Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File:                     Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier:          GJb2u3/6akU+VRbdH1tyZdZmEMWbFZ1crS0TR3tfkPg=
Subject key identifier:   BA:FE:5B:62:E7:B3:33:6D:B6:04:C8:8E:82:1D:86:F3:88:A2:AE:E1
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer:       /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial:       0190459D41F6C996E38520BABEC793DDD69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number:          11D9
Signing time:             Sun 23 Jun 2024 15:00:52 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:52 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:52 +0000
Files and hashes:         1: Kmw--kNukxXlz3aaIdYXX4UxUr4.roa (hash: lbHdq/Yq8kROUrU9qm2yb4luK7BqTVduEuS70uZU2lk=)
                          2: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: SpMEZk+SNdSO/PwgLbRxJrQu7FpQuIth9b0m6O8vgVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:41:f6:c9:96:e3:85:20:ba:be:c7:93:dd:d6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
        Validity
            Not Before: Jun 23 15:00:52 2024 GMT
            Not After : Jun 24 15:00:52 2024 GMT
        Subject: CN=bafe5b62e7b3336db604c88e821d86f388a2aee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:c7:1e:75:df:8c:57:dc:5a:12:8e:c5:6c:
                    17:b8:bd:c3:2e:c9:b1:0b:da:e6:53:26:a7:2c:3e:
                    23:93:22:40:6f:b9:11:ea:92:fc:11:2b:31:9e:5f:
                    1c:25:fa:3c:cd:b4:7f:0b:db:70:8f:38:56:ba:ed:
                    06:12:0f:50:a9:9c:16:1e:e6:bc:60:6c:81:40:b8:
                    b6:fa:7b:64:9e:59:9d:a5:41:1d:83:73:2d:63:f4:
                    5b:4a:c2:46:62:9c:d5:f1:ed:c7:f6:aa:d6:0c:ad:
                    4e:fc:3f:89:74:28:47:89:1f:88:a1:70:94:78:5b:
                    db:88:d4:d0:a5:4e:53:bd:32:64:d4:6f:34:8a:fb:
                    7e:10:6e:3e:ab:a6:3e:97:11:c9:94:6d:d8:66:5a:
                    5c:f2:5e:8b:65:cf:a3:ba:f2:0a:46:20:af:ef:63:
                    6f:f0:6e:f8:53:46:5f:47:30:60:f7:19:81:bb:64:
                    0f:f2:1f:77:3e:9f:c1:5f:cf:03:83:8b:21:47:79:
                    d6:b6:61:a0:75:9e:1f:db:01:b6:7e:f5:f5:59:1c:
                    9a:2f:65:be:6c:ba:cf:1c:f6:27:51:b3:32:64:12:
                    c1:f0:9d:e7:9c:0f:d9:6b:a9:36:9b:84:dd:6e:6b:
                    4d:d1:5e:8f:f1:65:46:06:cb:f7:47:04:9c:30:1d:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:5B:62:E7:B3:33:6D:B6:04:C8:8E:82:1D:86:F3:88:A2:AE:E1
            X509v3 Authority Key Identifier:
                keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e7:a8:c8:b5:1b:fb:2c:3c:b6:c8:da:f2:e6:09:30:34:7c:
         05:60:34:bf:60:20:9d:37:77:fb:45:2e:6f:33:11:ab:4c:db:
         9b:cf:61:71:8b:9d:34:47:47:45:e2:9a:4e:22:52:be:d6:6e:
         f3:5e:15:4e:19:01:aa:b8:dd:34:f5:f8:94:c3:6e:a2:2a:b5:
         d5:4d:ba:ba:58:6a:e1:49:cd:80:0c:7e:2a:61:d3:c6:ee:0c:
         ff:cb:26:bc:e2:6e:47:2a:d5:50:3f:37:d2:47:f4:c8:19:f1:
         42:17:d8:b9:a1:0d:c2:e8:cc:69:7e:d7:40:fe:b6:ea:19:e7:
         07:eb:11:0b:9f:cb:3f:c8:36:8e:9a:0b:82:81:e8:ff:16:3f:
         4e:ed:0a:cc:96:f4:75:b8:a6:ca:1a:de:5e:e7:29:95:ba:ce:
         42:66:e6:38:f2:46:a2:72:70:50:50:4a:d6:61:00:1a:8e:51:
         33:d2:ff:aa:e4:9e:92:67:97:42:50:72:02:c4:d1:56:ad:8e:
         2c:92:c6:92:b8:0c:37:c1:ab:d4:20:c4:97:bc:05:42:e0:8d:
         d4:84:55:00:83:b7:b0:c2:a2:41:70:1c:dc:6c:c6:21:7d:b8:
         c1:54:52:9f:1c:d2:ca:43:97:a3:52:38:c2:59:cc:44:bd:18:
         82:4d:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:43:27 2024 by rpki-client on console-ams.rpki-client.org