Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
File:                     VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft (raw, json)
Hash identifier:          FHmFGe/gw/ay6VamcbZ1RsIEF7utL0Ts/ObyXcVvlxM=
Subject key identifier:   31:5A:61:CB:25:46:82:91:3A:1F:F6:86:EF:7B:67:46:B0:6A:91:66
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Certificate issuer:       /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial:       01903AE38FBB6BF01EF1FD62C656309066C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
Manifest number:          10C3
Signing time:             Fri 21 Jun 2024 13:01:50 +0000
Manifest this update:     Fri 21 Jun 2024 13:01:50 +0000
Manifest next update:     Sat 22 Jun 2024 13:01:50 +0000
Files and hashes:         1: VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl (hash: sGViJFzfvQOm5nnqe/w5xBe/iOq3laL1OXuUg8RvAAs=)
                          2: sxEh9CHK20m_JZ--Tiv-q8Wab2A.roa (hash: uDtluRyJ/A8BkqQbyzMN0ub/Rz2C7WOHTU0QXnSdjSM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:8f:bb:6b:f0:1e:f1:fd:62:c6:56:30:90:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
        Validity
            Not Before: Jun 21 13:01:50 2024 GMT
            Not After : Jun 22 13:01:50 2024 GMT
        Subject: CN=315a61cb254682913a1ff686ef7b6746b06a9166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:02:8d:50:2c:c7:5d:3d:9e:5b:80:cd:ae:
                    16:30:b7:8d:67:bd:1c:eb:a7:15:40:4f:0e:4b:cb:
                    cf:59:e8:7a:96:82:10:12:71:6e:80:97:87:eb:22:
                    f3:4a:dc:f5:4b:4f:16:67:7a:93:83:77:56:20:5e:
                    45:ad:37:7a:9d:d8:dc:14:f8:0b:68:ff:46:5c:4b:
                    54:4d:96:b1:43:8d:9c:68:be:58:de:e7:16:f6:7f:
                    d0:3c:10:ae:e2:23:e0:58:f9:32:d1:0a:33:21:54:
                    01:7c:c5:fc:ce:ba:f9:fb:47:0b:cc:33:9c:ec:a6:
                    c0:ae:80:3d:e0:ca:1a:e0:fe:33:42:9a:d2:b1:09:
                    29:c2:b8:64:cd:8e:39:6b:43:5f:c1:e2:65:01:fa:
                    28:00:72:e6:42:48:4d:aa:1f:2d:b9:88:97:53:07:
                    89:58:5d:32:6f:ff:e0:15:13:66:a8:ea:f6:73:2d:
                    e4:b6:3e:8b:73:38:b6:2e:d8:0f:22:6b:aa:bb:e6:
                    e9:2c:d8:ed:ae:cd:a4:91:af:37:2f:bb:9d:db:ff:
                    92:2a:79:24:0e:cc:db:8a:1b:6f:63:60:0a:eb:c3:
                    02:9b:41:08:56:46:fe:47:80:b8:b7:4e:69:dd:9f:
                    69:2b:91:1c:36:78:d1:4d:d2:f4:ee:d6:cd:2c:29:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5A:61:CB:25:46:82:91:3A:1F:F6:86:EF:7B:67:46:B0:6A:91:66
            X509v3 Authority Key Identifier:
                keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:87:89:0b:f8:9e:43:6b:f8:e0:94:cb:1f:62:70:c5:96:
         b4:ce:fe:e8:26:9a:b6:44:a7:eb:ce:b4:6d:a1:d8:27:ae:0f:
         e8:de:b9:6b:85:5b:bc:3b:aa:40:e2:51:10:5f:40:81:a2:7e:
         63:8a:b0:35:bf:b2:55:e6:fb:60:9a:75:68:e1:8e:8e:3c:15:
         71:04:91:99:00:2c:64:4d:4a:fa:85:44:82:48:f1:fd:c1:fb:
         e1:e1:d1:ff:c8:0a:99:1f:ca:1f:48:98:63:5b:64:40:c3:75:
         8f:14:2a:3e:09:67:5b:b0:e5:d5:a0:1e:66:36:15:ab:0d:c4:
         bc:7f:3e:12:68:1c:c8:d0:0c:ba:6d:b8:b9:a5:a0:d0:55:ad:
         88:1a:56:e8:2c:3a:a4:c4:76:35:df:c1:40:71:89:4b:c1:73:
         dd:ae:36:5c:ed:1a:d9:aa:c9:e3:86:3d:0b:f3:dd:9c:af:c0:
         42:46:e8:8e:eb:81:59:02:ac:98:90:4d:cb:5e:48:6e:5d:19:
         8a:9e:13:f9:0f:74:33:f4:4d:5e:e0:84:03:49:48:c8:b2:a7:
         40:7e:33:44:c4:00:cc:89:69:33:ab:7b:d4:a3:b1:89:2d:e6:
         c6:73:da:d0:ef:cd:17:43:af:c4:94:57:bb:7a:c8:ee:ec:91:
         f1:69:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:55:54 2024 by rpki-client on console-ams.rpki-client.org