Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File:                     VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier:          k01sCWbvRD80mvm3venjJORSK9VkOLODyhbkIFtDY7o=
Subject key identifier:   4D:67:34:6D:19:11:6F:E0:E5:48:E1:86:5C:80:17:3F:14:72:6F:E9
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer:       /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial:       019369DA39135AB3454DB4AACB869A912E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number:          0FEA
Signing time:             Tue 26 Nov 2024 19:02:09 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:09 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:09 +0000
Files and hashes:         1: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: lGEDQYjdzv52VH5PlD+eDuXLfIGFSOPC/CMAWCdrbTE=)
                          2: Wc8FzPG0JYD1xj5g1hysjT09uc0.roa (hash: o8tSvDqyWfBZm+JRvbb8xIhhfv1TbT2VbZoEeGyXaIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:39:13:5a:b3:45:4d:b4:aa:cb:86:9a:91:2e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
        Validity
            Not Before: Nov 26 19:02:09 2024 GMT
            Not After : Nov 27 19:02:09 2024 GMT
        Subject: CN=4d67346d19116fe0e548e1865c80173f14726fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:a7:47:92:0e:7f:3e:e3:85:3e:0b:b4:2c:
                    33:b1:1d:55:55:48:7b:12:5e:1e:d6:a6:06:db:97:
                    1e:e1:fd:30:64:3c:84:45:cf:11:aa:fc:53:5c:3a:
                    d0:fd:c7:d3:40:1d:48:60:ef:32:78:ff:ad:6f:b5:
                    56:cc:01:10:35:24:dc:88:f1:cf:42:66:27:c5:36:
                    9b:a1:fa:8d:d3:12:90:f2:87:57:3a:0c:8d:d9:30:
                    f9:0b:f6:fc:4e:fc:ee:2e:a4:ac:83:1b:ed:80:29:
                    b4:11:6d:12:cc:28:b0:96:da:1e:44:97:f3:7c:7b:
                    3b:0a:67:c8:cb:f1:95:ed:55:25:77:f8:d6:e8:4b:
                    92:82:38:12:6a:68:3e:3b:f4:38:1e:3e:46:bc:03:
                    cf:65:f7:f9:98:5a:ca:58:f8:f6:cf:c3:1e:b4:91:
                    d8:a4:17:7e:21:1e:ef:57:9a:d7:f6:71:1e:db:68:
                    f0:32:47:a2:ed:76:d2:ca:18:37:bd:dc:5c:8d:36:
                    31:3f:a3:70:1a:b1:00:4c:bb:2e:8b:6e:af:f5:f9:
                    c7:72:5e:01:05:d2:5d:1d:02:b1:e3:22:da:0b:fa:
                    cf:13:ab:9b:ef:be:ae:6d:01:dd:c9:29:d7:9b:cd:
                    33:93:be:12:40:5f:d5:1d:e6:d9:3b:2b:48:ea:4e:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:67:34:6D:19:11:6F:E0:E5:48:E1:86:5C:80:17:3F:14:72:6F:E9
            X509v3 Authority Key Identifier:
                keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:be:34:4a:1b:35:e7:f6:e6:e1:91:3d:01:62:e7:26:d2:
         5b:62:36:82:50:f8:f7:30:7c:16:fb:5a:6f:6d:3d:31:b7:8d:
         1e:77:2f:e4:3b:18:8a:9b:89:ea:1f:81:b1:e9:bd:33:61:27:
         91:41:58:42:c0:f9:e6:0b:9b:b2:f6:d6:08:fb:c1:74:6f:3d:
         23:90:9b:7c:b0:1f:73:0b:22:99:44:3c:a8:10:a0:bd:7d:74:
         8a:4d:37:0f:5e:be:30:49:10:d7:7e:b9:20:a1:2b:ce:2e:9e:
         32:7e:91:6b:0a:cd:3d:2d:06:83:6f:10:80:9a:d0:d7:68:ca:
         a4:a4:d3:00:d0:16:10:3e:b3:b2:de:01:ca:2e:cf:12:47:54:
         02:bb:6f:d7:1f:bc:a8:e6:05:fd:df:09:ef:90:99:54:22:a2:
         0d:e9:ec:93:f6:ce:bf:58:56:a5:42:89:06:03:f0:01:ba:b4:
         c0:8a:45:5d:57:8c:6e:3b:24:00:96:8a:86:0d:63:3f:31:49:
         53:95:1c:1d:08:23:1f:ef:b5:62:71:06:fa:83:36:53:df:6f:
         1f:63:f9:b1:07:5b:74:57:9c:ee:64:fb:49:14:12:60:31:28:
         d6:7c:e5:98:b0:07:17:81:03:b4:97:f1:1b:77:27:05:d6:a4:
         5d:48:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:08 2024 by rpki-client on console-ams.rpki-client.org