Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
File:                     vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json)
Hash identifier:          8y9LfOeFhVDUu+cgL5QnfG6CIwN9+cZB8+sk5G8KHw4=
Subject key identifier:   11:73:CE:88:17:6D:0A:1D:6B:4D:C7:B8:00:54:5C:51:B8:D2:CC:8E
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Certificate issuer:       /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial:       0194BA84562E04EB0CC2BA8A075882B41096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
Manifest number:          100B
Signing time:             Fri 31 Jan 2025 04:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:22 +0000
Files and hashes:         1: dN-uhf4yHU1KWIuxr4O44km4Ib0.roa (hash: erjr+nwKgTpJdhI7Z4IWA4jUyQt8GWT0g5Kuu0xltYE=)
                          2: djt1wnEeMWCGixI9JNMPiTXrt7U.roa (hash: fvje1Lm8IIK5mAd7uOyfo0YMgHNd5fDXDiGQLx1jFzE=)
                          3: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (hash: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=)
                          4: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: pVV8gAjdCdkd8h8wbNbon9GDLVmCj3A+vGTt3pumqxg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:56:2e:04:eb:0c:c2:ba:8a:07:58:82:b4:10:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde75079618691bae1f47bcbed52314496963891
        Validity
            Not Before: Jan 31 04:00:22 2025 GMT
            Not After : Feb  1 04:00:22 2025 GMT
        Subject: CN=1173ce88176d0a1d6b4dc7b800545c51b8d2cc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:d9:a6:36:ab:66:02:e9:83:b4:71:10:14:
                    b0:5c:7d:b2:21:f2:f9:1b:93:6c:49:61:8c:75:81:
                    19:e3:89:f1:01:dd:46:d1:51:d2:87:0b:ce:b0:6e:
                    75:34:69:48:4e:c4:2c:08:42:97:d7:3e:28:5f:ae:
                    65:4c:bb:0a:8d:c0:5f:35:8a:fd:b9:04:4f:47:1d:
                    64:a2:2e:b7:58:14:c0:f3:07:f0:26:f3:7b:c4:96:
                    54:c4:a4:10:7a:7d:1e:18:20:ea:59:6c:56:3c:3f:
                    95:7b:cf:f7:87:30:30:96:86:42:dd:5d:12:9b:0c:
                    9a:be:31:fa:fa:8f:6d:1b:77:05:0c:91:2d:04:a9:
                    e6:81:62:87:a1:f4:49:bb:04:2d:71:78:64:3c:b6:
                    da:cc:9c:5c:b5:f0:27:bd:69:f3:fd:6b:3c:7a:c1:
                    e9:36:5a:25:5b:9e:57:09:c7:b9:28:a7:51:96:5f:
                    14:8a:4a:ca:da:89:4e:9d:7e:fa:95:1b:89:a2:70:
                    3a:ce:9a:d1:dc:0b:7b:3c:e4:7d:ab:25:ef:ed:c0:
                    4e:5c:35:d3:a6:e9:86:16:fe:77:63:5f:08:12:10:
                    75:29:c2:84:9e:3c:e5:25:7e:05:b1:22:02:1f:ba:
                    af:99:99:32:8f:fc:c0:03:7f:ae:cb:e2:52:e3:f4:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:73:CE:88:17:6D:0A:1D:6B:4D:C7:B8:00:54:5C:51:B8:D2:CC:8E
            X509v3 Authority Key Identifier:
                keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:26:f7:15:2c:68:48:68:cf:ac:28:07:8a:f7:09:40:95:fc:
         1c:d1:09:22:be:0c:68:b6:e0:04:be:5d:a5:2d:32:b0:1f:8e:
         f3:44:fe:8f:e8:33:ec:af:70:ad:fe:c0:ec:b3:bc:af:ec:c0:
         f1:05:b7:51:32:8a:8c:03:12:49:2f:8e:ff:61:a8:85:8a:c2:
         0a:2f:77:ca:6e:0a:87:ef:20:0e:c8:0c:f5:53:21:db:fd:01:
         12:14:dd:55:a1:21:0b:4d:2b:dc:8f:69:c8:8f:17:41:12:ed:
         96:0f:fe:48:4f:c0:81:ff:a9:5f:a6:12:a1:ac:72:e2:16:c0:
         18:ba:ab:04:ec:aa:46:f9:b4:b2:87:bd:bd:66:3a:db:c0:1f:
         53:46:20:90:09:b0:6b:27:aa:fa:4e:9d:37:fa:f5:7a:3c:5a:
         5a:df:32:84:77:aa:f4:21:7e:54:5c:da:56:e5:74:32:ce:0e:
         28:c1:66:a5:44:00:70:16:3a:09:cf:1c:b5:f4:30:79:77:c7:
         cd:5c:34:0d:6e:f2:d8:23:8a:a0:c4:9b:67:e4:72:55:3c:12:
         dc:85:55:88:0f:c6:54:2a:51:cd:ca:f8:c4:68:a1:8f:5b:5b:
         84:1f:92:82:ca:e7:b8:60:b6:6e:d4:a8:51:2f:26:bc:68:c0:
         53:f9:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:28 2025 by rpki-client on console-fra.rpki-client.org