Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File:                     Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier:          sJVjHJbCrXTyGCWc7jAAumNDgRjpNon7fUJJ/ykOtMY=
Subject key identifier:   1A:2E:36:3A:CB:E1:73:F0:C2:6D:AA:65:D9:CA:78:AD:07:9F:4F:A2
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer:       /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial:       019360D5A46901323A2EC8B90A8DAA4C19E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number:          01F0
Signing time:             Mon 25 Nov 2024 01:00:34 +0000
Manifest this update:     Mon 25 Nov 2024 01:00:34 +0000
Manifest next update:     Tue 26 Nov 2024 01:00:34 +0000
Files and hashes:         1: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: U/22rXHJY56rsinxCAelD19T2dXJC9lzt4knh88aWzM=)
                          2: hFyGtH7qYxRaCrSMYokNmp1YevA.roa (hash: Ba2DOsPIXyjwuWDE3EdTe9G/WoUwcT4NaK3C0fWsvRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:d5:a4:69:01:32:3a:2e:c8:b9:0a:8d:aa:4c:19:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
        Validity
            Not Before: Nov 25 01:00:34 2024 GMT
            Not After : Nov 26 01:00:34 2024 GMT
        Subject: CN=1a2e363acbe173f0c26daa65d9ca78ad079f4fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:b5:e8:bf:e0:84:49:65:b9:a3:4e:69:3c:
                    c3:3f:81:33:80:70:52:de:b7:2a:2a:7c:91:86:69:
                    48:94:2c:ad:48:40:6e:4f:00:5a:41:01:13:5c:0e:
                    e6:2f:e1:18:33:e5:5a:da:aa:60:2a:e1:08:02:6b:
                    2b:4e:0b:91:e7:22:db:c7:3a:20:7d:84:4f:d2:a8:
                    dd:56:2e:59:8f:d1:ff:66:15:d3:d5:9b:52:d6:f5:
                    e7:6c:a0:ec:6a:cd:a6:8b:8d:10:94:5a:ff:1c:f8:
                    2c:c6:ee:88:ce:2d:4e:d9:dd:1e:3c:a7:13:80:9b:
                    01:75:fd:92:cd:d5:a4:c4:90:b1:39:8b:9c:cc:55:
                    d3:e7:2d:90:91:75:3e:7b:bb:3f:d0:48:f7:9a:43:
                    8f:db:2c:47:77:57:7c:0b:35:d5:e5:a1:66:ac:1e:
                    9f:4f:49:1f:ec:a8:07:0c:40:5e:65:f2:4d:ce:08:
                    96:58:c9:5d:96:bb:68:d5:62:5f:01:18:21:bc:46:
                    84:78:c7:7b:3e:c0:11:f1:f4:ab:8e:7b:dd:13:9a:
                    ac:5c:02:6c:d1:5a:12:c1:71:71:dc:e3:6c:4c:39:
                    4c:c6:0e:1b:cf:18:04:53:bf:0e:52:96:1e:7f:01:
                    77:3b:62:f1:5c:cc:66:5b:fe:dc:6b:8e:45:49:a9:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:36:3A:CB:E1:73:F0:C2:6D:AA:65:D9:CA:78:AD:07:9F:4F:A2
            X509v3 Authority Key Identifier:
                keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:34:aa:df:54:9c:f9:c7:a1:21:d8:2b:ad:34:36:f8:72:ab:
         91:0b:64:7a:d8:29:d6:30:59:87:33:4f:e2:4a:e9:06:81:6d:
         5e:72:76:a7:16:42:db:93:96:43:75:9a:c7:d0:25:1a:f3:81:
         d4:9c:3f:07:ad:b6:f9:ac:48:69:58:22:45:77:41:3e:ed:e5:
         09:c9:22:33:82:66:33:ee:d3:ad:0d:91:70:de:b7:8b:38:95:
         63:d9:d2:3d:77:e3:8c:92:36:2d:69:78:ee:53:ad:5a:17:8b:
         9f:8e:9c:f8:c6:0f:b2:d6:54:e7:12:6a:0e:f0:e1:e5:dc:d6:
         eb:01:bc:36:bd:f5:14:d7:ab:fc:20:34:de:82:78:64:e5:d5:
         9b:da:2f:92:c8:1a:ff:61:3e:26:ec:90:0c:cc:ae:ba:8b:38:
         88:b7:dc:17:64:81:5f:23:a4:77:17:ff:83:61:fa:27:4a:85:
         d0:38:6d:57:49:2b:cf:f0:37:f5:f5:1d:5c:d5:4d:86:20:e5:
         5a:01:89:57:a3:b8:6a:41:37:27:10:51:d4:80:bf:08:54:d0:
         0b:04:82:9c:b3:b4:62:2c:31:3f:f1:ae:1f:40:f5:10:21:d5:
         a4:73:9d:4f:ee:3c:e0:b4:71:a2:2d:10:89:c5:e8:77:32:20:
         67:e7:d4:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNg1aRpATI6Lsi5Co2qTBnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Mzc2ZGVmMTIyNDgzOWE2MTEzZDFkMGNkZDM5ODEwNGZh
YWYyZmIwHhcNMjQxMTI1MDEwMDM0WhcNMjQxMTI2MDEwMDM0WjAzMTEwLwYDVQQD
EygxYTJlMzYzYWNiZTE3M2YwYzI2ZGFhNjVkOWNhNzhhZDA3OWY0ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEu16L/ghElluaNOaTzDP4EzgHBS
3rcqKnyRhmlIlCytSEBuTwBaQQETXA7mL+EYM+Va2qpgKuEIAmsrTguR5yLbxzog
fYRP0qjdVi5Zj9H/ZhXT1ZtS1vXnbKDsas2mi40QlFr/HPgsxu6Izi1O2d0ePKcT
gJsBdf2SzdWkxJCxOYuczFXT5y2QkXU+e7s/0Ej3mkOP2yxHd1d8CzXV5aFmrB6f
T0kf7KgHDEBeZfJNzgiWWMldlrto1WJfARghvEaEeMd7PsAR8fSrjnvdE5qsXAJs
0VoSwXFx3ONsTDlMxg4bzxgEU78OUpYefwF3O2LxXMxmW/7ca45FSammkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBouNjrL4XPwwm2qZdnKeK0Hn0+iMB8GA1UdIwQY
MBaAFFY3be8SJIOaYRPR0M3TmBBPqvL7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYt
ZDgwODQ3MzNlOTgwLzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYtZDgwODQ3MzNlOTgw
LzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTSq31Sc
+cehIdgrrTQ2+HKrkQtketgp1jBZhzNP4krpBoFtXnJ2pxZC25OWQ3Wax9AlGvOB
1Jw/B622+axIaVgiRXdBPu3lCckiM4JmM+7TrQ2RcN63iziVY9nSPXfjjJI2LWl4
7lOtWheLn46c+MYPstZU5xJqDvDh5dzW6wG8Nr31FNer/CA03oJ4ZOXVm9ovksga
/2E+JuyQDMyuuos4iLfcF2SBXyOkdxf/g2H6J0qF0DhtV0krz/A39fUdXNVNhiDl
WgGJV6O4akE3JxBR1IC/CFTQCwSCnLO0YiwxP/GuH0D1ECHVpHOdT+484LRxoi0Q
icXodzIgZ+fUzw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:20 2024 by rpki-client on console-fra.rpki-client.org