Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
File:                     vtJXlaaCsRmplIBal2V4U9dUoFw.mft (raw, json)
Hash identifier:          vpNVyyZN0q4g3Ckxwnhgc5G0Ff70GApYAXZjY+Ua0ys=
Subject key identifier:   A9:C4:2F:25:32:03:C3:F6:A1:9A:92:99:23:23:C6:A1:D5:E4:8A:59
Authority key identifier: BE:D2:57:95:A6:82:B1:19:A9:94:80:5A:97:65:78:53:D7:54:A0:5C
Certificate issuer:       /CN=bed25795a682b119a994805a97657853d754a05c
Certificate serial:       01901E5942976AD62CDC4CFD74F653DDF529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
Manifest number:          0654
Signing time:             Sun 16 Jun 2024 00:01:24 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:24 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:24 +0000
Files and hashes:         1: vtJXlaaCsRmplIBal2V4U9dUoFw.crl (hash: 2zrRcToftzAUD+Kyo1o+DDZSiE5b7So73kUYmTMo96U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:42:97:6a:d6:2c:dc:4c:fd:74:f6:53:dd:f5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bed25795a682b119a994805a97657853d754a05c
        Validity
            Not Before: Jun 16 00:01:24 2024 GMT
            Not After : Jun 17 00:01:24 2024 GMT
        Subject: CN=a9c42f253203c3f6a19a92992323c6a1d5e48a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:21:a2:83:cc:7b:f8:61:05:5e:ae:02:d8:
                    58:7a:a1:48:a8:11:d9:42:eb:0c:b3:c5:a9:9b:15:
                    ce:ac:0a:f0:77:27:1c:25:90:3c:7f:12:22:92:e2:
                    2a:85:8e:8e:41:74:4d:02:2b:6a:bc:55:92:2a:a3:
                    ea:81:fa:73:93:b4:8a:c8:56:97:6b:93:19:8a:47:
                    59:04:2a:6e:d1:dc:5b:33:f6:44:47:e8:1c:47:7c:
                    e1:c7:4a:68:1c:6e:21:10:5e:59:83:c2:d2:7e:de:
                    74:ed:cd:97:e1:70:45:2e:54:93:b3:17:0d:6d:e0:
                    de:d3:36:5c:0d:2b:f6:16:8a:05:9a:97:4c:43:64:
                    94:8f:4b:3d:01:59:81:e1:20:4f:90:4d:48:ef:34:
                    df:8b:52:ee:d9:8f:c9:af:bc:56:a7:1f:32:1e:73:
                    7a:c8:77:c8:94:77:df:45:2e:4a:ff:aa:c2:f3:97:
                    04:12:98:c7:2a:ce:22:d5:62:6d:1c:c5:74:89:43:
                    fb:2e:39:f9:ed:e9:56:04:5a:74:75:96:56:66:35:
                    19:e8:c8:31:f0:97:cc:33:49:e6:be:59:53:9c:f3:
                    7f:d9:4e:5b:44:48:aa:f8:b8:51:fc:a1:de:8f:26:
                    00:07:ef:1b:9d:69:21:3c:ad:e2:10:e5:5b:85:39:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C4:2F:25:32:03:C3:F6:A1:9A:92:99:23:23:C6:A1:D5:E4:8A:59
            X509v3 Authority Key Identifier:
                keyid:BE:D2:57:95:A6:82:B1:19:A9:94:80:5A:97:65:78:53:D7:54:A0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:88:54:b5:94:c5:33:60:6b:95:a9:bc:46:c8:c3:f5:42:dd:
         3d:88:90:0b:66:8a:f7:ff:bb:03:06:21:81:91:32:26:1e:8b:
         9f:c3:5f:88:6b:2a:25:2e:de:1d:3b:54:d3:95:0d:fd:a2:a6:
         64:6a:6d:cf:92:5d:c9:d6:31:c0:fa:c3:d3:27:40:01:0c:a6:
         c3:7c:27:2e:64:c8:98:04:83:cb:60:bb:a6:52:1c:a4:c9:f0:
         64:6a:65:a9:32:a3:ef:9f:d0:e2:61:fe:b3:b0:3e:a0:9e:ce:
         52:35:4c:bf:d3:79:87:c4:77:e9:d9:bf:66:b4:ff:cf:ee:ac:
         fa:6b:31:17:01:5c:4e:9f:79:5f:18:7e:83:87:be:14:61:76:
         09:1c:c6:6b:e7:06:0c:44:ae:b7:7f:f1:8e:5a:b8:b2:97:73:
         4d:f3:c6:23:de:2a:96:26:df:44:2d:57:ef:84:c3:37:02:35:
         26:94:59:e3:10:34:81:56:ba:7e:28:50:04:e6:41:d1:8a:0f:
         78:38:03:e8:ae:dd:f2:6c:9e:71:8d:84:dc:b9:00:8d:03:af:
         1d:d5:af:cf:1d:9d:03:70:64:d1:86:df:8e:47:17:8b:2a:dc:
         36:97:02:d5:72:35:81:0a:1c:cd:b7:ed:7d:ec:18:0f:e6:96:
         2c:b4:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:51 2024 by rpki-client on console-ams.rpki-client.org