Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier:          HdocKg6BKrV2zoyVReB1Mi0m24mPSer++RvVjvMwJro=
Subject key identifier:   28:02:91:13:85:CA:AE:9C:D2:9B:20:B5:B5:F2:2F:EB:44:F9:50:08
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer:       /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial:       01901DEC4979CA3CD9AD1086141757DE7D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number:          0126
Signing time:             Sat 15 Jun 2024 22:02:22 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:22 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:22 +0000
Files and hashes:         1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: JlFrGAzpxy2JGpf0L88/hYXKXvBmvLxBHCUV1rjkZcI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:49:79:ca:3c:d9:ad:10:86:14:17:57:de:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Validity
            Not Before: Jun 15 22:02:22 2024 GMT
            Not After : Jun 16 22:02:22 2024 GMT
        Subject: CN=2802911385caae9cd29b20b5b5f22feb44f95008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5e:02:26:a2:4e:66:89:90:bb:99:f0:72:7a:
                    22:3b:be:56:1b:74:04:a9:87:ec:77:4e:73:96:70:
                    8e:68:b5:df:e1:99:ce:51:c2:ec:e4:89:ca:f3:7d:
                    f0:ae:33:23:ab:9b:59:8e:68:75:6f:fe:b0:9e:73:
                    fb:57:ac:79:a2:1b:e6:97:b5:16:52:07:df:79:aa:
                    74:09:0a:4c:85:6e:6d:a7:82:e1:44:c5:cf:bf:25:
                    2e:48:9e:39:f7:64:42:e9:4f:1a:96:df:ee:5e:e0:
                    6d:50:c9:72:2b:af:ed:48:66:c4:cb:a7:03:9a:71:
                    e2:46:c4:da:17:ff:7b:8d:8a:67:a6:79:7c:39:8e:
                    bf:04:06:5c:f9:ed:cc:c9:75:72:14:b6:54:22:f0:
                    49:ea:5b:9e:a8:96:e2:77:f8:4c:6e:fc:43:85:ad:
                    d7:77:f6:12:07:3f:27:d4:d3:95:12:e0:29:7a:25:
                    9a:19:d5:1f:f2:b8:e4:97:a8:69:ab:3e:5f:61:4a:
                    29:91:1f:54:5f:1a:5c:29:a3:b7:7d:12:8e:2d:27:
                    f2:9c:ba:f0:44:bc:56:1f:19:c4:e1:2e:fb:11:58:
                    a2:30:f8:7b:a0:22:bb:66:e3:cd:2d:7c:a9:d7:99:
                    b3:1d:40:91:2a:b0:d2:15:83:c1:cc:1d:f3:0d:18:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:02:91:13:85:CA:AE:9C:D2:9B:20:B5:B5:F2:2F:EB:44:F9:50:08
            X509v3 Authority Key Identifier:
                keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:51:28:e0:b5:70:95:a4:29:26:bc:0c:46:46:66:ec:f7:
         d4:bf:a2:e3:e0:b0:48:da:d6:1d:be:4d:10:bd:52:9f:ee:d1:
         df:eb:78:04:91:7a:43:09:fc:35:ce:8d:c4:d2:62:d9:20:82:
         32:70:bb:f2:c9:82:bb:80:10:bd:ed:6b:03:6d:94:a0:af:b2:
         95:95:d9:9c:39:cf:d8:f2:c9:11:74:2e:d3:0c:5e:df:b7:01:
         1b:16:12:72:d3:1f:96:e4:28:23:04:16:df:7f:22:9c:cd:8a:
         e2:60:5a:d0:65:b4:e9:06:8f:c2:75:66:fe:b8:71:c4:f7:97:
         b5:af:56:cf:53:e9:ae:c8:d8:da:33:a0:fc:4e:dc:a3:c1:d1:
         15:ac:04:85:4c:42:16:c1:d6:39:a6:11:a0:64:e6:ba:9a:f7:
         08:15:f5:c6:92:79:da:a0:e9:19:54:2d:2b:45:2a:a2:89:3c:
         f5:62:4a:ff:2f:13:bd:61:e1:ed:c8:a3:3a:30:cf:2c:de:4f:
         51:1c:01:27:e4:b9:21:e4:14:37:1e:cc:8b:30:a3:e2:c6:a0:
         b4:57:e3:f1:fd:7b:59:f8:50:97:d7:20:8c:43:03:07:45:ce:
         ce:fe:26:fa:2b:46:1b:ce:6a:51:50:c4:cd:1a:d0:b5:ff:f7:
         15:97:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:07 2024 by rpki-client on console-ams.rpki-client.org