Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File:                     vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier:          CIwphUm+zu6MkjXsY0HKaUEOrKNusqaPrgof3dBSSpE=
Subject key identifier:   83:06:54:C8:CE:D6:BA:3A:AA:B1:3A:4D:FC:B5:52:E0:E8:43:D4:D1
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer:       /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial:       01935765007729775CC89AC2A97DF2FDF954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number:          0764
Signing time:             Sat 23 Nov 2024 05:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:57 +0000
Files and hashes:         1: 9YohKYZP4eNO9QloAC1-LGe3gHI.roa (hash: VBSdjgImWoWdTCmgCghT2/f2lHir6RfZFkIH1/tqFlY=)
                          2: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: hAufkAogOvxn0MGGUmj6wl4rsAYoCvedLXmkD+VAlk0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:65:00:77:29:77:5c:c8:9a:c2:a9:7d:f2:fd:f9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
        Validity
            Not Before: Nov 23 05:00:57 2024 GMT
            Not After : Nov 24 05:00:57 2024 GMT
        Subject: CN=830654c8ced6ba3aaab13a4dfcb552e0e843d4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:d3:30:01:b5:5d:f6:b5:c7:f1:f6:5d:d7:
                    61:d9:1d:22:65:5d:c4:bb:b1:80:6e:53:88:b8:e3:
                    d1:13:7e:d4:de:05:66:08:5c:f6:d8:1a:39:23:08:
                    d8:16:db:e5:2d:13:a4:6c:00:fc:05:79:21:6e:39:
                    67:21:5b:48:cf:ae:d7:f2:12:62:40:55:b0:63:45:
                    25:b0:b5:b6:00:66:a4:c5:df:63:b1:8d:c5:23:02:
                    d2:60:af:e5:c4:97:41:11:a3:a1:43:ab:19:26:1b:
                    b6:50:47:0f:c2:28:8b:79:45:6c:ad:be:78:51:c3:
                    09:72:c7:64:09:d2:24:0d:13:85:5d:8c:5b:88:e6:
                    15:62:6b:06:64:94:bb:9f:f7:2d:b7:b3:4c:4a:60:
                    a1:d5:a8:07:a2:a7:f9:ca:4e:ac:74:0e:e5:4f:f0:
                    2f:73:70:3a:89:54:69:35:f0:58:0a:88:72:e6:89:
                    9d:6e:65:a9:d8:78:c0:46:3f:bb:c6:fa:e7:c0:9d:
                    be:87:9c:27:1b:24:a9:02:22:1e:bb:f2:ad:3d:ec:
                    3a:75:6d:76:01:93:91:fc:1f:2a:6d:d3:ef:83:95:
                    50:d1:1c:68:3d:79:93:2b:b0:db:ab:93:ee:f2:e2:
                    98:02:a0:c3:87:0b:16:65:55:72:10:96:27:26:dc:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:06:54:C8:CE:D6:BA:3A:AA:B1:3A:4D:FC:B5:52:E0:E8:43:D4:D1
            X509v3 Authority Key Identifier:
                keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:51:1d:9c:d4:ea:0d:e5:b3:cc:79:0e:21:ba:61:71:69:6c:
         30:61:d6:e3:f0:a9:ef:14:c4:43:c5:e2:5f:ba:50:8e:0e:6b:
         be:f4:48:74:e1:54:28:53:d6:01:29:bc:35:4b:d4:ff:5a:11:
         6c:e5:07:79:b0:5e:9d:76:78:87:d2:92:bb:4a:fc:b9:fa:dc:
         46:e1:81:40:a6:48:67:76:7a:46:2c:e7:0b:2f:83:28:22:c9:
         fd:b9:77:6b:5d:31:cb:67:2d:f7:cc:55:21:dc:d8:13:2d:9d:
         e0:3e:bb:9f:09:de:0a:37:8a:73:35:c6:30:5d:1c:cc:66:82:
         01:a8:6b:3e:f9:77:05:0b:f6:33:cd:cb:4b:a4:e7:7b:7c:aa:
         c2:77:a9:d0:87:a1:27:5f:6b:7f:91:04:ed:c9:87:8f:0d:80:
         dd:58:b3:62:9f:59:4f:f0:df:e9:9a:7b:db:6d:29:0b:39:19:
         7d:ac:d4:21:d9:e6:2b:a2:32:b1:f5:5e:93:42:ef:8b:52:78:
         f4:db:14:84:04:5f:f6:56:f2:fa:3d:8c:77:cd:58:8a:46:cf:
         c0:31:fe:4b:67:20:8b:d4:e2:92:cb:7c:cf:27:c7:b7:14:43:
         5b:34:ff:a2:f4:61:97:76:e6:32:3d:57:51:f9:96:ea:33:58:
         8a:6e:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:22 2024 by rpki-client on console-fra.rpki-client.org