Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File:                     VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier:          cqNHaztcONAj9PUzr11wC8efH739Egd8hl5Tl5ajCNg=
Subject key identifier:   B9:94:1A:0E:A0:36:0E:02:4E:01:69:FA:E5:AC:6C:F3:00:D6:C5:F9
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer:       /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial:       01936A465238FE73107419E747A574D914E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number:          027F
Signing time:             Tue 26 Nov 2024 21:00:13 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:13 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:13 +0000
Files and hashes:         1: KiZ7a2NgUol38nII8logjowEXLY.roa (hash: D1h9f4Uho4bf7PWCS4UI9JtTcK9YbJ9A6ulSEpxBKyA=)
                          2: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: xrRhgTB+kPiRq0FmUVdfLCDt3/49gIjGsGjOnW0HR7I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:52:38:fe:73:10:74:19:e7:47:a5:74:d9:14:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
        Validity
            Not Before: Nov 26 21:00:13 2024 GMT
            Not After : Nov 27 21:00:13 2024 GMT
        Subject: CN=b9941a0ea0360e024e0169fae5ac6cf300d6c5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:cc:0b:7d:60:99:93:54:e3:5b:6a:f6:73:
                    6a:ea:4e:88:29:ce:af:71:fb:7e:40:be:31:54:f0:
                    9a:eb:09:9c:c2:ee:e5:83:b3:b3:49:ac:c6:dd:28:
                    22:d9:b0:dc:20:bc:08:88:2b:e9:ee:b5:f3:5c:5a:
                    4a:64:88:4a:2b:c9:2a:bc:c2:3e:e5:91:3c:8c:41:
                    7a:ac:27:22:a4:a1:a8:00:d9:2b:98:9d:6f:aa:cb:
                    60:9c:a4:cc:a6:6f:72:02:b0:3a:4a:90:32:9d:04:
                    04:44:57:79:68:9a:57:8f:2f:cf:51:f7:4d:5a:d6:
                    fa:c0:9f:e1:c6:53:02:97:56:3a:b6:3d:62:d7:08:
                    07:99:4c:a1:ec:65:d8:48:a0:8b:7b:07:6c:8e:7f:
                    04:4e:79:8f:4d:07:fe:56:c7:3d:ff:09:97:b4:67:
                    84:ee:43:b4:6d:94:91:0e:b7:aa:85:7b:56:f0:63:
                    10:22:29:25:a5:ec:a0:6c:a7:cc:0f:03:12:a2:e4:
                    af:82:f8:0b:29:13:d7:c0:7b:00:3b:a8:77:f0:91:
                    0a:01:48:03:b9:4c:6f:ca:a2:e9:17:38:c7:05:b8:
                    b9:16:19:a2:e2:d4:6d:66:6d:23:c8:5b:e5:44:ba:
                    ba:a4:05:bf:b4:c2:ca:e2:01:b5:5f:23:8c:21:6a:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:94:1A:0E:A0:36:0E:02:4E:01:69:FA:E5:AC:6C:F3:00:D6:C5:F9
            X509v3 Authority Key Identifier:
                keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:6e:54:70:7b:7d:7a:e0:46:29:b6:d0:99:cb:a3:af:6d:
         f4:28:2a:94:c8:95:39:39:4e:e2:60:62:e2:ba:b7:05:9e:1a:
         94:c9:56:6c:0e:70:50:7d:27:a5:46:d6:91:cf:b3:ea:7e:28:
         7c:e4:28:f1:3e:b3:1f:a5:49:a1:24:a5:7f:96:0e:81:82:83:
         af:c2:5c:d7:6c:7d:94:f2:b8:a1:d8:b7:07:7f:e1:a3:2e:11:
         ce:50:6e:7b:9e:9f:14:dd:30:39:ce:80:47:64:17:06:25:fa:
         d0:2e:30:a8:1a:f0:5f:d5:80:8f:38:5b:0f:1a:70:ea:56:a6:
         d5:c6:90:e8:d2:f8:d3:b2:cb:c7:7d:d0:07:0f:62:8a:58:99:
         c9:98:2b:9e:0d:d4:5c:bb:c9:4a:65:0e:33:9d:a5:8d:19:5b:
         28:78:90:51:9d:73:12:33:f1:8e:ed:d5:6a:57:f0:dd:56:20:
         65:a1:fe:64:57:43:05:ab:a7:46:aa:33:fb:29:76:16:f1:b2:
         8d:6c:94:6b:76:ee:31:59:80:38:48:6b:18:e6:a9:9f:4f:9f:
         d6:1c:74:f7:7f:68:b5:c1:aa:62:b4:f0:51:f8:3d:7b:9b:95:
         e3:6a:11:07:9a:06:16:14:65:7f:a0:3f:13:c1:ca:4e:3d:a0:
         b3:60:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:03 2024 by rpki-client on console-fra.rpki-client.org