Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File:                     Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier:          Yp+zbQaO8Y13earNV6Js2by60Wvzx9/t7MJCQfeQu+0=
Subject key identifier:   BD:05:BE:16:1E:E2:B2:BA:E7:01:1F:BC:39:F9:4A:2D:71:A4:54:0A
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer:       /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial:       01936AEBA32848572D6B6AC59F915A6031B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 00:00:47 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:47 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:47 +0000
Files and hashes:         1: Kmw--kNukxXlz3aaIdYXX4UxUr4.roa (hash: lbHdq/Yq8kROUrU9qm2yb4luK7BqTVduEuS70uZU2lk=)
                          2: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: eFgdCMFB35EtAa11fv8IPPxEay5gqlqEE/MFNxnTgRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:a3:28:48:57:2d:6b:6a:c5:9f:91:5a:60:31:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
        Validity
            Not Before: Nov 27 00:00:47 2024 GMT
            Not After : Nov 28 00:00:47 2024 GMT
        Subject: CN=bd05be161ee2b2bae7011fbc39f94a2d71a4540a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:0c:5a:0a:0c:57:48:34:9e:5d:de:68:da:
                    e1:9a:3e:63:2d:23:86:d4:07:72:88:4c:d2:49:d0:
                    14:38:e3:50:43:79:34:f4:d8:6d:b3:93:dd:ad:8f:
                    90:be:6c:e7:b3:b1:7f:54:5d:92:08:74:71:ed:4c:
                    cf:43:7c:16:5a:7d:12:ed:43:30:19:4a:b6:2a:bf:
                    cc:07:2d:f1:20:29:15:1f:f2:6c:54:18:14:55:53:
                    09:64:98:ec:0c:bc:85:92:0e:f0:c3:ea:ee:bb:86:
                    93:7d:45:27:2c:1f:17:95:22:00:01:0d:ee:62:f4:
                    7d:e5:79:ba:b1:eb:2c:1b:f7:bf:69:50:d4:e7:36:
                    1c:f2:37:78:6f:cb:91:be:09:2c:98:5d:d4:65:23:
                    ec:7f:d5:62:4b:6b:d4:44:6b:a6:8b:48:81:30:f2:
                    89:0b:84:43:6a:08:de:69:25:ae:19:f0:b1:ca:2c:
                    60:ea:a8:26:e0:ff:69:55:77:5d:31:74:80:59:de:
                    f3:99:6a:37:c8:cb:65:f9:d2:c6:10:2a:fa:c1:32:
                    f8:ca:bd:24:78:6d:e1:b3:6d:14:ec:c8:4d:e9:2d:
                    c3:66:88:a6:3b:9c:c7:24:79:21:47:a9:97:e2:d9:
                    56:26:92:ff:7b:99:33:a9:86:cb:76:69:e1:f3:1a:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:05:BE:16:1E:E2:B2:BA:E7:01:1F:BC:39:F9:4A:2D:71:A4:54:0A
            X509v3 Authority Key Identifier:
                keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:73:6f:bf:ff:11:a2:9b:71:7b:0c:c6:c1:b5:8e:84:91:1b:
         28:fc:49:a8:85:96:21:36:19:c0:e2:61:6d:a4:c2:da:a8:b5:
         80:ec:c7:77:ee:44:e8:33:f4:02:54:ae:5d:38:0d:8b:28:12:
         3a:32:cf:ed:be:1f:f6:00:78:bc:ce:db:7a:69:86:89:fb:22:
         42:b4:66:cb:26:7a:01:5d:83:48:c4:dc:a8:20:f4:d8:d0:aa:
         3f:c4:66:f7:ad:a3:db:7e:eb:8e:35:e0:86:75:8d:0d:14:dc:
         20:8b:71:c5:10:56:56:f7:fe:d8:07:01:b9:bf:c3:9b:51:5f:
         cb:a5:dd:11:05:a9:f7:9c:ef:2d:12:42:39:ec:32:d1:c3:a8:
         88:62:a4:3e:9f:d4:25:ef:b0:be:f9:64:99:14:22:e3:f0:37:
         a0:81:00:fd:aa:2f:45:63:f0:93:92:03:ab:33:31:23:6b:c5:
         89:a1:e5:b1:68:08:dd:95:d7:6d:be:38:f1:bf:ba:2b:79:df:
         5e:6c:ac:82:34:7e:9b:39:58:1c:60:29:be:a6:56:02:e3:9c:
         0f:6b:f6:73:64:02:de:08:4e:73:7a:50:0f:fe:6b:f4:29:4f:
         f3:cc:ea:80:7e:10:47:f0:2b:09:54:87:51:b5:9e:74:79:2f:
         d0:bf:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:26 2024 by rpki-client on console-ams.rpki-client.org