Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File:                     vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier:          V1ocZmIU3ASLhuXje/qnZ/2ogmYly3VlpHFmyElJx8s=
Subject key identifier:   B8:37:4F:BE:CC:A8:4F:65:85:60:0A:74:74:E8:AE:2C:4F:45:3C:1C
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer:       /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial:       01901CA14094251287B2312D92AE1A8236FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number:          0CCC
Signing time:             Sat 15 Jun 2024 16:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:48 +0000
Files and hashes:         1: _59yrsTAdvA_yCYswtWo2yOq7Hc.roa (hash: yA6pGpVs01vdmBvMoqKUFzRc+ZMeMuh+mELpQGlgtKw=)
                          2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: +RHSOKOPprFbPUj+YNTqPiHJzw9VJeXEM053OdIjxtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:40:94:25:12:87:b2:31:2d:92:ae:1a:82:36:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
        Validity
            Not Before: Jun 15 16:00:48 2024 GMT
            Not After : Jun 16 16:00:48 2024 GMT
        Subject: CN=b8374fbecca84f6585600a7474e8ae2c4f453c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:7d:23:18:82:e7:c1:00:f8:61:cc:1f:3c:
                    30:cd:38:c0:3d:fc:00:82:a9:5c:9b:16:db:97:ef:
                    46:04:37:dd:f4:1a:05:8e:c2:82:c5:7c:d9:68:ff:
                    d5:c7:98:a3:25:27:cc:ac:74:39:a1:60:13:55:ad:
                    4d:40:0d:f0:64:d7:fa:ea:17:41:10:1a:e2:72:c4:
                    4f:7b:06:2f:5f:66:4b:2d:76:80:d6:56:83:c9:fe:
                    99:fb:f3:e7:e6:65:a9:fd:b9:db:2a:40:ef:d3:ac:
                    66:13:18:59:be:75:71:3c:ea:a7:e8:8e:b5:69:cb:
                    42:c3:8d:71:cb:c0:a8:df:be:2d:fe:96:8b:25:cd:
                    4b:24:48:7c:f1:5f:0e:d4:45:f3:96:30:eb:52:45:
                    57:57:cc:ee:90:77:4b:1a:18:36:7b:02:bc:b0:86:
                    28:5d:16:34:c1:8b:0d:d5:66:62:19:ef:2d:22:54:
                    e9:c6:b2:c8:54:87:fd:68:f9:69:9f:60:42:b2:aa:
                    8c:f0:ea:82:90:1b:2b:4f:85:ab:64:d6:20:ad:ad:
                    c4:8d:8a:02:fb:3e:e6:5e:04:0e:95:7a:24:92:ae:
                    97:1e:77:bf:a4:e0:0e:3e:79:3d:06:34:44:c8:46:
                    ec:2b:f1:69:fa:5d:74:67:d1:5e:54:00:24:41:c2:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:37:4F:BE:CC:A8:4F:65:85:60:0A:74:74:E8:AE:2C:4F:45:3C:1C
            X509v3 Authority Key Identifier:
                keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:97:27:69:92:f3:49:17:9e:17:99:4c:1e:7f:20:53:d3:93:
         ac:5e:43:18:4a:49:fc:d3:d3:a8:96:24:39:66:dc:d3:c2:d6:
         c1:b2:ab:d0:f1:87:8d:f8:02:c1:32:ed:68:dd:72:26:53:f3:
         4f:32:cc:0d:30:fa:6f:ec:bb:33:71:67:89:67:47:29:3d:77:
         0a:2d:e3:10:ce:73:8c:7a:a3:0d:a3:23:7e:de:33:52:87:7d:
         d8:e9:62:9a:51:59:54:c4:3f:43:b7:93:bc:5e:56:c4:52:4c:
         e8:64:a9:ca:a5:57:66:b8:f3:2e:7d:73:a4:65:32:5b:f0:0b:
         73:90:ba:b3:99:8b:39:82:1d:8c:52:7c:9a:00:ec:b4:21:8a:
         10:8f:46:ce:39:7f:de:cf:9a:08:45:3f:da:d3:39:20:9e:e0:
         a8:5e:85:94:1f:0e:c3:bb:18:f7:5a:3a:85:68:83:a2:3d:26:
         14:a2:90:ca:7f:f3:3b:52:f1:fa:44:aa:e0:88:11:87:b7:d2:
         32:bb:e9:fa:7a:4e:79:64:63:af:e3:19:b4:e7:8a:71:df:f9:
         d0:bb:0c:40:ab:fe:52:4e:27:38:75:b3:d0:56:79:49:e3:bc:
         62:e2:24:97:ee:58:3a:e4:55:1b:a3:5f:c7:c2:e8:32:d4:29:
         f2:9f:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:39:10 2024 by rpki-client on console-fra.rpki-client.org