Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File:                     VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier:          f1dR3enC+750SvA+O+kR5O2J6dR03QGnTrC79uud2uw=
Subject key identifier:   03:97:03:83:ED:B2:02:61:9A:15:92:BA:2E:C8:B8:8D:C9:F0:56:76
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer:       /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial:       019355AD82AD2A08CD96E2D4C784BCD58D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number:          0A57
Signing time:             Fri 22 Nov 2024 21:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:54 +0000
Files and hashes:         1: PLL05LTEzSjnZxlEd4vX6e0xi-g.roa (hash: nIt43NQTAXv9N9xrYHr8oIHRNp6Y0Q4JajoxyWh/Kz4=)
                          2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: R4qTSzB67lWPO4LMJIHprOnMzABIjSMsx9wBe+m5n/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:82:ad:2a:08:cd:96:e2:d4:c7:84:bc:d5:8d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
        Validity
            Not Before: Nov 22 21:00:54 2024 GMT
            Not After : Nov 23 21:00:54 2024 GMT
        Subject: CN=03970383edb202619a1592ba2ec8b88dc9f05676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:1d:68:6a:54:9c:40:3d:cd:7d:86:51:fd:
                    76:c4:b4:04:fc:d5:aa:5c:51:7f:05:84:07:17:42:
                    26:07:4c:11:65:db:d0:c5:a0:26:33:52:70:7d:dc:
                    b1:55:42:85:c0:ac:15:73:e5:53:a6:6b:31:d0:05:
                    ac:73:47:ac:95:45:8d:38:24:d1:96:43:86:37:e1:
                    95:8f:4b:d3:3f:95:29:62:75:93:2d:6a:21:53:7d:
                    41:b0:d2:0e:9d:d3:83:6d:3a:7e:2b:f0:10:5d:e3:
                    ae:14:46:27:34:d3:9a:57:dc:7d:43:31:13:3e:3a:
                    ee:c8:0e:4c:9a:0f:7c:fc:d4:42:36:72:28:ae:9e:
                    2c:fd:4c:8b:7c:34:b8:b4:47:de:a7:85:1c:3d:89:
                    82:ed:d8:f7:f9:ce:be:0b:01:ef:ea:82:43:b9:f4:
                    44:c0:c0:5c:43:17:39:90:e4:a9:4f:85:9f:cf:4a:
                    40:8b:d4:fe:16:08:5f:47:a7:4d:f0:d7:db:47:32:
                    0d:78:5f:a6:15:8d:70:e4:8a:d9:a2:ed:64:ee:6e:
                    1a:e4:bc:10:16:65:31:25:12:31:b9:50:db:2f:7d:
                    bd:26:f1:13:8f:0b:3f:09:38:79:c3:25:7c:2f:b3:
                    cd:ca:d2:9f:23:bc:54:9f:14:68:0a:24:13:9b:0e:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:03:83:ED:B2:02:61:9A:15:92:BA:2E:C8:B8:8D:C9:F0:56:76
            X509v3 Authority Key Identifier:
                keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:87:43:07:23:f4:bd:a8:1e:e5:32:31:32:7f:59:a6:38:7a:
         a6:51:d0:5e:30:ed:b9:bf:69:c5:4a:c5:c1:24:b5:c7:f6:5d:
         16:44:7f:ed:e6:4f:1b:5e:45:72:40:d0:dd:76:a1:1d:68:2c:
         ec:6a:38:9c:04:25:a7:f0:cc:2c:4f:b4:66:7f:c4:14:f5:24:
         c8:6b:85:9a:db:b7:0e:db:10:f2:5d:81:91:31:8d:92:c5:fb:
         89:b5:b2:d4:e7:55:6f:5b:61:86:bd:41:d6:bb:8a:72:c6:40:
         24:1d:61:5e:74:2e:3a:a0:a2:14:08:b6:a2:b9:b9:1d:cf:90:
         4c:8c:c0:b2:30:48:3a:d2:fe:1d:eb:4d:47:cb:c3:9e:e5:ce:
         c5:37:be:4c:12:35:54:b1:59:bb:8a:fd:04:1c:7f:c5:d4:fe:
         ea:de:37:20:2d:cd:b7:3d:59:7f:db:05:21:75:93:24:b6:a0:
         a4:84:0a:27:d4:c1:21:8e:5c:47:30:84:f4:2f:21:bb:eb:a4:
         2f:c2:09:cb:97:e1:db:6c:58:1e:6a:73:9e:c4:50:f7:51:5c:
         f9:82:4d:0e:16:8d:ce:17:36:b5:f0:1c:3c:47:21:ed:61:24:
         17:e5:d5:2a:75:88:1a:b9:0a:b1:1b:ec:8b:c0:90:5d:5a:c4:
         2c:3c:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:42 2024 by rpki-client on console-ams.rpki-client.org