Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File:                     VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier:          f92xM0+yxelh8FLa7iG0seegm8StZCL27zjAmL1v0fE=
Subject key identifier:   D2:37:1B:9A:26:93:47:50:49:B3:53:C8:4D:91:B4:67:39:70:71:ED
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer:       /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial:       01901DEC549EA0B340F69D54DD06C6E096D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:25 +0000
Files and hashes:         1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: lh0x0OiLmx0CYXuCyPk02QbcppBnBnBodpttpMgoroU=)
                          2: xQqJbenqVEn3-3PBK_om6FEiaV8.roa (hash: HtNsq0GCr5Z71uEvAJX45waX3t/ZCJpuauEYwT7014A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:54:9e:a0:b3:40:f6:9d:54:dd:06:c6:e0:96:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
        Validity
            Not Before: Jun 15 22:02:25 2024 GMT
            Not After : Jun 16 22:02:25 2024 GMT
        Subject: CN=d2371b9a2693475049b353c84d91b467397071ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:ae:31:1f:87:42:ab:24:09:ab:a6:60:1f:
                    34:d3:28:c8:c9:52:ce:71:6c:6d:0a:90:2f:dd:9e:
                    27:20:dd:70:70:d6:a2:19:dc:c9:4c:ca:e5:32:be:
                    97:3c:e0:d0:da:0f:6d:ce:0e:91:fa:0c:d9:2d:05:
                    49:32:b4:ce:16:49:d6:9d:27:a9:df:aa:bc:08:5b:
                    bd:5e:f1:14:00:00:60:4a:cb:f2:eb:8d:fa:59:68:
                    0b:31:0d:e4:5f:73:bd:74:1a:2a:61:fa:a7:40:17:
                    5d:ce:97:12:f5:75:2a:89:0e:81:b3:41:29:2d:1b:
                    b1:4b:e0:28:4d:dc:f2:15:1d:5a:45:a1:0e:95:e1:
                    ec:58:97:af:b4:e4:56:19:61:17:50:2b:74:df:fc:
                    10:53:9b:b8:e1:8b:12:5e:1b:d3:55:f4:38:91:62:
                    4e:b8:66:10:da:8d:de:10:4d:7b:e6:8e:b7:ba:94:
                    f1:b9:e4:ef:1d:f2:55:21:03:90:34:18:e4:01:9e:
                    5a:df:f7:40:67:e7:c4:bc:5b:32:e1:18:6f:9b:72:
                    a8:00:87:a9:d0:72:f5:b5:68:c0:c2:89:f0:aa:37:
                    62:1a:8b:cc:ce:fd:1c:fb:63:6c:56:b6:30:b7:42:
                    64:6e:c1:f2:26:ed:c7:76:b4:7a:c5:d0:55:c3:98:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:1B:9A:26:93:47:50:49:B3:53:C8:4D:91:B4:67:39:70:71:ED
            X509v3 Authority Key Identifier:
                keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1f:d8:3e:64:01:aa:9c:7b:44:e1:98:2d:7c:07:3c:46:25:
         5f:14:af:bc:89:1a:44:75:ca:a9:5f:25:27:40:3c:06:75:dc:
         79:53:de:56:9d:4a:89:ed:fe:bd:67:da:2e:a1:21:4b:92:da:
         4d:79:15:b5:0c:1d:4f:b3:9f:14:12:ee:4a:e4:21:f6:82:4c:
         c0:b4:1d:11:72:83:a7:01:15:7b:7f:68:b0:1d:b5:fd:26:9d:
         58:53:0a:bb:52:2f:c5:f1:f6:00:25:1c:0a:60:5f:6f:88:61:
         dd:6b:74:6a:7d:d2:30:30:05:19:f8:03:34:e6:62:7b:a6:58:
         56:ac:ae:e4:5a:8c:59:e4:6e:53:bb:6d:f6:7e:32:48:40:ed:
         f4:db:bb:10:61:4a:2c:ad:66:43:47:06:72:7d:d7:2e:c4:8c:
         f1:d6:94:ab:43:23:10:f9:59:3e:48:e2:62:a3:ce:7a:c5:ce:
         ac:9c:9c:4a:d7:19:2b:41:d2:40:67:b4:92:c5:fe:0f:e1:37:
         0b:6d:70:4c:a6:63:8a:e5:77:c8:93:fd:ef:6a:03:ee:c1:8a:
         12:ba:25:50:ee:4a:81:da:b4:c8:fb:2b:4d:f9:6c:73:d8:1f:
         18:56:1c:9a:d4:e2:83:46:bf:af:7b:a0:b0:73:7a:d6:98:87:
         2a:fd:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:50:57 2024 by rpki-client on console-fra.rpki-client.org