Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File:                     vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier:          7pyKQKJi5BIjx+D2OUBUmxOQwl/l+cwvdt76JfE7hOA=
Subject key identifier:   F8:C4:12:15:A4:83:F9:63:54:58:E2:E3:BC:2D:03:0A:E7:7B:EB:D6
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer:       /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial:       0193579BD7343C2869AC93D1C19C85834530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number:          07FD
Signing time:             Sat 23 Nov 2024 06:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:51 +0000
Files and hashes:         1: 8V3vY_Lny5IfFriQzkjX53OLBvY.roa (hash: hNZXW+6JxtEC41gs54mzEnP4YsAZCQJIPq0XNq2ro5U=)
                          2: WmFWq4_Vu-zfGwZTLuj0JN2QLUU.roa (hash: qQM7l1kSC5k8wMgpTEajcrG2vnLqeRG/cynENbftnZM=)
                          3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: rynLBCWCPkmerXc97jxBeqxBC9Yupc8bjB2NxZ0RLK4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d7:34:3c:28:69:ac:93:d1:c1:9c:85:83:45:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
        Validity
            Not Before: Nov 23 06:00:51 2024 GMT
            Not After : Nov 24 06:00:51 2024 GMT
        Subject: CN=f8c41215a483f9635458e2e3bc2d030ae77bebd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:da:61:48:05:ab:2f:46:09:6c:20:02:a5:
                    9f:7c:0c:9d:76:84:f9:c2:e8:99:16:a6:3b:f1:b6:
                    33:f2:47:68:31:f0:2f:d0:b8:d0:23:36:df:aa:7b:
                    f3:0f:f0:6e:82:4f:9b:0e:82:0e:4e:ee:57:11:7b:
                    bb:47:c9:ea:48:ed:4f:a6:85:d8:5e:c2:ef:7d:9e:
                    2e:31:7b:61:af:02:36:e2:8d:c8:ed:cb:bc:ee:11:
                    9c:22:3c:d3:f7:aa:fa:4c:a6:04:c4:61:5d:63:6d:
                    2d:22:ca:b2:40:d3:29:64:56:8d:00:a2:51:8c:2e:
                    4d:a8:ba:45:e2:b7:12:8a:11:a9:bf:a0:f1:d0:33:
                    de:7f:75:a1:33:a4:4f:c2:a0:db:ce:c0:17:ec:40:
                    98:a7:18:5b:45:2e:d8:30:87:7e:4b:71:ec:aa:90:
                    01:4c:f4:38:55:75:e4:bf:6b:fe:2e:1a:3e:ee:cf:
                    1e:1b:18:65:2e:5b:b6:f2:bd:4b:15:f9:5a:ec:38:
                    1a:f4:4e:7e:64:c5:1e:d1:18:26:41:1b:c9:85:c5:
                    16:31:70:af:5f:cf:00:b5:d0:8e:0f:74:7c:8d:a2:
                    db:41:d3:0a:e9:f0:89:19:19:b8:6b:7e:17:64:89:
                    ad:12:92:05:e7:31:ac:5d:00:1f:6b:a3:62:d3:78:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C4:12:15:A4:83:F9:63:54:58:E2:E3:BC:2D:03:0A:E7:7B:EB:D6
            X509v3 Authority Key Identifier:
                keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:d5:c5:c7:15:eb:40:f2:a4:aa:b4:4b:c0:5d:cb:a6:b9:
         b4:fb:17:93:5e:d7:f8:d7:be:59:25:36:5a:03:f7:32:25:2b:
         5d:73:4e:00:f5:8f:a3:f6:8c:e7:1c:17:91:4b:5a:b8:0a:62:
         9b:91:9d:72:77:b0:b1:26:f4:02:4d:c1:77:b1:d8:c7:21:ad:
         48:7e:a1:e6:47:5d:c0:d4:f7:60:3e:9e:c1:dd:8c:53:38:2c:
         2c:77:20:53:14:d3:09:75:bb:da:a6:bc:b3:db:6b:2c:70:a5:
         13:b8:f3:ee:8a:1e:bb:f5:bb:aa:bf:e0:41:4e:be:1d:e2:58:
         eb:20:5e:e0:74:ab:e3:46:7a:df:b7:db:75:fa:b1:d3:c3:36:
         53:56:0c:6a:a1:7c:c3:79:73:2e:56:bb:9f:24:ef:5c:c1:a1:
         ef:0d:8a:5f:05:7e:f5:17:3a:f3:09:41:99:69:a3:34:01:da:
         95:3d:75:48:6c:9e:24:e2:bd:32:f4:78:42:31:c3:1a:7d:31:
         45:b4:30:14:6d:49:75:5d:38:fa:10:c1:20:a4:df:a0:5f:8d:
         3b:38:b0:ca:d2:1a:c0:85:de:27:1a:b6:17:39:88:09:27:e1:
         d0:ec:4f:e2:76:36:a8:82:bf:54:2a:54:1a:1f:79:e8:f9:81:
         29:47:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----