Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File:                     Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier:          89H2mPNuQsnqV/OkqGdZ+XGR6bz2y7uk4gny8W/ZtdU=
Subject key identifier:   01:53:67:30:18:48:E3:92:68:73:52:B2:2E:03:3B:DB:2F:D4:A8:69
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer:       /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial:       01901EFD4E9148B6BB746E8C94D5A977AEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:35 +0000
Files and hashes:         1: Kmw--kNukxXlz3aaIdYXX4UxUr4.roa (hash: lbHdq/Yq8kROUrU9qm2yb4luK7BqTVduEuS70uZU2lk=)
                          2: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: PcXmiR0rBGQeONjg7YVFQqdw2jHb0w+tqXE0+1MMfMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:4e:91:48:b6:bb:74:6e:8c:94:d5:a9:77:ae:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
        Validity
            Not Before: Jun 16 03:00:35 2024 GMT
            Not After : Jun 17 03:00:35 2024 GMT
        Subject: CN=015367301848e392687352b22e033bdb2fd4a869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:c4:a4:aa:fe:fb:95:21:d6:92:05:06:41:
                    34:80:8b:3f:bb:99:5a:d9:13:90:71:1d:ac:f6:e1:
                    56:8a:38:ea:d5:b9:cd:6d:1d:40:05:11:4f:4a:10:
                    d7:6a:70:db:68:87:41:62:b2:45:b6:df:83:0c:9b:
                    97:c9:27:be:dd:4a:e6:69:65:67:9e:42:f2:f7:0e:
                    d5:84:fb:78:43:11:16:e4:a2:2f:2c:01:03:29:dd:
                    5a:d9:a9:6b:d8:0d:1c:88:3b:2b:6d:3e:5b:31:31:
                    0c:fd:ec:9c:6d:bd:45:0c:a5:07:0a:de:60:15:25:
                    aa:9e:9d:a5:70:9a:60:16:07:69:70:22:d8:ac:f9:
                    86:98:31:40:7d:23:c7:e3:55:f4:d7:6e:9d:fb:8b:
                    5b:ff:f8:fd:cb:02:1b:04:3b:60:2d:41:d6:10:d8:
                    7b:16:bf:3f:1e:50:28:8f:11:fe:f8:f7:e6:fd:f9:
                    a9:bc:37:18:84:3d:c3:34:82:6b:83:d5:71:a1:08:
                    3a:75:49:f9:1d:5c:5a:c4:f3:c3:75:cf:d1:98:0b:
                    2f:13:2f:21:84:a4:dd:1e:e4:5c:62:d8:7f:e0:09:
                    09:62:a0:63:e6:17:59:67:85:89:92:01:55:c3:e1:
                    fa:b8:c2:41:8e:0c:37:ec:49:21:55:b6:44:12:1b:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:53:67:30:18:48:E3:92:68:73:52:B2:2E:03:3B:DB:2F:D4:A8:69
            X509v3 Authority Key Identifier:
                keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:29:68:ac:69:94:c0:65:83:5f:11:ba:52:8f:c5:cb:61:00:
         3a:4a:ff:7d:31:1e:44:af:61:97:f9:6a:1b:ec:a7:3b:74:e9:
         a9:8e:ac:e7:7a:bf:2d:5c:70:5e:9d:40:6a:51:ba:cb:c6:2e:
         aa:92:35:ff:98:e3:f9:9c:b7:77:b1:18:cd:f0:15:b8:db:2d:
         ac:ba:f3:5d:89:b5:1e:42:a1:81:64:63:43:81:b6:8d:c1:4d:
         47:a9:bb:7f:04:61:94:d8:9b:ac:c0:2c:ea:49:5a:62:5a:fb:
         0b:f5:64:3f:50:46:76:5c:1e:86:90:78:ed:1a:8a:00:39:c5:
         67:48:50:2f:01:cd:4a:cc:ea:0d:a4:9d:fc:c4:26:e2:14:96:
         73:92:af:5d:ad:2a:01:11:2c:f5:d6:0b:f8:c4:f7:db:83:f0:
         81:32:1c:32:9e:e3:53:a5:6b:b2:14:84:99:45:bf:7d:85:21:
         6d:60:f8:8f:58:a0:a0:81:c3:e1:f3:3d:4b:21:c3:dd:ce:c6:
         20:41:5f:8d:54:d3:87:9d:a5:93:39:8a:0d:3a:04:25:b2:7d:
         ac:cd:7e:24:8d:44:1a:70:a9:37:3c:16:38:69:f8:1c:3b:07:
         97:f2:b3:a6:55:88:32:6b:5a:dc:cc:99:e6:0c:88:99:75:c7:
         b0:a0:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:02 2024 by rpki-client on console-fra.rpki-client.org