Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File:                     vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier:          at6Oh7hTN93kHPW8V3hYiC3PFLs/HoH7WyH+8eenifo=
Subject key identifier:   FC:56:16:F1:42:94:43:39:4C:41:78:72:C9:69:ED:36:E5:93:B1:3E
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer:       /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial:       01901DEC046A1625AFCBFBCBB59E0C817BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number:          089A
Signing time:             Sat 15 Jun 2024 22:02:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:04 +0000
Files and hashes:         1: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: paxdyjgh/M9W+D1cqep8AkGR+4nvjp+MjPhyAJQQ6eo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:04:6a:16:25:af:cb:fb:cb:b5:9e:0c:81:7b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
        Validity
            Not Before: Jun 15 22:02:04 2024 GMT
            Not After : Jun 16 22:02:04 2024 GMT
        Subject: CN=fc5616f1429443394c417872c969ed36e593b13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:08:58:80:08:70:37:9e:5b:a2:a9:9b:80:
                    ba:28:52:bd:c0:5b:c0:da:ae:00:54:20:e5:c2:f3:
                    ee:ae:1c:80:a9:5a:ad:fd:24:49:e9:1b:b7:56:a8:
                    16:27:42:42:d2:f6:66:45:46:3f:c4:87:94:39:67:
                    f9:8f:fd:2c:a3:de:34:a9:a0:e6:40:4b:22:f3:c4:
                    10:2d:f4:ed:f7:6d:2a:88:b9:1f:52:fa:ba:52:37:
                    d2:15:d4:45:85:6c:fb:a0:b8:21:53:82:49:05:39:
                    6e:37:06:38:be:3b:c3:63:3e:61:bd:b2:3a:84:6c:
                    19:9b:b4:49:22:a4:b0:eb:05:ab:86:68:1f:c8:9a:
                    15:12:c9:5a:42:8d:2a:09:96:f5:b5:71:b9:a3:52:
                    ad:43:ed:c3:a9:ae:7d:0e:ad:50:fc:d1:13:2d:9a:
                    2c:27:29:37:88:3f:c8:69:ae:af:de:3d:b5:59:ae:
                    35:93:07:81:98:0b:69:a9:8e:68:b1:25:c4:ed:7a:
                    c8:44:7c:34:4f:22:56:89:5b:40:f3:4f:f2:57:3f:
                    16:e1:bd:0a:a2:90:0f:af:cc:cf:5f:b0:b9:5f:e7:
                    14:b3:bc:0e:fc:ae:ea:33:b5:a9:4e:05:d5:39:be:
                    63:e4:2c:ce:4d:ed:3c:54:9b:4f:ce:80:2f:65:1c:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:16:F1:42:94:43:39:4C:41:78:72:C9:69:ED:36:E5:93:B1:3E
            X509v3 Authority Key Identifier:
                keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:a4:79:54:99:7c:6d:ef:9a:de:58:ff:d0:67:4d:44:dc:
         7f:dd:06:fd:54:f1:00:48:c7:b2:99:4a:d6:c2:a5:c1:65:bb:
         d0:82:5b:5f:70:be:ef:61:91:fd:4e:dc:6b:b1:a6:4a:76:72:
         1c:37:64:01:e6:0a:bf:cc:91:9a:d5:d0:c7:16:48:70:0b:bc:
         c9:2a:8b:14:05:85:aa:11:79:d9:71:c1:6e:85:ed:09:6a:a8:
         72:c3:7c:80:52:e5:5a:08:84:ff:96:cf:ba:50:16:97:07:0d:
         60:c0:72:b1:c7:98:b1:13:41:d9:21:3f:a3:11:47:dd:f1:3a:
         a4:5d:0e:a8:e6:b0:c6:27:31:76:3f:37:95:c3:3b:9f:a6:fd:
         3e:d2:66:74:3c:0a:70:c0:6f:a6:21:f4:63:64:98:81:f2:80:
         02:cb:8c:8b:e6:08:f2:91:a8:97:59:80:7d:95:8b:b9:02:7f:
         41:21:6f:9b:1b:09:84:a4:09:6a:42:ae:d0:5d:44:2f:d9:49:
         78:87:21:96:4b:56:fd:ae:9d:3a:62:57:44:52:ab:6c:ef:31:
         a9:de:41:cd:d3:b0:66:8f:f3:6c:3d:4b:b2:b1:29:f3:72:44:
         92:20:09:22:fd:90:29:a0:9b:60:46:a5:1c:cd:a0:de:c4:12:
         86:71:5d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7ARqFiWvy/vLtZ4MgXvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMGY4ZjE0ZjIyMGU5M2VlMzQ3NDdjNGQ2ZGJmMWFkMzVi
MzgzZmEwHhcNMjQwNjE1MjIwMjA0WhcNMjQwNjE2MjIwMjA0WjAzMTEwLwYDVQQD
EyhmYzU2MTZmMTQyOTQ0MzM5NGM0MTc4NzJjOTY5ZWQzNmU1OTNiMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopUIWIAIcDeeW6Kpm4C6KFK9wFvA
2q4AVCDlwvPurhyAqVqt/SRJ6Ru3VqgWJ0JC0vZmRUY/xIeUOWf5j/0so940qaDm
QEsi88QQLfTt920qiLkfUvq6UjfSFdRFhWz7oLghU4JJBTluNwY4vjvDYz5hvbI6
hGwZm7RJIqSw6wWrhmgfyJoVEslaQo0qCZb1tXG5o1KtQ+3Dqa59Dq1Q/NETLZos
Jyk3iD/Iaa6v3j21Wa41kweBmAtpqY5osSXE7XrIRHw0TyJWiVtA80/yVz8W4b0K
opAPr8zPX7C5X+cUs7wO/K7qM7WpTgXVOb5j5CzOTe08VJtPzoAvZRyhIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxWFvFClEM5TEF4cslp7Tblk7E+MB8GA1UdIwQY
MBaAFL4PjxTyIOk+40dHxNbb8a01s4P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQt
YjBjNjA0NjRkZjA2LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQtYjBjNjA0NjRkZjA2
LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQumkeVSZ
fG3vmt5Y/9BnTUTcf90G/VTxAEjHsplK1sKlwWW70IJbX3C+72GR/U7ca7GmSnZy
HDdkAeYKv8yRmtXQxxZIcAu8ySqLFAWFqhF52XHBboXtCWqocsN8gFLlWgiE/5bP
ulAWlwcNYMBysceYsRNB2SE/oxFH3fE6pF0OqOawxicxdj83lcM7n6b9PtJmdDwK
cMBvpiH0Y2SYgfKAAsuMi+YI8pGol1mAfZWLuQJ/QSFvmxsJhKQJakKu0F1EL9lJ
eIchlktW/a6dOmJXRFKrbO8xqd5BzdOwZo/zbD1LsrEp83JEkiAJIv2QKaCbYEal
HM2g3sQShnFdPw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:19 2024 by rpki-client on console-ams.rpki-client.org