Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File:                     VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier:          rd82zz7uGzegC5CFWh8QapbuczVuKWJAmv2iVXn3Ycg=
Subject key identifier:   FE:DB:6C:19:0E:DC:9D:28:83:20:E7:34:20:7A:B3:34:7E:55:47:2E
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer:       /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial:       01901DECBAB5B753969FC57277E8E9BA326A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number:          0EF0
Signing time:             Sat 15 Jun 2024 22:02:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:51 +0000
Files and hashes:         1: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: u7c7ffWU3lhl5TjWU283DVx6PhkMiUCElWTXqDqcrJU=)
                          2: s9JoBZl9UHbnwAnPB0a4_m6BPPQ.roa (hash: sAKxnf7d5dGUPw65F4xiL4N5UtZw60JZF6k7aN2fn6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:ba:b5:b7:53:96:9f:c5:72:77:e8:e9:ba:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
        Validity
            Not Before: Jun 15 22:02:51 2024 GMT
            Not After : Jun 16 22:02:51 2024 GMT
        Subject: CN=fedb6c190edc9d288320e734207ab3347e55472e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:63:f8:c6:1e:10:f5:29:a2:76:77:d6:a3:
                    b5:c5:47:a7:37:a1:a4:20:ce:c5:3c:fa:ae:1f:56:
                    7f:8f:7b:2c:9a:87:9a:65:89:08:ea:a0:9c:46:6c:
                    77:6f:c0:27:c1:7d:64:aa:bc:a0:fa:49:47:0c:c2:
                    7d:7c:89:9f:d2:ef:b0:03:44:8f:fe:c4:99:05:16:
                    54:da:8e:05:fd:9c:44:a8:40:d9:53:1a:5e:dd:55:
                    21:0e:5e:81:33:f2:6a:ed:e5:7c:0e:51:fc:13:24:
                    10:a2:36:a4:80:e7:51:b4:55:3c:d0:3c:fd:2c:bb:
                    4a:06:e9:9a:89:c3:c1:f9:e7:66:89:3a:2e:c4:23:
                    31:4f:08:9f:cd:4f:23:0f:c5:db:57:e8:36:75:88:
                    5f:9c:97:bc:0d:04:01:3f:13:67:69:40:90:14:5b:
                    ae:40:16:38:e2:24:90:7e:40:1a:d1:55:fa:e8:d3:
                    0d:53:4d:bd:c4:bb:75:b9:91:33:d6:c9:be:0b:6e:
                    cb:4e:3f:5c:ff:c3:55:a2:08:aa:64:73:b1:17:04:
                    76:ee:f7:82:2c:26:8f:99:53:e4:2c:6a:67:fc:a7:
                    c6:59:e7:7e:d6:5b:d3:0c:c9:87:12:fa:da:a0:4c:
                    e2:9f:82:fc:54:6b:ad:6f:f4:1e:d9:e5:65:79:73:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DB:6C:19:0E:DC:9D:28:83:20:E7:34:20:7A:B3:34:7E:55:47:2E
            X509v3 Authority Key Identifier:
                keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:7f:1d:44:47:52:03:29:ee:bf:c4:c3:88:a4:78:23:06:
         0a:48:07:d2:bb:d3:a1:0f:c6:3b:9e:60:c8:16:f2:f0:0b:af:
         2b:8f:ca:64:d6:23:e4:18:0c:68:0e:bd:ec:77:57:49:22:fe:
         9f:c9:48:9b:67:4d:b2:c2:60:46:a7:93:23:2c:c5:77:4e:cd:
         c8:6c:68:38:8f:d9:3b:b0:5c:61:1a:e2:a1:39:1f:8b:76:38:
         7d:9c:8a:57:95:10:ac:1a:df:6d:bd:06:b9:98:35:66:af:d8:
         75:4a:fd:e8:20:0f:f6:4c:41:24:09:94:0c:3f:f3:b5:c4:bd:
         e1:92:0d:cd:ee:c0:61:3f:c3:75:85:20:19:f2:b5:ad:1c:01:
         5e:24:e9:07:01:44:2d:cd:65:3d:59:7c:6a:48:05:06:e0:b3:
         2b:6d:8a:2b:eb:af:25:41:a3:21:36:10:02:02:46:a2:69:9b:
         4b:f7:43:dc:44:e7:f3:94:07:52:bd:ac:57:35:42:e0:37:cb:
         dd:b3:15:7e:f8:61:a8:01:d1:ed:5a:8b:c0:3a:30:b5:c1:8c:
         f0:6e:96:77:a6:27:fc:da:f8:94:97:d6:66:15:e8:e5:ba:40:
         e5:eb:a7:49:7c:2b:21:9c:52:65:ef:c1:6a:ba:a7:71:91:70:
         66:6d:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:11 2024 by rpki-client on console-fra.rpki-client.org