Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File:                     VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier:          grOw+SdHJrzRZm9DcXlgvDNzs1uyZkPz/OYxDWk77FA=
Subject key identifier:   54:37:31:9A:C6:55:44:26:3B:99:2E:42:EF:C6:D9:C4:96:28:D9:84
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer:       /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial:       01901DEAE7DFF6496C7122C6CA633A46E63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number:          08BE
Signing time:             Sat 15 Jun 2024 22:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:52 +0000
Files and hashes:         1: D7mucRvSmVl5Mip-HbvrhYgOXA8.roa (hash: XB8SNCKgCB4SyzwYqUPew/0H8EtN9270D6CJ2i0DJiA=)
                          2: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: BPFW1QJfFtlkRRg0lHB2bzCV83isjm5vRWkHkOSY0cE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:e7:df:f6:49:6c:71:22:c6:ca:63:3a:46:e6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
        Validity
            Not Before: Jun 15 22:00:52 2024 GMT
            Not After : Jun 16 22:00:52 2024 GMT
        Subject: CN=5437319ac65544263b992e42efc6d9c49628d984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:f2:49:22:54:9f:f6:be:96:b0:7b:ad:9a:
                    2c:f1:bf:10:20:24:7d:54:82:a3:48:4a:b6:2a:dc:
                    93:a8:2e:5e:ed:e3:39:fa:a8:d8:6c:2b:40:bd:bf:
                    cf:1f:bd:b5:08:76:34:15:94:fb:8c:ee:f1:56:4d:
                    77:c2:5a:64:c0:a0:d9:44:49:02:48:19:66:3f:19:
                    a9:bb:5c:10:ee:08:6a:bc:38:7f:c9:49:d1:6a:40:
                    43:c8:c0:4a:8e:80:98:f9:8f:c9:49:58:db:32:5c:
                    26:51:d5:b0:7f:e2:21:e6:f1:cc:64:8f:84:0b:93:
                    24:ae:40:d9:3e:40:0c:b0:62:1e:5e:61:e1:f2:52:
                    fd:7c:e5:33:5d:f8:2a:7d:d5:c2:65:51:13:11:e4:
                    a5:73:2a:24:91:bd:17:70:40:23:27:13:08:26:3b:
                    e4:9a:11:c1:4e:df:41:92:65:2e:24:5a:c6:d5:2f:
                    7d:87:69:6d:87:a9:f5:ac:19:54:0c:ec:bb:7a:e4:
                    96:78:54:09:b8:2e:11:f6:fe:d2:cf:af:50:83:d4:
                    0e:99:79:38:63:85:27:ee:21:60:e2:33:cd:f5:e0:
                    ab:69:db:c8:1c:6d:9a:21:2d:ed:6e:10:06:18:f2:
                    b4:c2:04:b3:b8:f1:a6:ac:6c:97:3d:34:7f:52:00:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:37:31:9A:C6:55:44:26:3B:99:2E:42:EF:C6:D9:C4:96:28:D9:84
            X509v3 Authority Key Identifier:
                keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:28:67:69:e9:6a:95:b1:b0:f3:90:6a:46:44:44:df:c1:a9:
         af:18:40:a0:2c:79:d3:90:e5:ee:e6:33:6e:8c:54:a6:d5:75:
         b3:6b:d9:28:0c:ed:f6:68:00:fc:10:23:dc:f2:f6:b2:29:8d:
         72:4b:db:16:97:0d:cf:fa:6d:86:3c:45:c0:b0:2e:c9:27:f6:
         0e:92:e4:42:0e:11:7a:11:fe:58:7e:2c:ef:d1:86:ad:17:12:
         b5:70:d3:10:de:86:58:fd:06:a8:c5:ad:09:5f:55:78:80:f0:
         07:b6:2f:e9:e4:34:ba:ae:3c:d8:84:6b:b2:c5:74:52:59:c5:
         cd:18:83:ca:e9:dd:44:04:df:8a:2c:21:93:03:e4:66:d6:76:
         5b:13:07:af:c0:76:b3:e1:a2:ba:b4:10:ee:10:67:f8:f2:66:
         5b:5b:c4:96:9c:c3:69:78:d3:81:6d:3b:21:10:90:a4:3d:32:
         b9:18:03:ba:2b:b0:7e:a8:32:db:31:69:90:c8:2a:7d:9a:97:
         a2:a7:7e:79:0f:dc:4c:99:c8:dd:5e:c8:e5:77:fc:ab:d6:00:
         63:e3:cf:5a:18:b6:06:73:01:7e:37:9b:13:11:a0:f5:0e:d4:
         4d:1d:92:47:91:f7:c2:bf:75:a6:95:57:f1:3f:79:76:97:25:
         24:f7:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:00 2024 by rpki-client on console-fra.rpki-client.org