Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
File:                     Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft (raw, json)
Hash identifier:          ClS4PdthZUjsf5egGjgTTdmLbNugBlooT/3TRMLYuK0=
Subject key identifier:   21:BF:C4:63:7F:7B:DE:E6:24:C2:00:EA:27:7C:9D:FA:9F:2B:D1:D5
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Certificate issuer:       /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial:       018F5AE00E75AC0579DBC39BB7F58C7D9EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
Manifest number:          0AF9
Signing time:             Thu 09 May 2024 01:03:04 +0000
Manifest this update:     Thu 09 May 2024 01:03:04 +0000
Manifest next update:     Fri 10 May 2024 01:03:04 +0000
Files and hashes:         1: 2AVRiS3rOwsYRF57cQ7keqkjs-Y.roa (hash: OidiwvJpgKTsIoeKm8H8+kWSSSNeGT5XEbGJm0fmEk4=)
                          2: EBWFT3MB-2Xoxm7s-cJ1ZJa4jZA.roa (hash: LC35+s8HFbeeWD/FhX9dR0h6DPT6SkgZpMLRrHHSrD0=)
                          3: Oi-zH-FPQDI0KJLwJdrz5wCvV30.roa (hash: cF+KEGxD+vBbcZSTRCKN/5SJEfiq6hRIRW1g4YlLlVA=)
                          4: Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl (hash: R9tI/Zm2OVdw7DtzQ9uRdaYjHvAgHUksTqVzduIh1zc=)
                          5: lj_jHbrE0IgEDnMhVdTVAx4W8Ws.roa (hash: sGQtq34Iz7l1fGfwGN7GFuMyTKxIo8hP2kmwiaChaxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:e0:0e:75:ac:05:79:db:c3:9b:b7:f5:8c:7d:9e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
        Validity
            Not Before: May  9 01:03:04 2024 GMT
            Not After : May 10 01:03:04 2024 GMT
        Subject: CN=21bfc4637f7bdee624c200ea277c9dfa9f2bd1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:65:41:a8:e3:21:2a:88:7c:a5:9d:73:6f:
                    b4:28:6a:cd:b8:30:43:d6:b6:ea:a3:f4:43:46:39:
                    65:37:db:91:3d:c7:c6:74:3f:18:7d:e4:4d:13:df:
                    72:5d:07:00:0d:01:6f:83:40:38:0f:bf:c9:9a:b8:
                    79:3d:e4:9b:03:41:41:38:ca:bb:0a:b2:24:c6:d0:
                    f9:10:9d:81:1f:bd:3e:e9:1c:a8:0f:bf:89:2f:60:
                    73:3a:e2:8d:47:0c:25:c3:9e:71:cc:e6:b9:5b:9f:
                    d0:c8:99:c1:53:ed:f1:14:7f:b7:73:8c:c6:46:95:
                    8e:b6:55:9d:c6:e4:50:21:93:96:00:d1:47:eb:08:
                    cd:6b:14:b9:59:ce:5b:56:56:f2:b9:5e:66:4c:b5:
                    28:20:56:2a:ee:20:6b:59:ca:a4:a9:dc:cd:b7:8d:
                    32:e8:13:57:3b:66:79:26:3e:28:f1:20:7f:40:10:
                    36:0a:4b:6a:1f:25:19:7f:94:89:dd:cc:7c:13:13:
                    ef:c3:e9:f4:85:37:0b:9d:02:1d:cd:c7:b3:e9:ae:
                    d5:37:29:54:41:8f:aa:50:12:ee:26:03:34:ab:74:
                    c6:03:62:ef:dd:8d:7d:1a:a7:77:a7:be:02:71:63:
                    39:d2:a5:db:b9:99:2e:6f:50:c4:9f:0c:87:ad:8a:
                    08:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BF:C4:63:7F:7B:DE:E6:24:C2:00:EA:27:7C:9D:FA:9F:2B:D1:D5
            X509v3 Authority Key Identifier:
                keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:20:de:5b:07:ea:1b:96:db:1c:ca:d3:19:20:da:c1:1b:
         1b:9b:88:3a:31:b8:d8:d7:12:b4:93:96:10:29:97:2a:42:e9:
         9f:27:f3:b4:9a:31:b1:a4:ec:5e:df:b7:b6:04:9a:3a:9b:30:
         e7:59:07:92:9f:04:62:8b:37:a1:c0:15:b6:01:67:28:56:0d:
         db:66:c7:e7:03:23:33:cd:d5:62:0c:fc:70:b1:0c:7e:12:fd:
         d9:5f:05:01:9d:d3:bd:aa:e2:a7:a5:7b:13:12:70:ac:ad:77:
         6d:7c:9c:84:ab:92:a8:22:90:51:34:9f:e9:06:95:36:08:8c:
         d0:5f:16:35:f3:b7:62:91:f3:a5:28:f6:7d:bc:c8:8e:fe:57:
         41:c0:df:f4:a3:b2:9b:6c:c8:83:ba:e6:d3:56:d1:45:a1:f0:
         f0:29:51:15:c0:e6:c7:95:0f:ed:bb:f4:0b:47:82:fe:69:a2:
         52:bd:3b:8b:76:ce:71:be:01:2f:3a:96:36:6d:cf:21:8e:e9:
         43:80:27:23:c9:6f:c9:3d:49:f1:9f:fb:82:9a:3a:e9:3a:3b:
         4e:ff:eb:31:a3:ed:cc:83:da:94:ff:83:9f:a3:ad:5b:42:d1:
         1d:90:b2:f3:4a:13:fb:57:ee:0b:29:59:5f:2f:bf:c1:9c:41:
         d0:73:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 02:26:53 2024 by rpki-client on console-fra.rpki-client.org