Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File:                     VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier:          haJT6IAvqeDXrDDeg2byCVDdr88ctCM/2E4S28/TJtM=
Subject key identifier:   54:CC:BA:3A:12:EF:C7:BF:12:14:B7:ED:7A:8E:7E:B8:AD:77:1E:15
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer:       /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial:       0194BA84552C5467D4FB1E29707B59DC23E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number:          0570
Signing time:             Fri 31 Jan 2025 04:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:22 +0000
Files and hashes:         1: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: l2GLCJnc3csfIu8U/R2dhw8aUj1wv8cxmeXw1WHYwqQ=)
                          2: ZgXd4-iRm-6EfiiRbptDsH9YV00.roa (hash: IdlINd8LGSye4C+J8uo8raNO879fzxKpQdAtnUj3Zr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:55:2c:54:67:d4:fb:1e:29:70:7b:59:dc:23:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
        Validity
            Not Before: Jan 31 04:00:22 2025 GMT
            Not After : Feb  1 04:00:22 2025 GMT
        Subject: CN=54ccba3a12efc7bf1214b7ed7a8e7eb8ad771e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:cb:f1:2e:7a:bb:bd:c8:af:5f:06:75:53:
                    5a:c2:c4:f3:fd:0b:1a:f0:d4:a0:fb:b8:14:3f:19:
                    12:f6:aa:e5:9e:55:e9:d6:ee:41:9b:72:e7:a6:54:
                    25:9e:2f:36:63:9d:26:33:39:ef:48:e7:bf:11:a9:
                    4a:40:63:3f:0b:b9:96:41:dd:54:91:11:3b:1d:a4:
                    74:94:c8:86:e5:18:7f:47:a6:7c:9f:49:61:66:59:
                    2f:59:14:ed:c6:5f:84:8e:64:43:fd:cb:96:49:e9:
                    dc:ec:40:10:97:e4:7d:ad:6e:2a:2c:b1:20:76:82:
                    bf:30:f7:0d:92:e3:b7:f4:31:ea:eb:e7:1e:e6:d5:
                    11:87:81:cf:76:a5:7c:ef:51:ad:db:48:2e:cc:69:
                    4b:f5:f8:e1:26:80:16:db:a7:a8:7f:9e:26:27:f1:
                    7f:1f:51:03:82:92:15:d8:a6:59:c7:56:77:ca:28:
                    43:38:46:22:f1:fa:79:b7:95:5b:a7:9c:5b:b6:85:
                    26:d7:0e:3e:0b:1b:f2:dd:98:3b:74:43:5a:fa:e2:
                    d0:da:36:27:e2:b0:7f:d8:76:9c:5e:fb:6e:13:1b:
                    1b:d8:1a:40:ba:ee:ea:d2:a2:f0:38:24:17:10:48:
                    6a:15:27:da:1a:91:85:e8:a0:d6:2d:c1:c7:cb:ca:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:BA:3A:12:EF:C7:BF:12:14:B7:ED:7A:8E:7E:B8:AD:77:1E:15
            X509v3 Authority Key Identifier:
                keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:8f:18:74:b9:c3:a6:f8:e4:b7:53:2e:7e:89:d1:c4:b3:
         ce:d4:41:07:b1:f9:78:6c:71:b6:5f:16:77:b2:e9:df:72:60:
         a3:68:19:39:54:8d:95:ee:a0:1b:1f:8a:a3:0a:38:13:f7:ee:
         31:7b:4a:08:5f:a5:20:9e:91:4c:08:35:5e:50:61:0c:54:88:
         29:93:d0:b6:3c:32:68:79:57:d1:9e:79:8c:6d:55:92:2a:15:
         68:f1:fd:75:51:a6:d2:53:a6:10:e5:69:80:72:ac:12:35:96:
         54:17:30:e7:28:21:1f:1e:4e:b5:6b:84:de:b9:d4:f0:1a:2c:
         d5:43:28:78:4f:e9:95:7d:4a:7f:0b:02:5c:80:26:eb:7c:f7:
         cf:66:bf:59:a4:6c:66:f5:e0:a7:0b:34:cb:b5:26:ee:d7:b5:
         47:fe:24:93:e7:54:91:56:e8:10:56:65:25:5d:d7:e8:49:8f:
         ab:83:45:20:77:74:b4:06:2c:17:48:f2:96:26:d0:1a:24:a6:
         bb:11:3b:94:f5:ae:37:b1:69:f6:9a:b1:38:56:ba:6a:a4:fc:
         21:66:b5:c1:ec:fc:36:7b:05:d0:fa:f5:dc:c7:45:f2:74:a6:
         50:f5:58:f1:f9:e5:c6:85:23:37:17:32:e7:e6:f1:7c:2a:b4:
         1a:3e:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:21 2025 by rpki-client on console-fra.rpki-client.org