Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          RhQTuoauEekdKpsag8hS8FnDYQffxi21DTvLlauitXo=
Subject key identifier:   9F:F8:F8:A6:6C:E9:01:E4:52:1A:18:5B:45:E6:71:40:EE:78:34:7A
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       0190335FD5873A0492E60FCE639DB4A27F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          89
Signing time:             Thu 20 Jun 2024 02:00:36 +0000
Manifest this update:     Thu 20 Jun 2024 02:00:36 +0000
Manifest next update:     Fri 21 Jun 2024 02:00:36 +0000
Files and hashes:         1: JlhRl0uLppmmLALr-hlGhPQ06ws.roa (hash: qemfp1EDPxHNZUgskMQMESooUQzg2M+K/canaQ0Gj3Y=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: ILI1K29ZMBoi+ieXzn0+zcdGOlPxfgrpdIpGja9bTe0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:5f:d5:87:3a:04:92:e6:0f:ce:63:9d:b4:a2:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Jun 20 02:00:36 2024 GMT
            Not After : Jun 21 02:00:36 2024 GMT
        Subject: CN=9ff8f8a66ce901e4521a185b45e67140ee78347a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:24:8b:93:4a:4c:ab:60:2a:91:c9:03:a1:
                    2b:24:86:bb:4a:7c:af:cb:af:37:df:86:6c:dc:ac:
                    05:e0:c8:48:4b:38:1f:01:c2:e1:5b:38:14:4a:31:
                    d5:14:c5:01:05:e4:ca:c9:bc:ab:fa:3a:ad:1e:30:
                    8c:22:dd:08:7c:e9:bc:e6:93:ba:9a:58:30:62:f5:
                    40:50:01:f6:9b:27:27:1b:c6:c5:8e:b3:fc:94:9a:
                    d5:b3:00:9b:76:70:b1:aa:47:11:88:d1:9c:6b:3f:
                    01:5a:4c:61:74:04:0b:03:2a:e7:ec:43:e6:26:a9:
                    e6:cf:68:3c:6d:50:97:01:60:bf:7a:76:dd:07:17:
                    7c:26:f1:17:8b:9c:dc:62:8a:f0:f0:4f:2e:99:be:
                    4e:6a:bc:bd:dd:3a:d2:a2:96:97:57:48:b6:a9:b1:
                    d5:d2:24:ad:79:8d:08:20:b2:ca:3f:13:5c:a3:ee:
                    03:03:ad:03:0e:ab:80:89:f8:55:c0:14:87:91:fc:
                    b3:40:2f:af:8b:e0:6d:8e:cc:2e:c9:64:38:28:d4:
                    25:31:f7:ca:60:62:b7:1a:7d:29:ce:d9:82:33:ee:
                    c7:2c:b1:ff:6a:49:03:9e:72:1b:5e:39:55:93:1b:
                    e8:d6:90:6d:18:ca:e6:0d:67:07:76:14:3c:52:59:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F8:F8:A6:6C:E9:01:E4:52:1A:18:5B:45:E6:71:40:EE:78:34:7A
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:26:f6:68:2e:6f:d8:f6:72:2a:14:72:7c:69:73:ad:37:
         09:dc:b8:11:2d:3b:52:f5:5d:cf:75:cc:98:81:48:fa:fe:10:
         fd:2a:e7:d1:7a:48:74:9e:b8:90:b0:73:93:e9:b2:ca:31:b8:
         7a:72:8a:6e:90:6a:3d:ba:ca:aa:94:3b:02:b6:ff:06:a5:24:
         45:c1:fe:42:ec:30:92:f2:be:10:53:52:f4:22:d6:91:d1:e7:
         79:e8:1f:48:41:98:6c:97:fb:71:21:11:56:dc:39:43:c2:0f:
         31:82:a7:7c:a9:5d:b3:bd:9d:51:f6:60:2d:80:7c:be:94:bd:
         57:8e:2f:78:10:14:3e:58:ac:8e:c3:f0:c0:82:16:b3:10:89:
         ab:f7:2b:c9:f0:30:13:8f:1e:28:be:38:77:7a:4a:bb:df:67:
         4a:f2:47:5e:2f:79:7e:44:b6:c4:6e:b3:a4:e3:2f:a7:2a:ec:
         98:ff:34:97:00:fb:d3:de:aa:df:60:cf:6c:d8:f0:08:b6:38:
         3e:6e:1b:86:dc:6b:4a:d9:f7:30:58:95:18:f7:74:5c:c2:d7:
         84:6f:52:79:f3:17:37:9d:69:d4:5d:a2:a2:07:12:31:43:3e:
         b1:f2:b2:94:60:15:e6:67:81:44:e0:b7:5a:68:e1:8b:e6:77:
         77:8f:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:46:15 2024 by rpki-client on console-ams.rpki-client.org