: jiyoOjLEo8KMXk4rbHDXb7TYexf9TIGh1uVidSriT40=)
                          4: alf8-bqMfizk3Cqw0l9Ys1pRffI.roa (hash: eoeLTsf7nq0nJLstELsXme1PUCsqsTvmIQFyHL+1WpQ=)
                          5: kQeR7bKk6LpmVylhF_gL_NYoXHo.roa (hash: QlxhQkcMMgWLiPkG5nRbfBydyWcLS4wnDZe2gpuzCCU=)
                          6: rcT3qcrV2tULl6twk07_RGXl0b8.roa (hash: ohSSDqRBCzrYuHKQuT3O1c9C40FlWEMavTRJj5uo0yQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:bd:07:4c:df:74:cf:5a:e7:bf:f4:99:61:83:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Nov 22 04:00:59 2024 GMT
            Not After : Nov 23 04:00:59 2024 GMT
        Subject: CN=8a05fd66cc5db365655f4e571f7103a18b6c877d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:5e:62:11:33:95:c6:55:34:a3:c5:22:c0:
                    8b:1e:62:72:c7:05:b1:1d:49:b3:3c:b8:db:b5:fa:
                    45:0b:b9:66:6e:95:d2:90:22:3e:82:a7:b1:df:fc:
                    2f:6d:09:7f:40:7e:88:ef:03:53:fb:58:0e:ed:fd:
                    85:25:d0:61:a1:93:ff:b4:02:5a:1a:e7:56:27:d7:
                    73:fc:c0:dd:d5:63:1c:9d:3d:81:47:54:91:b7:7f:
                    ff:a2:23:b8:8b:da:2d:94:45:94:0d:30:1a:55:b7:
                    f9:6d:19:dc:85:c2:97:6b:5d:03:2e:17:cb:d6:07:
                    09:10:2f:3b:66:1b:a9:a3:c3:0b:58:03:16:bd:1e:
                    6a:b5:b4:b3:a2:06:d1:18:92:2a:bc:54:d4:64:63:
                    e2:bb:3c:c5:65:10:7a:58:d9:ad:a9:db:ef:fe:a0:
                    3c:6a:98:62:09:c3:f8:75:40:d6:63:e5:e7:f7:7a:
                    ce:de:5e:70:8b:a7:42:f0:a3:11:4f:a5:a9:b8:25:
                    8e:33:c8:86:a9:6f:43:88:c6:76:fe:13:d1:f4:8f:
                    9e:7d:c4:be:ef:2a:ec:90:72:90:2e:bb:65:a3:f4:
                    f1:59:37:92:4e:5a:77:e7:ab:83:57:17:27:fc:d3:
                    1f:aa:2d:17:b2:84:c2:2d:2c:f5:74:6b:04:02:66:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:05:FD:66:CC:5D:B3:65:65:5F:4E:57:1F:71:03:A1:8B:6C:87:7D
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:a8:30:42:6f:27:40:08:d4:84:43:b6:14:6a:1b:1b:8c:
         40:18:54:89:c3:6c:72:93:70:aa:65:8a:b8:b9:b9:91:f4:5e:
         aa:8b:65:b7:e5:00:ab:a0:58:c8:a9:51:0b:b5:66:ec:e4:58:
         96:79:b8:da:2a:67:9a:9a:61:79:f0:9c:8f:71:40:a9:0f:05:
         13:1a:39:5a:57:85:f8:52:8e:97:bf:4e:64:94:43:8d:f7:2a:
         4a:be:39:05:5c:fd:2f:84:b6:ef:ae:63:53:d7:ed:49:b0:dc:
         54:ff:35:b9:3c:76:a4:a3:e8:38:66:1c:20:1e:9a:35:30:e8:
         b6:9c:99:8a:ed:2f:9a:e7:8a:a8:a8:76:ab:0c:d3:4f:9a:92:
         b9:24:b1:4c:04:be:4d:5d:e4:2d:9e:19:6d:96:a1:d1:26:fc:
         49:9b:ef:2a:fe:d8:19:42:24:10:1c:c4:a6:34:a7:0e:e7:45:
         06:9e:34:dd:91:91:2a:6c:d1:2e:66:d2:1f:c1:e3:b8:41:ac:
         a4:81:6b:03:76:32:73:c2:00:26:c7:b0:e8:ca:b4:2a:57:24:
         70:b0:56:a0:21:21:20:8c:c5:c6:04:b6:b7:07:9e:85:7d:92:
         b5:a5:c3:c3:12:ad:8e:a0:55:05:1c:78:b4:1a:78:54:7a:55:
         24:0e:17:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB70HTN90z1rnv/SZYYP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjQxMTIyMDQwMDU5WhcNMjQxMTIzMDQwMDU5WjAzMTEwLwYDVQQD
Eyg4YTA1ZmQ2NmNjNWRiMzY1NjU1ZjRlNTcxZjcxMDNhMThiNmM4NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LteYhEzlcZVNKPFIsCLHmJyxwWx
HUmzPLjbtfpFC7lmbpXSkCI+gqex3/wvbQl/QH6I7wNT+1gO7f2FJdBhoZP/tAJa
GudWJ9dz/MDd1WMcnT2BR1SRt3//oiO4i9otlEWUDTAaVbf5bRnchcKXa10DLhfL
1gcJEC87Zhupo8MLWAMWvR5qtbSzogbRGJIqvFTUZGPiuzzFZRB6WNmtqdvv/qA8
aphiCcP4dUDWY+Xn93rO3l5wi6dC8KMRT6WpuCWOM8iGqW9DiMZ2/hPR9I+efcS+
7yrskHKQLrtlo/TxWTeSTlp356uDVxcn/NMfqi0XsoTCLSz1dGsEAmbYywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoF/WbMXbNlZV9OVx9xA6GLbId9MB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvKoMEJv
J0AI1IRDthRqGxuMQBhUicNscpNwqmWKuLm5kfReqotlt+UAq6BYyKlRC7Vm7ORY
lnm42ipnmpphefCcj3FAqQ8FExo5WleF+FKOl79OZJRDjfcqSr45BVz9L4S2765j
U9ftSbDcVP81uTx2pKPoOGYcIB6aNTDotpyZiu0vmueKqKh2qwzTT5qSuSSxTAS+
TV3kLZ4ZbZah0Sb8SZvvKv7YGUIkEBzEpjSnDudFBp403ZGRKmzRLmbSH8HjuEGs
pIFrA3Yyc8IAJsew6Mq0KlckcLBWoCEhIIzFxgS2tweehX2StaXDwxKtjqBVBRx4
tBp4VHpVJA4Xbg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:32 2024 by rpki-client on console-ams.rpki-client.org