Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File:                     Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier:          hLCAZbhYkUjqj6hBhRSPSbdQgn3hVlq5twZYeXs+ztE=
Subject key identifier:   A1:B6:71:C3:A8:E5:20:B8:B4:AD:7E:3F:7D:6F:0A:6B:F6:9A:D5:2B
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer:       /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial:       019510FE24FCCF29BE5FEFA389A0AFE38097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number:          137B
Signing time:             Sun 16 Feb 2025 23:00:45 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:45 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:45 +0000
Files and hashes:         1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: LeKcoqbVvlB/V763C17laeZlcu96KKbmc4zlWuHvjn8=)
                          2: xE3UCINMnG0RCT_m2jFifz3YI_I.roa (hash: 4ag6h9vHiKl6oco6jDKbi/mumQRgQeuzaOi8WereNNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:24:fc:cf:29:be:5f:ef:a3:89:a0:af:e3:80:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
        Validity
            Not Before: Feb 16 23:00:45 2025 GMT
            Not After : Feb 17 23:00:45 2025 GMT
        Subject: CN=a1b671c3a8e520b8b4ad7e3f7d6f0a6bf69ad52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:53:9d:cc:82:da:f8:8f:f1:64:c7:28:e6:
                    82:3d:ea:2d:c8:82:d9:f2:43:4b:a5:ad:37:58:5a:
                    c0:82:78:5f:e3:1f:97:b6:c2:4a:b3:0b:56:ab:6f:
                    c9:62:1f:ae:dc:f8:0e:25:ed:0c:f4:8b:e9:67:22:
                    93:2c:26:e4:e5:12:fa:50:57:6c:d2:db:ff:f8:43:
                    ee:df:0a:0d:25:d5:a8:e5:e2:06:ed:7b:9b:6d:39:
                    59:5e:d6:a0:d5:91:4a:e1:c7:de:a3:77:6f:77:1c:
                    6e:f0:99:51:f5:c4:2e:9e:47:aa:7f:de:c5:24:f1:
                    d0:f8:5f:41:77:4c:6c:94:0b:02:7a:99:e7:a6:31:
                    5b:0b:e1:97:e8:04:ad:eb:a9:18:0a:a8:a0:9d:80:
                    50:86:9a:cc:8d:f4:5f:9d:2c:ca:b1:4c:e7:d2:e2:
                    68:b6:ba:a2:d4:f6:b4:0e:47:d0:11:b2:05:3e:43:
                    a1:bc:4e:ba:c6:54:8d:40:af:93:94:90:2d:66:5b:
                    27:a8:9e:68:9d:57:16:df:97:57:36:4d:d6:05:77:
                    54:5d:f0:95:9f:11:7b:a5:65:bd:3f:c6:3b:9b:13:
                    64:91:2b:90:ee:5e:c7:cf:20:58:af:25:db:4f:e5:
                    44:db:fc:7b:78:81:8c:b1:e7:58:8f:65:a7:36:90:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:71:C3:A8:E5:20:B8:B4:AD:7E:3F:7D:6F:0A:6B:F6:9A:D5:2B
            X509v3 Authority Key Identifier:
                keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:bf:65:53:7d:7a:9d:7d:9e:76:60:c0:5c:5b:8c:5e:e2:
         0b:fd:26:cd:14:a0:ce:b7:6a:d2:7b:61:62:b4:16:bd:af:48:
         67:cf:bb:da:5b:4c:de:38:3f:0c:80:8a:18:40:89:2b:e1:7f:
         37:69:ae:18:06:a7:68:16:2b:6b:2a:bf:06:13:f8:2d:5b:be:
         ef:98:ab:ad:81:f0:fd:4c:7d:c5:96:78:be:12:b1:b7:b1:5f:
         0e:b0:be:f6:40:ec:e0:48:2e:d6:6c:b1:5b:78:52:cc:b2:7b:
         4b:e4:fc:d2:a0:ed:bb:e4:90:d6:59:d5:ff:86:ca:83:58:9f:
         a8:e9:40:e8:da:b5:61:15:90:24:36:b4:90:2d:c9:7a:ce:55:
         b3:70:3f:c3:50:44:f0:37:c3:37:3a:02:5e:ed:21:e4:c8:2c:
         3f:1e:b4:07:71:e6:19:49:1d:c6:1e:ae:34:e2:ba:f3:6d:24:
         14:aa:9f:f9:d5:1d:f3:d7:63:b5:29:c4:7d:e0:50:09:07:ec:
         75:92:5b:fc:e8:46:47:dc:ad:ef:a6:b5:86:df:63:45:90:95:
         d7:68:73:87:af:02:52:0e:74:d5:23:ad:83:2b:d8:33:2d:66:
         95:6a:52:ec:53:f1:a2:7e:a8:34:bf:ed:b6:fc:aa:3d:5c:12:
         03:7c:76:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/iT8zym+X++jiaCv44CXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Y2M3ZjRhYzcwMGJiNWFkN2Y0YjIxYzExMTExNDkzZmY2
OTc3YTQwHhcNMjUwMjE2MjMwMDQ1WhcNMjUwMjE3MjMwMDQ1WjAzMTEwLwYDVQQD
EyhhMWI2NzFjM2E4ZTUyMGI4YjRhZDdlM2Y3ZDZmMGE2YmY2OWFkNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldpTncyC2viP8WTHKOaCPeotyILZ
8kNLpa03WFrAgnhf4x+XtsJKswtWq2/JYh+u3PgOJe0M9IvpZyKTLCbk5RL6UFds
0tv/+EPu3woNJdWo5eIG7XubbTlZXtag1ZFK4cfeo3dvdxxu8JlR9cQunkeqf97F
JPHQ+F9Bd0xslAsCepnnpjFbC+GX6ASt66kYCqignYBQhprMjfRfnSzKsUzn0uJo
trqi1Pa0DkfQEbIFPkOhvE66xlSNQK+TlJAtZlsnqJ5onVcW35dXNk3WBXdUXfCV
nxF7pWW9P8Y7mxNkkSuQ7l7HzyBYryXbT+VE2/x7eIGMsedYj2WnNpCcPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG2ccOo5SC4tK1+P31vCmv2mtUrMB8GA1UdIwQY
MBaAFFbMf0rHALta1/SyHBERFJP/aXekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMt
OWI4NmJmZmM4MzNjLzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMtOWI4NmJmZmM4MzNj
LzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPl+/ZVN9
ep19nnZgwFxbjF7iC/0mzRSgzrdq0nthYrQWva9IZ8+72ltM3jg/DICKGECJK+F/
N2muGAanaBYrayq/BhP4LVu+75irrYHw/Ux9xZZ4vhKxt7FfDrC+9kDs4Egu1myx
W3hSzLJ7S+T80qDtu+SQ1lnV/4bKg1ifqOlA6Nq1YRWQJDa0kC3Jes5Vs3A/w1BE
8DfDNzoCXu0h5MgsPx60B3HmGUkdxh6uNOK6820kFKqf+dUd89djtSnEfeBQCQfs
dZJb/OhGR9yt76a1ht9jRZCV12hzh68CUg501SOtgyvYMy1mlWpS7FPxon6oNL/t
tvyqPVwSA3x2zA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:11 2025 by rpki-client