Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
File:                     VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft (raw, json)
Hash identifier:          d7vDT16xKO+1aSTYP1Sd1Mh8e46mlS7q9NopBVk15LM=
Subject key identifier:   93:41:29:34:EB:CB:1D:90:DC:B1:3A:91:00:95:42:48:FA:1C:4D:7C
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Certificate issuer:       /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial:       01901BFC7B6A23252639CCCFFBFE0522F4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
Manifest number:          10B3
Signing time:             Sat 15 Jun 2024 13:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:49 +0000
Files and hashes:         1: VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl (hash: mpPZp8MCaA2H2t+A9D+cIZA8BcmQFV+6AdJ9o9Yrr38=)
                          2: sxEh9CHK20m_JZ--Tiv-q8Wab2A.roa (hash: uDtluRyJ/A8BkqQbyzMN0ub/Rz2C7WOHTU0QXnSdjSM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:7b:6a:23:25:26:39:cc:cf:fb:fe:05:22:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
        Validity
            Not Before: Jun 15 13:00:49 2024 GMT
            Not After : Jun 16 13:00:49 2024 GMT
        Subject: CN=93412934ebcb1d90dcb13a9100954248fa1c4d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ef:dc:02:10:ea:5f:f5:43:9a:3e:1b:3e:66:
                    dc:fe:94:91:c0:23:ef:6a:a3:78:fc:11:cb:c6:56:
                    d9:83:77:98:1e:a2:da:c0:4f:21:2c:41:b9:0d:5e:
                    1f:45:d2:f1:6c:d7:33:d6:33:31:46:68:f4:3d:ff:
                    ae:e5:ae:fa:d6:c2:25:74:02:04:d3:42:35:f1:1b:
                    76:84:6f:3a:6b:ac:db:8a:b4:2f:98:26:63:36:c8:
                    24:d7:3d:c7:1b:a9:35:22:2b:63:1f:68:cd:a1:84:
                    ca:be:ce:22:21:d5:0f:7d:5d:03:83:4d:95:47:09:
                    d3:7e:4d:e7:8c:f9:86:4c:2a:3c:8f:43:d9:1b:60:
                    81:28:79:64:b1:1a:5d:a6:66:fc:19:21:f1:cf:61:
                    3d:a3:52:8f:a7:8f:1a:88:d6:15:91:f7:e1:f9:cb:
                    f6:7f:f7:7b:d2:78:aa:9a:31:a9:6b:10:d6:20:81:
                    f8:c5:99:a6:dc:70:35:98:6c:01:97:72:e4:63:b3:
                    0d:42:33:a0:0c:47:f9:8e:d5:ff:dd:78:7e:08:b9:
                    88:d3:33:d2:1c:70:b8:f6:75:06:e7:b4:aa:d0:8b:
                    e0:62:9a:01:d1:f3:ae:3f:f0:26:c3:d6:68:94:2e:
                    44:7c:75:a5:76:ab:7b:fe:2d:43:95:53:95:4b:0c:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:41:29:34:EB:CB:1D:90:DC:B1:3A:91:00:95:42:48:FA:1C:4D:7C
            X509v3 Authority Key Identifier:
                keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:ea:ae:2b:6d:79:89:e2:57:7d:5c:30:26:3a:74:8f:de:
         39:bb:5f:5b:58:38:51:10:a0:fe:13:19:d0:80:96:9a:c5:12:
         2f:4f:49:56:6c:6b:99:53:a5:cc:f8:88:75:45:a7:60:97:f8:
         53:ab:8e:c9:42:38:fa:7c:fa:81:6d:59:40:52:03:f4:a8:bc:
         11:d8:3d:f1:6f:24:e2:d7:2e:b8:77:93:6e:80:2d:29:39:c7:
         ac:8e:d4:b5:e0:ab:9d:71:47:d4:0e:41:8f:8c:51:ee:17:3e:
         ca:f2:84:60:55:a9:72:7d:fd:88:54:e2:64:35:e6:c1:60:bb:
         e8:89:87:14:68:2d:0c:bb:a5:51:f8:01:90:fc:ff:e7:e9:31:
         cb:24:ce:8b:c1:40:e6:a3:b5:44:75:6f:d8:61:8b:b5:ba:78:
         61:a7:c3:81:2b:e9:14:4e:bd:f3:8a:49:3c:14:8f:d6:4d:72:
         7a:19:00:17:66:56:98:d2:b0:91:bd:4d:fc:16:dd:d4:46:c1:
         37:70:f1:71:91:42:72:0b:c4:cb:00:ac:47:9d:bc:8f:5c:c4:
         2b:3c:8f:75:7d:36:44:11:dc:a3:46:0e:28:be:d8:cb:5c:46:
         36:f3:71:9a:76:7d:f0:1c:e9:51:59:18:d3:59:ee:c8:04:bd:
         ef:2e:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:23:17 2024 by rpki-client on console-ams.rpki-client.org