Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
File:                     vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft (raw, json)
Hash identifier:          YTi+9rocD5npZ15rLI3jwUeE8ST1yO+or6+ip3eM5xg=
Subject key identifier:   64:13:1B:04:BB:1E:11:11:0B:29:1D:E7:4A:A5:7C:94:7D:0B:1F:01
Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
Certificate issuer:       /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Certificate serial:       019357D2AB70BF6C99E884F9BEE8908FF5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
Manifest number:          0B99
Signing time:             Sat 23 Nov 2024 07:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:44 +0000
Files and hashes:         1: rI09pCN7kuf4KxeUHME7aRE01OM.roa (hash: Vl0E74/6Mut6jeG3f2WJ7Sj/uRUmY5rHUOdIhlTaysw=)
                          2: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl (hash: zXNwHOyd2mv25ripTcmvl3ZXry3GCJ0MNRCyMViT76M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ab:70:bf:6c:99:e8:84:f9:be:e8:90:8f:f5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
        Validity
            Not Before: Nov 23 07:00:44 2024 GMT
            Not After : Nov 24 07:00:44 2024 GMT
        Subject: CN=64131b04bb1e11110b291de74aa57c947d0b1f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:c8:01:bb:b1:bc:8e:cc:de:e2:e7:c2:31:
                    f8:5a:ca:47:f8:33:08:f3:aa:12:dd:c4:89:00:c0:
                    90:af:b8:61:8d:ac:d1:24:7c:09:48:ab:d9:be:bb:
                    66:ef:75:45:db:65:5c:b6:5e:f3:7c:2b:de:d6:81:
                    74:52:28:35:36:29:cd:3e:0e:43:2e:f1:40:1e:82:
                    d9:52:3c:8d:22:df:fc:72:81:b7:6e:50:01:4f:c3:
                    25:21:73:51:bc:ae:8c:07:6f:f4:52:f2:67:5d:eb:
                    e2:ae:7c:2a:cf:e4:e5:1a:87:d0:65:67:31:04:4c:
                    f5:a3:da:3e:71:5e:46:32:8d:98:b7:99:93:ce:06:
                    e2:2d:98:6f:2c:3c:9c:59:fc:d2:01:be:83:dd:b8:
                    7e:f2:d6:52:c9:09:63:d5:9f:fc:55:53:a3:47:c5:
                    99:9f:fa:1a:41:8a:2d:81:0a:15:0b:8d:f0:57:69:
                    e9:93:90:2c:7c:95:e7:b8:86:11:56:fb:e1:2d:35:
                    1c:96:08:6f:e9:0b:2d:29:34:e0:9c:c2:8a:68:20:
                    c7:9d:38:5a:93:84:1f:e4:58:4c:23:35:88:0b:11:
                    25:2c:e7:81:af:97:e6:5e:fb:00:7e:cc:6f:53:6f:
                    f5:4d:0d:45:3f:a3:e1:65:6c:44:bc:1f:ff:4e:df:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:13:1B:04:BB:1E:11:11:0B:29:1D:E7:4A:A5:7C:94:7D:0B:1F:01
            X509v3 Authority Key Identifier:
                keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:e1:25:66:ac:1b:3d:a5:59:83:c9:d7:ea:d3:39:00:1d:
         24:fc:08:8c:ab:97:65:7a:e6:9e:15:79:29:22:dc:88:c2:7a:
         0f:f0:ea:44:72:fb:af:5a:70:ae:3e:ab:d5:36:ce:e8:ed:fc:
         39:c3:56:5f:3f:bc:c3:11:83:78:e8:28:a4:9c:07:2e:a6:26:
         1b:8d:23:15:eb:cc:88:7f:df:47:46:c8:8b:01:35:fc:7d:ed:
         b5:15:a9:71:79:e2:e7:f9:84:c0:a7:3f:18:83:80:f9:5c:d7:
         8a:6d:76:c8:a8:47:9f:04:de:cf:a6:0f:01:bb:5a:8f:bb:15:
         de:a1:4b:2d:82:2d:36:e2:6b:61:ee:f5:6d:70:70:bf:17:70:
         87:42:68:2b:40:32:92:8e:b0:88:f8:2d:13:db:56:9a:40:46:
         44:c1:1f:61:61:25:2b:4e:80:67:a2:ad:d9:9b:6f:e1:71:d7:
         35:15:90:a7:f8:de:e1:f5:b0:73:f4:5c:61:a8:f7:f1:43:67:
         56:cb:c1:73:25:02:19:b4:93:37:14:b3:b1:43:76:7d:9e:65:
         68:af:16:cb:9f:2f:64:78:55:ab:c4:e4:b5:dd:ad:80:fd:44:
         6c:28:11:b1:1b:26:42:17:c8:da:b8:51:cd:82:ff:d6:6f:c1:
         1d:02:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:23 2024 by rpki-client on console-fra.rpki-client.org