Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File:                     VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier:          yYfOjRQXAqMH+ezrNUSkqY8a6c5CArlyEjz3ErcwSUc=
Subject key identifier:   5C:97:E7:BF:04:16:5D:8A:A9:79:0B:2C:93:5C:17:14:23:AA:7F:73
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer:       /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial:       01901DB3BB19658F1FAD0AE5B569E5F56A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number:          070A
Signing time:             Sat 15 Jun 2024 21:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:36 +0000
Files and hashes:         1: MguNwEBwxj-EOJ00LbDdUQhILmI.roa (hash: 5ilL/gacKDNdE2BYunJoAjXtlkCxyqpCm5pzk4oa7xA=)
                          2: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: +kXDGVliCnhpfwlb7rpQw6C+9iUCofcOHxuGhokWJJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:bb:19:65:8f:1f:ad:0a:e5:b5:69:e5:f5:6a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
        Validity
            Not Before: Jun 15 21:00:36 2024 GMT
            Not After : Jun 16 21:00:36 2024 GMT
        Subject: CN=5c97e7bf04165d8aa9790b2c935c171423aa7f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:65:a5:20:61:b5:d0:dc:8d:b1:13:7b:bf:
                    6c:90:aa:7b:0f:69:59:ef:f1:2b:37:88:ab:0d:ed:
                    0d:ed:59:1b:f9:3e:bc:73:58:da:7a:9e:da:13:49:
                    bc:06:04:f1:6f:c7:66:0d:38:65:9b:10:48:66:54:
                    11:68:4a:74:66:d9:95:96:bf:8f:2a:42:0d:75:08:
                    fb:6a:4c:f0:31:4e:35:09:1d:0e:48:ae:41:65:b3:
                    20:28:ca:ed:1c:1c:9b:a7:4f:61:b2:5b:27:d6:b7:
                    35:f1:86:3f:29:44:fe:07:c6:9d:77:05:78:17:e4:
                    22:a6:95:f2:8c:88:67:f7:70:14:46:63:f6:a9:8e:
                    35:34:ae:80:ce:65:f9:56:d9:9f:7f:8f:54:a7:d5:
                    f2:2d:a2:fb:65:1f:e7:36:86:04:a6:7f:af:ab:b1:
                    bd:90:84:9a:a1:39:8f:fc:1d:a3:da:ca:0b:a9:67:
                    86:0c:79:4b:8a:91:41:b7:57:e0:76:1e:17:e5:10:
                    78:64:09:60:c2:c0:62:3d:ec:93:44:04:af:15:b6:
                    6e:a1:87:fe:ac:21:92:61:5c:05:c0:c0:96:74:b2:
                    57:2b:f4:f0:38:f2:c5:9c:84:3d:20:ef:a3:a0:d0:
                    2c:b7:0e:fb:04:7c:05:c1:28:05:b0:2d:4c:1e:da:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:E7:BF:04:16:5D:8A:A9:79:0B:2C:93:5C:17:14:23:AA:7F:73
            X509v3 Authority Key Identifier:
                keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c4:1b:2d:1b:8c:2f:41:ed:71:38:59:0d:9a:7c:ac:7c:82:
         a0:40:a8:3c:2c:34:f0:71:87:4a:f0:df:8a:1d:da:05:1b:b5:
         a5:5b:2d:9d:1b:ce:98:cf:d6:01:21:f8:f4:dc:ba:51:97:1d:
         2b:08:0a:d0:81:88:89:e0:39:8f:40:49:fb:ab:9c:f4:d2:1f:
         ee:13:44:91:79:71:4b:42:5e:f4:ae:01:15:ba:19:13:c4:09:
         07:a7:5c:26:0b:dc:4c:2f:ee:52:8f:c7:38:b8:e4:19:6f:0c:
         78:09:50:6d:e6:52:d2:1b:fa:42:81:a1:4b:4f:0a:2a:aa:36:
         55:e1:59:9c:d0:72:b8:07:01:7f:c9:12:b8:04:90:c6:8a:8e:
         19:73:e5:d7:6b:08:48:30:58:93:03:8c:0e:7b:44:5f:1a:83:
         e2:ce:fd:fa:96:63:a6:f7:b0:fa:68:64:19:54:90:2b:2b:19:
         f6:61:a1:3a:9c:81:2b:3b:a9:59:39:3c:bf:cf:74:01:c1:6a:
         c0:b6:a4:14:56:5c:51:f7:b0:37:69:96:d1:33:26:df:98:e9:
         3b:f9:bd:ae:7a:e4:92:21:cc:51:76:2e:fe:9b:8e:ff:d2:a7:
         cc:e9:a7:c2:fc:79:13:52:90:64:a2:ab:fb:99:4a:f6:3c:a7:
         44:5d:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:17:47 2024 by rpki-client on console-ams.rpki-client.org