Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File:                     VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier:          9o3vDiagSd+n+n8DC4FaTRn3Z9iHiKI2EgrslcfZ55U=
Subject key identifier:   99:94:FB:E5:96:9F:1A:C6:4F:11:4E:64:D8:5C:1E:E7:8A:8B:68:AD
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer:       /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial:       01901CD845F6BE2CBD7BC5C7512EE6B01D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number:          0646
Signing time:             Sat 15 Jun 2024 17:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:54 +0000
Files and hashes:         1: 9wH--QKsaygOzrJ5IxO0-1frRQ8.roa (hash: GoWNE7t9B5aKd1IAZOkf0xJeI2xFhb4mLiMBr9MkbZU=)
                          2: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: zvZqsOMQAXgPTy/64fvnYJEspSDq2945XCyOcvtKw7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:45:f6:be:2c:bd:7b:c5:c7:51:2e:e6:b0:1d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
        Validity
            Not Before: Jun 15 17:00:54 2024 GMT
            Not After : Jun 16 17:00:54 2024 GMT
        Subject: CN=9994fbe5969f1ac64f114e64d85c1ee78a8b68ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:b0:4a:33:1a:3f:ff:39:09:63:d5:92:fd:
                    52:74:88:9e:fd:d7:82:87:25:56:52:61:1e:aa:fb:
                    80:72:c7:1d:c0:b1:d9:06:18:c5:f6:b4:18:60:2c:
                    92:d1:e9:04:6b:43:fb:d9:a7:f8:c4:60:86:da:1e:
                    c7:0c:2d:70:87:4e:7b:2f:a0:1e:f9:bc:01:92:69:
                    12:4a:e1:8e:8c:5f:d4:ad:4b:35:be:f7:40:1c:65:
                    ed:48:23:36:51:12:16:76:ba:73:ba:85:0a:6f:4f:
                    ea:40:a6:1f:cf:0f:55:98:1c:6d:43:52:4c:03:41:
                    63:bf:ae:77:38:f2:5e:c3:82:11:06:a5:31:61:87:
                    7e:d6:0b:16:1c:4b:60:08:67:5b:83:6d:5f:6d:20:
                    45:d4:76:85:ac:b2:af:0d:6b:09:de:fc:8f:a7:bf:
                    a2:6f:4a:28:b7:f2:2e:ae:8b:c6:7a:b9:62:d7:20:
                    39:bd:12:38:af:45:d7:e9:2c:fe:e3:1b:7c:97:96:
                    d2:f1:59:c3:be:37:a9:0f:9c:71:db:7e:35:73:dc:
                    99:b7:c3:1a:20:0a:83:8a:dc:02:57:36:94:a3:58:
                    22:18:da:6a:4c:55:72:a3:29:60:95:a1:a4:c2:1c:
                    8d:5b:d7:5b:d7:55:8e:c2:a1:f5:22:fd:18:f8:66:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:94:FB:E5:96:9F:1A:C6:4F:11:4E:64:D8:5C:1E:E7:8A:8B:68:AD
            X509v3 Authority Key Identifier:
                keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:41:5a:0b:57:3b:f6:c8:82:70:20:f6:59:89:22:e2:69:12:
         ea:7d:e0:a1:62:63:2a:03:cd:44:08:40:3d:90:b2:3b:cb:08:
         5e:67:93:d9:63:4f:da:b4:de:bb:9d:0e:6d:f9:3c:fc:15:e4:
         d3:f4:fe:dc:a4:98:83:fb:3f:28:05:ae:d8:90:da:8b:2a:96:
         86:4f:e3:fc:6d:e4:c3:b7:cd:3f:1e:7e:bd:a0:07:20:06:d4:
         b5:7f:48:a1:6a:10:05:1a:1b:e5:c2:ad:b2:3b:31:b9:0d:33:
         e0:37:7a:16:bb:85:a7:10:0b:53:47:f4:77:03:94:73:72:f7:
         2e:f9:0f:7c:2e:8e:6a:aa:ff:71:9b:b3:9b:b3:c0:dc:ba:17:
         c1:d7:bf:48:0d:de:46:dc:ad:82:64:5f:b7:87:1c:b6:cc:a5:
         a7:2a:13:2d:4c:bf:9f:df:41:df:21:2e:d5:77:fc:60:c7:d7:
         33:70:4f:01:d9:dd:8c:a8:9c:1e:0f:2d:aa:7d:68:23:11:27:
         53:1f:dc:11:62:59:99:d8:f1:a0:f4:c7:62:88:e3:62:48:01:
         50:80:89:4a:d6:40:53:d9:c5:0c:7d:2d:a2:d0:d8:e1:6a:42:
         ca:54:33:5e:1d:e2:99:ef:9a:d0:59:bc:94:6c:a9:4a:03:35:
         37:00:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:42:55 2024 by rpki-client on console-fra.rpki-client.org