Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File:                     vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier:          92eI4ghtnlmDYR8tgDan+QfflSYlyLBmDZ1AErCg6jg=
Subject key identifier:   74:18:76:CD:1B:48:61:CD:95:DE:58:89:A2:FD:96:E2:83:20:52:49
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer:       /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial:       01901DECFAE96F7C5BB3C6172CCEF9FC2F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number:          05C7
Signing time:             Sat 15 Jun 2024 22:03:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:08 +0000
Files and hashes:         1: GgJdPsHuLCIf8BTIcMaxNdkYmhQ.roa (hash: RyQQafLZSrOi6/IKrK3H/U2Ad0d57drO+N5Q6T96vkE=)
                          2: hi0YC7IdH6Z6d3YOsc_nfai7K7Y.roa (hash: B4unnEaHFiR3fW0gwbSwsWm95UOF2faY9g12yuUAF10=)
                          3: npZk_DsmLHG4lKguA5kZdCZ2iAg.roa (hash: voZZjwP91UbnQk5UTSLktPRGQBsjJTeT9M0gsM16tVk=)
                          4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: cA0xvc8qIf/4XOPD9AaEdURHjnmJugqLUvQPvoTIOx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:fa:e9:6f:7c:5b:b3:c6:17:2c:ce:f9:fc:2f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
        Validity
            Not Before: Jun 15 22:03:08 2024 GMT
            Not After : Jun 16 22:03:08 2024 GMT
        Subject: CN=741876cd1b4861cd95de5889a2fd96e283205249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0f:57:09:46:dd:9e:d3:92:2a:ea:a0:40:54:
                    03:33:2f:af:64:69:b2:81:11:1d:84:9c:52:c2:a9:
                    55:8e:41:cc:71:b7:61:76:8b:d3:f3:7f:83:46:66:
                    29:63:c8:52:87:2c:26:7f:bc:83:7d:4f:c2:da:78:
                    a9:16:6c:fa:0a:62:b1:fb:e9:e7:0b:87:17:2c:d1:
                    32:1b:40:16:3d:f0:a0:08:54:d2:64:66:47:ad:9e:
                    d9:16:56:55:39:fc:82:eb:3d:92:06:97:77:dd:75:
                    19:52:45:84:30:79:0f:99:ab:12:64:42:f3:7e:c9:
                    d8:82:ed:70:fd:9c:3a:b7:d5:6c:e4:3b:9f:00:e1:
                    e1:2b:8b:5f:0c:3a:05:67:2a:a1:52:e1:05:f9:4c:
                    45:b6:ff:97:a9:27:ee:21:63:00:85:00:e6:c4:db:
                    66:c9:41:33:5f:ab:fd:ed:4a:eb:cf:48:38:eb:8a:
                    9b:73:76:28:64:02:55:fb:f7:eb:73:d9:12:a5:63:
                    5d:b0:be:5e:a5:9c:ac:2a:f6:a1:9d:f8:68:5a:24:
                    d5:63:a8:50:37:a3:27:ac:cf:59:63:e4:20:57:43:
                    bd:bb:87:a9:f5:e5:13:50:d5:f0:90:76:ad:42:1c:
                    63:93:2f:df:51:92:81:3d:03:aa:c0:13:2d:6d:9b:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:76:CD:1B:48:61:CD:95:DE:58:89:A2:FD:96:E2:83:20:52:49
            X509v3 Authority Key Identifier:
                keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e8:b9:e3:b4:d7:28:9e:12:67:ef:0b:c2:5f:f5:33:21:71:
         40:df:e4:c5:65:dc:78:09:24:9f:b5:38:0a:1a:e4:1d:50:94:
         ec:c7:9c:54:89:74:91:0e:98:66:ef:1b:84:64:34:5e:80:f9:
         95:7c:c5:4e:9f:41:c0:11:e4:3b:82:e4:e7:f4:c5:b9:5b:3f:
         d5:6b:70:93:38:6c:5f:0e:1d:9c:f5:de:2a:b5:fd:21:eb:03:
         ae:e9:1b:6e:0d:47:0d:a4:7e:61:30:19:c3:f9:fb:8d:69:16:
         ac:bd:5f:27:d4:ef:f3:8c:99:7c:1a:05:d1:29:1a:64:18:74:
         25:fe:29:b5:fe:05:d5:00:31:5b:13:97:22:51:c7:e7:49:87:
         35:2b:5c:54:11:4d:d5:0f:c6:5a:de:b2:92:49:8b:41:1b:f9:
         fb:a6:e5:2b:77:57:a9:25:da:57:38:68:99:22:78:85:13:57:
         17:1e:95:3c:22:35:a7:14:d9:bf:47:f2:58:20:c9:25:2e:0d:
         44:45:bf:ae:a3:f2:d5:4b:bb:e2:e9:42:1d:ce:36:8b:d2:7a:
         fc:7e:5a:44:ad:c1:c3:2c:24:52:62:03:b7:19:cc:c8:89:d6:
         a7:4a:f1:cc:67:e3:69:29:14:47:b8:23:09:a2:1f:70:5c:8a:
         d4:af:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:15 2024 by rpki-client on console-fra.rpki-client.org