Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          lF2Q0QBPwh25BAuZeJFNseVVIGgYOzxml5ZP9fjFruY=
Subject key identifier:   E2:7F:32:84:21:F8:C3:58:12:CF:03:85:F8:46:B7:B2:DD:A7:24:26
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       018F6FAE85A10DC8E9BA7E874B1F9F68B3C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          0A86
Signing time:             Mon 13 May 2024 02:00:59 +0000
Manifest this update:     Mon 13 May 2024 02:00:59 +0000
Manifest next update:     Tue 14 May 2024 02:00:59 +0000
Files and hashes:         1: E8PSau4f1cIzO8n-LR4TG5ChDvA.roa (hash: vdd2wpd8Vq/9YzkVcuHgTEyOfBVvJcug2SoWXAqeNC4=)
                          2: SKnjxG3YWnkOyKsKshfi-v9mg-Q.roa (hash: X7hRNvCJqULF7qNH1va6G+yrrE41zvg2MJAYQByjz44=)
                          3: nBBOyZn4hnxGryTiBe8h5EXuuD8.roa (hash: k8avLjFcgfUGlRWw6o6SvuEl7eR8NarJjyV5Ci7ic2U=)
                          4: nE7azVb23AxQkHjhatVMv1zV_fA.roa (hash: H3qjsIYFcV6hZ/HzJRE3H0EZdOO9NSYNOClNyUqcOBY=)
                          5: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: Gm7L1SoipHUiAIN1O3Ykx5aVGu2B7rxDKJavI5ZCuK0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6f:ae:85:a1:0d:c8:e9:ba:7e:87:4b:1f:9f:68:b3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: May 13 02:00:59 2024 GMT
            Not After : May 14 02:00:59 2024 GMT
        Subject: CN=e27f328421f8c35812cf0385f846b7b2dda72426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:12:82:87:93:c4:38:08:3a:80:2d:15:7c:
                    ca:77:d6:b6:ef:c8:68:73:b8:d7:90:3c:58:c1:1d:
                    61:29:70:dc:22:35:62:88:54:ca:45:80:fd:14:fe:
                    71:8e:2c:4c:fe:9b:42:39:c2:12:6d:85:d2:e3:a3:
                    d2:9b:8e:55:e3:9e:32:cf:d4:ff:9a:28:15:44:2e:
                    b8:02:cd:4d:31:1e:7e:33:c0:28:9b:f3:41:74:26:
                    b9:cd:e3:73:5b:28:23:f5:da:ec:49:f5:92:5a:66:
                    69:11:b1:70:e1:51:17:d1:29:44:35:d2:f0:a1:1b:
                    3f:0b:ef:1f:8d:3f:30:12:5a:d0:9b:fa:ac:52:74:
                    bb:6c:99:eb:7f:d7:18:55:8b:7c:8b:b2:43:eb:fa:
                    ab:e7:13:c1:14:8c:35:d8:35:7d:ea:2d:34:b1:61:
                    02:50:30:51:89:ed:92:62:4f:9e:47:9b:cc:b6:ec:
                    49:f1:f2:7b:0c:c1:73:cf:c8:66:a8:4f:d2:8f:ac:
                    48:f5:2a:65:44:32:e3:5d:94:b4:2e:9c:3b:d6:f1:
                    96:e5:1d:ba:e7:a1:c6:2b:98:08:7d:73:8c:9e:36:
                    c1:71:dc:55:38:b1:da:f7:ba:52:40:26:10:8b:5b:
                    4a:9a:ff:25:9a:a1:b7:b0:ee:a4:c4:5a:f2:96:6c:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7F:32:84:21:F8:C3:58:12:CF:03:85:F8:46:B7:B2:DD:A7:24:26
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:66:b9:70:84:77:8a:45:86:1c:32:80:8e:2c:e6:c3:39:
         b2:fa:20:9e:78:b0:4c:f0:ce:c5:89:39:75:9a:c7:8e:8f:88:
         ac:72:3a:d2:8f:de:83:a1:9c:d4:0c:2a:d8:e6:7e:d0:96:64:
         c2:28:d1:6f:a7:d6:18:49:99:aa:f5:0d:6e:4b:26:55:f5:45:
         9e:c8:c8:0c:1c:f6:d3:02:c8:b1:48:e4:f6:4d:37:22:38:ab:
         b2:a3:4e:06:06:67:09:4a:8d:6c:33:0a:a4:6d:4b:dc:6d:ed:
         d4:fd:09:10:6f:b7:19:ea:02:87:d4:e3:b3:9f:c3:99:b7:29:
         99:cb:96:dc:71:33:3a:d5:d3:75:eb:cc:23:36:ca:c4:fe:1d:
         52:19:02:08:af:11:41:e0:17:73:00:2c:df:50:03:39:9f:43:
         68:87:ec:91:c2:f7:89:c4:66:fd:4c:b9:80:c8:26:ef:55:aa:
         24:bc:7d:1d:3c:f2:d8:ca:a0:7e:ad:d3:f8:f9:cd:ec:c1:31:
         08:b6:45:bb:57:43:b7:da:77:f1:a5:4f:fe:76:b2:17:66:73:
         8a:a0:1d:34:fb:14:3b:27:6f:1f:6d:d3:2a:e8:c9:da:4d:d9:
         56:f0:12:03:21:d9:2b:a7:8c:37:f7:0e:27:c5:47:f4:fd:16:
         10:7a:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----