Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File:                     VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier:          rsCZPvm5NMTgLRMsH1GcMcXN3/LVd5BQ1gRbcowqtP4=
Subject key identifier:   E3:7C:40:74:D2:6B:07:88:B2:29:A3:DF:84:FA:E0:93:61:53:EA:7D
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer:       /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial:       018F89DBDABE4DC7139A99A711166BA43955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number:          102C
Signing time:             Sat 18 May 2024 04:00:37 +0000
Manifest this update:     Sat 18 May 2024 04:00:37 +0000
Manifest next update:     Sun 19 May 2024 04:00:37 +0000
Files and hashes:         1: Kn7bObmdwfJfnW1adGHDuNBFh6s.roa (hash: e5Fa58sK/pye7VA8LS10UbGazE8Ta4NKNbTqfb85hnc=)
                          2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: o0wRNxdvoz1sqi5f+a3JvLrMQjzYm8Muw5GVXivnx6U=)
                          3: gvk0M31K5R27d5ekxKAEjHyLeks.roa (hash: afGg9kUoiBa/+OV3fg/P3pDy3AMc9zi0jJrKm2NN9GA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 23:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:db:da:be:4d:c7:13:9a:99:a7:11:16:6b:a4:39:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
        Validity
            Not Before: May 18 04:00:37 2024 GMT
            Not After : May 19 04:00:37 2024 GMT
        Subject: CN=e37c4074d26b0788b229a3df84fae0936153ea7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:7d:6a:63:f1:11:c4:58:66:45:25:e3:c3:
                    8d:ae:0f:52:81:42:84:7f:a5:ad:b0:ab:dc:c8:3c:
                    53:69:21:c9:e1:a7:33:1c:59:a3:8d:28:65:57:39:
                    e6:c5:53:f7:8a:b6:c3:90:c1:d6:78:4f:01:35:a7:
                    be:74:60:87:97:57:f2:c6:04:66:e9:0c:a4:31:d4:
                    f2:77:04:96:09:3f:a7:77:ca:4f:19:7b:17:9b:d5:
                    8d:96:90:43:71:bc:44:c4:f9:7b:d6:3d:fb:88:27:
                    a7:5a:14:4f:5f:f7:5f:a0:23:54:5e:ae:e6:3c:6e:
                    6e:b0:3d:1c:96:03:53:db:06:cf:73:ea:81:ea:6f:
                    be:2f:b3:6f:f6:41:45:6e:51:1f:b9:5d:1b:82:39:
                    16:51:72:01:15:8c:64:fd:79:3b:a0:14:25:c6:56:
                    04:1c:7f:25:fe:bd:ea:bd:87:bc:2d:d6:fe:b0:49:
                    c3:b3:18:d4:a8:59:c9:d2:04:88:2a:74:11:6d:86:
                    5f:77:59:bb:86:2a:29:ab:5a:ee:70:91:0e:82:f1:
                    61:23:5f:86:98:84:79:ea:cc:e8:eb:d7:28:28:84:
                    0b:e2:b0:27:a2:d7:f1:23:83:7f:1a:a4:8e:8e:27:
                    dc:b0:90:2c:9e:1d:e0:56:af:37:bd:90:7a:39:b6:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7C:40:74:D2:6B:07:88:B2:29:A3:DF:84:FA:E0:93:61:53:EA:7D
            X509v3 Authority Key Identifier:
                keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:31:87:f9:2d:af:c0:f0:4a:c2:3a:0b:62:b2:4b:2d:58:ad:
         f1:2f:c4:9e:7d:c4:f1:a1:50:4a:d2:36:b8:9f:dd:81:29:d3:
         13:e5:c8:86:8e:76:b3:e0:4d:a5:20:8c:b9:84:6a:bb:3c:e3:
         be:c1:8a:d9:15:73:dc:67:ec:74:9c:7e:a6:eb:c9:e8:02:5d:
         c4:6c:98:14:5a:f6:47:ac:0f:2d:28:74:d7:d2:18:d2:93:9d:
         6e:fa:b9:cd:79:b4:4b:81:54:0e:a0:78:d8:00:be:ed:1d:9f:
         67:ba:52:18:4a:81:66:cb:9b:66:11:f3:cc:a1:5b:a0:f3:0e:
         3a:b3:ac:89:cc:25:b5:48:c0:b4:99:d6:07:f6:23:49:d9:fe:
         4c:80:2d:0f:bf:8a:0d:15:ec:7f:22:ff:cf:00:00:e9:59:4a:
         33:8a:70:fe:6d:32:d3:a6:28:1e:6b:95:7e:a4:0d:76:14:fa:
         45:29:28:cd:9f:de:92:86:b6:a5:74:b5:1e:4f:e0:1f:a9:d7:
         de:c0:6c:f3:17:18:44:57:db:cb:75:c8:65:c3:42:b4:18:eb:
         e3:e9:ff:46:52:03:90:ff:46:db:59:16:d5:18:6a:0a:69:8f:
         b6:e8:50:c8:5b:54:49:7a:30:0d:2d:07:c9:94:cc:d5:2d:68:
         7a:6e:ed:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+J29q+TccTmpmnERZrpDlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTVkNjkxN2RjMmRhYmZiNWNhZjkwN2MzZTc0NTE0OTUw
MmM5MGUwHhcNMjQwNTE4MDQwMDM3WhcNMjQwNTE5MDQwMDM3WjAzMTEwLwYDVQQD
EyhlMzdjNDA3NGQyNmIwNzg4YjIyOWEzZGY4NGZhZTA5MzYxNTNlYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnt9amPxEcRYZkUl48ONrg9SgUKE
f6WtsKvcyDxTaSHJ4aczHFmjjShlVznmxVP3irbDkMHWeE8BNae+dGCHl1fyxgRm
6QykMdTydwSWCT+nd8pPGXsXm9WNlpBDcbxExPl71j37iCenWhRPX/dfoCNUXq7m
PG5usD0clgNT2wbPc+qB6m++L7Nv9kFFblEfuV0bgjkWUXIBFYxk/Xk7oBQlxlYE
HH8l/r3qvYe8Ldb+sEnDsxjUqFnJ0gSIKnQRbYZfd1m7hiopq1rucJEOgvFhI1+G
mIR56szo69coKIQL4rAnotfxI4N/GqSOjifcsJAsnh3gVq83vZB6ObbXCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON8QHTSaweIsimj34T64JNhU+p9MB8GA1UdIwQY
MBaAFFTl1pF9wtq/tcr5B8PnRRSVAskOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAt
MTMxZDI5MTY0ODhjLzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAtMTMxZDI5MTY0ODhj
LzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDGH+S2v
wPBKwjoLYrJLLVit8S/Enn3E8aFQStI2uJ/dgSnTE+XIho52s+BNpSCMuYRquzzj
vsGK2RVz3GfsdJx+puvJ6AJdxGyYFFr2R6wPLSh019IY0pOdbvq5zXm0S4FUDqB4
2AC+7R2fZ7pSGEqBZsubZhHzzKFboPMOOrOsicwltUjAtJnWB/YjSdn+TIAtD7+K
DRXsfyL/zwAA6VlKM4pw/m0y06YoHmuVfqQNdhT6RSkozZ/ekoa2pXS1Hk/gH6nX
3sBs8xcYRFfby3XIZcNCtBjr4+n/RlIDkP9G21kW1RhqCmmPtuhQyFtUSXowDS0H
yZTM1S1oem7t8A==
-----END CERTIFICATE-----
Generated at Sat May 18 04:42:07 2024 by rpki-client on console-fra.rpki-client.org