Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
File:                     vTvLhii9vq2xlKI1rEuMi3EeN9E.mft (raw, json)
Hash identifier:          Y/im5gI0tStYXBCAp4e44ArX6JKPauhJNu33wxQRzHg=
Subject key identifier:   A2:30:69:6B:D8:E2:49:6F:11:10:FD:9B:F8:45:D6:05:79:CC:31:AB
Authority key identifier: BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
Certificate issuer:       /CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Certificate serial:       01923AA750E9E024373CE011A85F6EBEBB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
Manifest number:          0798
Signing time:             Sat 28 Sep 2024 22:01:36 +0000
Manifest this update:     Sat 28 Sep 2024 22:01:36 +0000
Manifest next update:     Sun 29 Sep 2024 22:01:36 +0000
Files and hashes:         1: NWJRgYuzg5sNdu_LAZYrwLU-ht8.roa (hash: UIQ+eLgjMrmh+rUZs9m8WV2EaV6HYBMsz2zPi4l101Y=)
                          2: vTvLhii9vq2xlKI1rEuMi3EeN9E.crl (hash: 2G3q/T8079eAK96WOlh0FSgIolZsV1gw0Vjg3t75wvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a7:50:e9:e0:24:37:3c:e0:11:a8:5f:6e:be:bb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
        Validity
            Not Before: Sep 28 22:01:36 2024 GMT
            Not After : Sep 29 22:01:36 2024 GMT
        Subject: CN=a230696bd8e2496f1110fd9bf845d60579cc31ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:a5:cb:b8:2e:0d:3d:25:8d:04:77:e7:70:
                    a4:2c:b4:2b:05:07:6d:d4:a2:ce:a7:52:37:89:c0:
                    96:ed:bf:a0:13:72:c0:e7:15:97:70:fb:1b:8f:c4:
                    90:49:ef:bf:26:12:26:1c:0b:d6:3e:99:d5:75:1f:
                    a4:d0:eb:f2:0b:a1:06:2d:6b:75:b7:cd:94:f9:e8:
                    61:08:1c:b8:a9:d3:48:6c:19:72:10:e0:08:aa:f5:
                    d7:12:82:a2:ac:61:da:ce:03:52:c3:03:4e:e3:d2:
                    c1:84:35:ff:aa:0d:58:45:8e:37:99:0f:d4:1b:4e:
                    05:a8:03:5e:e1:74:fa:10:03:df:1d:9b:bb:71:86:
                    06:8a:fa:ab:7a:e3:d8:26:03:df:b4:a4:08:55:de:
                    72:cd:ce:00:bb:72:04:33:af:b0:0d:50:01:5e:53:
                    a9:ae:3f:ec:6a:3b:9f:66:cb:44:1a:7a:f1:60:3b:
                    0b:7c:cd:f2:ff:4f:51:22:46:87:0d:b1:a6:d9:f6:
                    72:72:fa:20:58:0a:04:02:25:f1:00:fd:19:4e:2b:
                    b3:84:29:69:7f:e9:2c:7e:26:24:26:9f:c3:db:a2:
                    e8:29:b5:b7:ad:c3:68:59:d6:57:b1:38:d9:ab:a4:
                    dc:dc:f5:ac:36:7a:30:41:0a:a3:1e:0f:e3:6d:21:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:30:69:6B:D8:E2:49:6F:11:10:FD:9B:F8:45:D6:05:79:CC:31:AB
            X509v3 Authority Key Identifier:
                keyid:BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:45:0d:db:f0:c8:0f:2f:5c:f5:2e:66:a8:69:d5:3b:87:
         48:2e:79:6b:d7:4a:2c:3b:61:62:ca:38:27:9f:94:b2:c5:3d:
         65:c9:f2:9a:87:ec:98:79:ef:55:61:5e:8d:4b:d0:47:6f:0f:
         51:2f:34:eb:44:dd:72:30:45:b7:42:58:ac:86:64:71:84:3e:
         99:d5:fb:38:a3:27:89:6f:43:9a:b1:4a:4a:f0:df:d4:cd:39:
         43:ab:5c:01:a4:65:8c:09:66:db:11:72:3b:b4:e1:e7:94:2e:
         c6:08:e5:f5:ae:e4:1b:4e:43:f8:7c:33:47:03:dc:f2:86:88:
         2e:b6:79:25:4d:d0:95:4b:b9:d4:4a:2b:fc:b7:72:75:dc:f8:
         61:62:43:a6:16:91:2e:30:db:e6:ed:1d:5e:fc:87:91:06:2a:
         e0:2e:92:00:64:9d:91:94:9b:31:5e:86:ee:db:91:c0:bf:40:
         10:2e:97:47:a7:d4:3b:83:96:52:03:9a:81:9b:7f:4e:3b:dd:
         fa:a3:58:dd:08:f5:20:17:f9:8f:ab:09:9c:96:ab:97:81:e6:
         37:77:0f:8e:b2:df:13:a7:64:0f:9f:71:d7:a0:f1:f5:d6:c6:
         c2:4d:ca:71:97:d5:97:e8:a0:44:6c:03:36:3b:94:e8:8d:db:
         ec:44:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:32:33 2024 by rpki-client on console-fra.rpki-client.org