Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File:                     VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier:          8wZuSEpP279DuyGK20aacsDSgk2OKdtYkgw96t96xvg=
Subject key identifier:   4A:F2:EB:0D:E3:22:C3:35:9E:A9:07:E4:AF:A3:0D:E0:91:D7:DC:47
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer:       /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial:       019358E54298A3F7C54B9A5B0A0D8EB1E40B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number:          07CC
Signing time:             Sat 23 Nov 2024 12:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:40 +0000
Files and hashes:         1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: 2uCJqo6UEvzfyHqLfc6BYKv4U/0QZ2jOKFtPF+kXgng=)
                          2: r7cjoyzrMMFRbhl0N6Eu4zYkn-8.roa (hash: VWNH27/md6V3ZjRCR0MxtReqv07wuNEpCn9DkrKOfaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:42:98:a3:f7:c5:4b:9a:5b:0a:0d:8e:b1:e4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
        Validity
            Not Before: Nov 23 12:00:40 2024 GMT
            Not After : Nov 24 12:00:40 2024 GMT
        Subject: CN=4af2eb0de322c3359ea907e4afa30de091d7dc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:1a:2f:10:53:13:34:13:07:da:9e:7a:6c:
                    08:9a:d2:a8:1d:32:dd:0a:1b:b4:6c:84:1f:e0:fa:
                    e5:bb:71:97:c7:2f:58:6b:b7:f2:25:7d:12:23:0b:
                    0f:ee:08:45:60:d8:57:0d:11:7a:83:2e:19:ca:38:
                    28:c7:87:0d:90:65:22:32:88:54:eb:61:8c:00:08:
                    2d:11:9a:2f:72:b4:52:23:f0:77:e1:37:5d:ba:52:
                    55:4a:0a:a2:47:50:17:c8:c9:a8:ab:8a:5c:10:21:
                    87:b7:49:ba:c8:ff:23:6c:49:99:35:f7:8d:21:2d:
                    f7:15:65:32:13:bd:39:3a:37:1c:ef:47:15:3b:0a:
                    11:cb:db:49:ef:1b:12:80:0d:f6:9a:b1:c7:0f:11:
                    cc:40:7d:fe:66:f5:6b:4b:ff:a1:1a:46:b6:c1:67:
                    78:ad:7e:82:c0:be:83:de:e8:ee:4e:05:69:4b:3d:
                    38:fd:f4:52:06:78:5c:aa:84:af:74:1f:68:a4:43:
                    f4:ea:3d:73:35:a7:f1:ba:5a:3b:ec:31:27:0a:18:
                    69:50:e0:da:a5:ac:f5:56:68:12:31:ea:a8:e2:27:
                    41:a0:a7:53:06:83:bd:4d:26:a9:7b:5e:40:fb:ae:
                    ca:ea:e6:fc:66:c1:be:0f:d2:7c:a6:f5:a4:4c:4c:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F2:EB:0D:E3:22:C3:35:9E:A9:07:E4:AF:A3:0D:E0:91:D7:DC:47
            X509v3 Authority Key Identifier:
                keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ac:19:ad:01:9b:45:09:b0:16:1a:f2:d7:32:43:10:21:b3:
         1f:87:e5:dd:ac:a3:d9:af:a8:7a:35:d9:04:0c:dd:55:fc:94:
         a9:af:7d:b0:0f:cd:af:56:a0:a7:be:fc:9c:3a:b1:88:c4:d6:
         5f:38:d5:15:f7:b6:25:16:dc:23:75:83:2a:d2:5b:ac:cf:7a:
         bf:13:bb:b5:93:9b:56:5f:10:fb:11:98:dc:09:c3:d5:4e:6d:
         59:85:6b:fe:f1:61:69:c2:03:f1:e8:03:1b:0e:2f:97:b3:cf:
         4e:23:13:08:8f:dd:b6:a5:75:27:ae:40:39:96:e5:93:4d:f2:
         e2:bf:e6:1b:a1:fb:9d:37:9a:5d:88:f9:72:46:a5:5e:8f:8e:
         19:89:93:12:79:79:d6:1a:4d:6b:b4:2a:a0:01:dc:e7:0e:e2:
         0a:91:a3:1f:5e:c2:c4:1e:1a:e7:2d:35:6b:17:21:20:8f:e4:
         9b:94:a6:50:d9:64:6e:39:8e:29:30:a9:f1:98:fd:5c:65:9a:
         ef:92:fc:f7:fb:5c:e3:dc:1f:21:6c:eb:06:c2:64:88:d7:b7:
         cd:7d:e6:59:79:6f:8b:5b:01:1a:ce:d0:a8:6f:c2:46:99:f5:
         32:a2:91:55:d3:4f:e0:7e:5c:42:c3:a4:1c:82:49:d7:d3:a5:
         80:6a:71:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNY5UKYo/fFS5pbCg2OseQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3
NjI3NTcwHhcNMjQxMTIzMTIwMDQwWhcNMjQxMTI0MTIwMDQwWjAzMTEwLwYDVQQD
Eyg0YWYyZWIwZGUzMjJjMzM1OWVhOTA3ZTRhZmEzMGRlMDkxZDdkYzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4EaLxBTEzQTB9qeemwImtKoHTLd
Chu0bIQf4Prlu3GXxy9Ya7fyJX0SIwsP7ghFYNhXDRF6gy4Zyjgox4cNkGUiMohU
62GMAAgtEZovcrRSI/B34TddulJVSgqiR1AXyMmoq4pcECGHt0m6yP8jbEmZNfeN
IS33FWUyE705Ojcc70cVOwoRy9tJ7xsSgA32mrHHDxHMQH3+ZvVrS/+hGka2wWd4
rX6CwL6D3ujuTgVpSz04/fRSBnhcqoSvdB9opEP06j1zNafxulo77DEnChhpUODa
paz1VmgSMeqo4idBoKdTBoO9TSape15A+67K6ub8ZsG+D9J8pvWkTEwTuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEry6w3jIsM1nqkH5K+jDeCR19xHMB8GA1UdIwQY
MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt
NjA2NmQ4OWYwNWI4LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4
LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzKwZrQGb
RQmwFhry1zJDECGzH4fl3ayj2a+oejXZBAzdVfyUqa99sA/Nr1agp778nDqxiMTW
XzjVFfe2JRbcI3WDKtJbrM96vxO7tZObVl8Q+xGY3AnD1U5tWYVr/vFhacID8egD
Gw4vl7PPTiMTCI/dtqV1J65AOZblk03y4r/mG6H7nTeaXYj5ckalXo+OGYmTEnl5
1hpNa7QqoAHc5w7iCpGjH17CxB4a5y01axchII/km5SmUNlkbjmOKTCp8Zj9XGWa
75L89/tc49wfIWzrBsJkiNe3zX3mWXlvi1sBGs7QqG/CRpn1MqKRVdNP4H5cQsOk
HIJJ19OlgGpxtA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:55:33 2024 by rpki-client on console-ams.rpki-client.org