Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/92bb6e-ef96-49d2-ae2d-15df8f8c6d28/1/VAklBRPOG7KAEp4ny35wRxji5r8.mft
File:                     VAklBRPOG7KAEp4ny35wRxji5r8.mft (raw, json)
Hash identifier:          8VyOQM7PL/Ehu15mqkuRcn2YrG3CJA6PRuIODxzf6Mg=
Subject key identifier:   A4:5C:C2:0D:3D:4C:3D:31:F7:60:5E:74:65:DC:FE:D1:F2:1D:A2:03
Authority key identifier: 54:09:25:05:13:CE:1B:B2:80:12:9E:27:CB:7E:70:47:18:E2:E6:BF
Certificate issuer:       /CN=5409250513ce1bb280129e27cb7e704718e2e6bf
Certificate serial:       01901BFCA28BF2D795A3C6CB0B503D61657E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAklBRPOG7KAEp4ny35wRxji5r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/92bb6e-ef96-49d2-ae2d-15df8f8c6d28/1/VAklBRPOG7KAEp4ny35wRxji5r8.mft
Manifest number:          09B5
Signing time:             Sat 15 Jun 2024 13:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:59 +0000
Files and hashes:         1: VAklBRPOG7KAEp4ny35wRxji5r8.crl (hash: CjhfpjdwbNND/o4RJJOxzK9x0JVJUzqKlFC4N6rDWBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/92bb6e-ef96-49d2-ae2d-15df8f8c6d28/1/VAklBRPOG7KAEp4ny35wRxji5r8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/92bb6e-ef96-49d2-ae2d-15df8f8c6d28/1/VAklBRPOG7KAEp4ny35wRxji5r8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAklBRPOG7KAEp4ny35wRxji5r8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:a2:8b:f2:d7:95:a3:c6:cb:0b:50:3d:61:65:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5409250513ce1bb280129e27cb7e704718e2e6bf
        Validity
            Not Before: Jun 15 13:00:59 2024 GMT
            Not After : Jun 16 13:00:59 2024 GMT
        Subject: CN=a45cc20d3d4c3d31f7605e7465dcfed1f21da203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:ea:5b:1f:fc:87:c5:57:51:f7:1f:0e:4f:
                    7a:05:73:09:65:c2:5c:36:b4:10:d1:ed:34:c1:ab:
                    3e:96:f5:4a:38:0d:6f:43:1f:f6:5b:34:76:dc:26:
                    04:f2:97:ec:a6:1b:4a:5d:4f:39:74:61:8f:54:7b:
                    08:38:d9:52:5c:99:00:0f:e8:48:06:68:ad:49:5e:
                    ca:d4:2c:db:82:73:b8:79:d6:37:f7:45:08:67:99:
                    23:d0:31:24:fe:34:b0:bc:15:ca:7b:5c:e3:5e:a5:
                    e9:d0:73:fd:47:ba:2b:62:c9:da:5b:b5:44:6e:fc:
                    12:57:23:30:6d:c0:df:2d:3a:ba:53:60:34:fb:1a:
                    25:af:6f:da:4a:59:3d:0a:8a:5a:95:b1:0c:b2:52:
                    56:ab:88:8e:fa:62:53:2c:34:00:f6:00:9c:38:12:
                    32:75:54:7a:b2:73:fd:ce:a1:d3:ad:bf:97:77:43:
                    26:38:38:77:c7:76:64:33:ec:a7:e8:a6:d8:0f:2f:
                    ec:7f:a0:13:45:2a:bc:99:cb:c7:90:f8:00:71:34:
                    86:f6:29:c8:69:c9:da:fe:37:c7:6a:2c:75:98:63:
                    9f:2d:e6:07:d6:77:6d:15:01:17:47:79:9c:39:9a:
                    57:87:9a:17:5a:5a:7b:38:3b:94:d8:3b:47:2f:52:
                    b7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5C:C2:0D:3D:4C:3D:31:F7:60:5E:74:65:DC:FE:D1:F2:1D:A2:03
            X509v3 Authority Key Identifier:
                keyid:54:09:25:05:13:CE:1B:B2:80:12:9E:27:CB:7E:70:47:18:E2:E6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAklBRPOG7KAEp4ny35wRxji5r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/92bb6e-ef96-49d2-ae2d-15df8f8c6d28/1/VAklBRPOG7KAEp4ny35wRxji5r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/92bb6e-ef96-49d2-ae2d-15df8f8c6d28/1/VAklBRPOG7KAEp4ny35wRxji5r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:48:6e:41:0d:a4:58:5e:79:c6:e8:23:50:12:b8:c7:61:
         73:79:3e:0a:5c:06:b9:2d:f4:a8:45:e3:4e:61:00:db:96:ed:
         16:9e:6c:e4:59:3d:d5:f1:4e:cc:c3:a9:3f:b6:b2:6f:4e:6b:
         b6:1b:de:a5:3a:2a:cd:8b:26:18:53:e2:3e:aa:8f:5e:d4:e0:
         55:0e:15:0d:5d:a9:a8:23:05:7c:34:d0:2f:ad:6c:68:ee:40:
         9d:b5:8f:ef:d9:bd:2f:9d:0d:d4:64:11:74:02:fe:52:05:56:
         af:cc:9e:9f:b1:03:b1:06:1e:f2:1b:9e:f3:6d:91:36:88:26:
         f5:8e:fc:66:df:6b:e8:ca:63:68:44:37:a5:8f:10:1f:b1:77:
         27:f4:3f:9e:39:fc:28:aa:c2:38:82:b4:8c:d6:2f:5a:b9:87:
         25:93:c6:16:9a:8a:a9:a4:24:02:66:78:91:09:d9:5c:8a:72:
         7d:e9:4a:9d:81:eb:27:d8:77:7a:2b:db:d0:5b:a9:b0:f6:03:
         24:5d:a8:c0:7a:bc:bc:c3:87:9c:d6:f7:eb:a5:80:58:e1:ae:
         96:bb:a2:f1:41:4b:a2:c9:30:68:9f:ba:b0:ac:58:70:86:d6:
         2f:e8:4b:f0:df:7b:57:b6:60:ad:05:99:bd:d0:a8:6f:1c:5a:
         4a:88:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:00:46 2024 by rpki-client on console-ams.rpki-client.org