Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File:                     vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier:          WlllwpZk+cQ89P/eiyMw33WfvyL0SAy0ilGyzcFcq0M=
Subject key identifier:   9A:CB:70:B3:94:29:0D:85:C4:4D:0B:86:13:68:8B:BD:4C:3D:F6:66
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer:       /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial:       019353BF1FE13E66DF9CFCE5AB59A91B9388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 12:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:54 +0000
Files and hashes:         1: 0T5HGJNv46vOW07VpX1ZR9PJfp0.roa (hash: W4x2wSB+gtJvPWm0sGf/tEJQBGEbGUjYk+z1KVZd3A8=)
                          2: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: vBE3jGXf3qo4G4ccloeKFjrudARQYjyDsTMvUNAetxA=)
                          3: xrfpoWh9dcdipy2L55b4-lf2JyA.roa (hash: A15cZFkiYHBBweiEzD50ID5HFr302x6qgjMHlvmWD/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:bf:1f:e1:3e:66:df:9c:fc:e5:ab:59:a9:1b:93:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
        Validity
            Not Before: Nov 22 12:00:54 2024 GMT
            Not After : Nov 23 12:00:54 2024 GMT
        Subject: CN=9acb70b394290d85c44d0b8613688bbd4c3df666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:85:19:88:47:36:13:30:51:24:df:30:e4:
                    96:48:a9:68:14:62:ab:24:5f:e1:82:98:45:85:6d:
                    74:9a:27:5c:be:a7:46:0e:c6:3f:20:20:19:aa:bd:
                    5c:82:38:44:78:30:dc:a8:6c:68:e9:16:c7:da:dc:
                    60:60:4a:91:14:07:a2:a7:c6:ab:f1:9c:77:da:fc:
                    ed:c2:2e:58:82:05:56:60:34:42:75:13:01:12:ee:
                    ad:be:1b:f3:e7:9d:6a:65:01:3d:42:0e:15:83:dc:
                    a5:c7:4b:43:e4:bf:b5:73:b1:86:e4:5a:b5:6f:3a:
                    ff:85:b5:7a:a6:b8:2c:3c:8a:85:00:3c:7e:22:65:
                    19:73:e8:4a:37:cb:ec:d2:1a:ab:d4:d7:86:c0:18:
                    70:d1:bf:04:13:9b:c4:9c:2e:7e:90:1a:20:b5:0a:
                    95:ec:2f:09:a6:ef:ad:ba:ee:02:f3:7a:68:d7:d1:
                    88:65:d6:a7:45:82:e1:7f:1a:be:0b:46:5d:c1:af:
                    34:99:59:cd:80:33:79:75:41:26:1f:e7:14:b2:54:
                    8f:41:f0:0a:f8:28:24:91:b1:53:d1:34:90:04:61:
                    55:7b:57:bf:21:34:51:28:72:2a:1f:2c:4b:c9:8c:
                    96:ed:f2:9c:42:49:aa:bb:78:b1:a4:35:2a:e6:c9:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CB:70:B3:94:29:0D:85:C4:4D:0B:86:13:68:8B:BD:4C:3D:F6:66
            X509v3 Authority Key Identifier:
                keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1b:61:13:97:32:73:cf:b3:42:44:d3:a7:8f:4e:fb:3d:d8:
         72:23:b4:62:b5:fe:23:9a:aa:4f:93:5d:e1:4e:90:35:e7:f3:
         da:41:75:d6:ba:5f:9a:af:4b:42:06:69:49:01:5c:87:82:c4:
         a3:32:12:3a:12:de:81:91:0d:00:a5:0d:17:1e:10:80:7e:28:
         23:80:00:fb:89:5b:82:0e:54:a7:1f:03:2b:70:c1:79:be:dd:
         6e:e5:52:ce:2d:04:50:41:7b:02:37:2b:6a:85:1e:9b:84:e8:
         ab:9d:a1:51:a8:df:e3:8b:25:18:e1:8c:2d:ea:f3:85:c4:0f:
         37:5c:31:56:e4:06:43:9e:50:03:b4:33:91:88:5d:4f:cf:40:
         64:51:1e:41:64:ae:da:a7:bc:c0:4d:ea:98:23:81:af:31:67:
         09:04:01:1e:73:38:92:53:59:d6:e5:fe:0a:6f:ba:d2:3d:6b:
         3a:ed:b5:08:84:e3:b6:c0:99:0b:71:0b:a9:32:3e:9e:dc:11:
         ed:93:d4:88:40:eb:65:cd:ad:8c:79:12:5a:7b:fd:b8:43:c0:
         4a:8c:4b:31:1b:40:a3:6e:09:7d:36:8c:6c:65:d5:88:de:a9:
         d9:29:ed:d0:60:80:8e:e4:95:7f:24:95:5b:00:16:24:a1:7e:
         21:31:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:19 2024 by rpki-client on console-ams.rpki-client.org