Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
File:                     vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft (raw, json)
Hash identifier:          cMWZzy7oMG58aQOlDsI6WyNd8ljBwEZddxM5juUeqD0=
Subject key identifier:   3A:B1:FF:75:12:AA:5B:59:D1:9C:69:C6:1C:29:71:8F:10:E9:14:D0
Authority key identifier: BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
Certificate issuer:       /CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Certificate serial:       01904152EF9EF67E741E4665329FD7CB410B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
Manifest number:          0194
Signing time:             Sat 22 Jun 2024 19:01:12 +0000
Manifest this update:     Sat 22 Jun 2024 19:01:12 +0000
Manifest next update:     Sun 23 Jun 2024 19:01:12 +0000
Files and hashes:         1: vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl (hash: oYBgexQTWziWEsoVaqxBBr0tPvminvkqIofcM5ND+Fo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:ef:9e:f6:7e:74:1e:46:65:32:9f:d7:cb:41:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
        Validity
            Not Before: Jun 22 19:01:12 2024 GMT
            Not After : Jun 23 19:01:12 2024 GMT
        Subject: CN=3ab1ff7512aa5b59d19c69c61c29718f10e914d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:82:e5:ec:f1:df:dd:5c:5a:b9:c2:51:29:
                    a8:78:13:0b:31:86:8a:19:e5:58:d5:61:ae:2d:ed:
                    07:cf:14:3a:60:57:2d:85:d1:8e:92:eb:d5:7c:5d:
                    6a:26:45:75:e7:b3:3f:0d:f3:dd:80:29:e9:5b:2f:
                    98:24:27:3c:01:b1:b3:69:b9:69:e2:ab:37:61:5d:
                    d9:66:da:4c:5a:37:53:c9:2c:f8:9b:20:46:02:c6:
                    48:f5:0e:58:c1:d0:e3:28:72:64:06:47:37:09:b8:
                    1e:17:78:f3:1b:e1:83:0c:d4:4c:ea:09:8f:14:85:
                    b9:e0:e4:e3:42:ae:e3:ee:f5:3d:5b:c4:06:fb:a0:
                    20:18:85:46:b5:e7:04:18:f2:85:b3:76:47:43:d8:
                    c4:a7:72:c5:e0:eb:92:95:82:0a:dd:94:65:f5:66:
                    35:40:74:54:f0:42:37:cc:a8:f5:46:42:7b:d1:a0:
                    ba:d7:af:ce:fe:43:d9:e3:54:d0:de:39:44:25:0b:
                    3b:39:6f:41:6e:0d:d3:a4:74:7e:a8:93:29:a9:9a:
                    15:4e:0e:86:d0:84:8c:de:94:c9:c0:00:5e:17:aa:
                    20:7b:32:e8:eb:34:02:1a:a3:b5:5e:d1:c2:c0:9d:
                    ed:28:ad:c9:6e:ab:fd:ae:af:b9:07:86:81:8a:c7:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B1:FF:75:12:AA:5B:59:D1:9C:69:C6:1C:29:71:8F:10:E9:14:D0
            X509v3 Authority Key Identifier:
                keyid:BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:35:c1:63:cc:38:fe:a9:a4:b5:50:39:2e:13:ef:f8:9c:
         48:39:c9:a1:f0:3e:68:8f:77:09:38:da:75:39:02:e8:60:bc:
         0c:02:0b:0f:5a:c6:be:7f:f2:e9:04:53:a2:68:bf:0c:94:9b:
         ed:40:d2:c2:65:97:dd:d6:fe:84:41:0a:e9:5a:23:3e:cf:02:
         b6:48:9b:5f:41:aa:e3:53:61:0e:07:ea:ec:fa:9e:5a:da:b5:
         87:d0:22:cc:79:85:08:6b:e4:48:49:23:c2:37:e6:c6:8b:ba:
         3c:34:e7:1f:fa:af:a5:52:2d:29:89:d2:23:16:90:c5:86:64:
         07:4b:8a:d8:79:a7:66:8d:83:39:9a:6a:aa:a4:e9:71:5e:7f:
         84:3f:76:08:4b:7d:11:ce:cf:f0:50:0c:64:aa:86:09:83:df:
         fe:64:dd:b6:8b:b0:fc:c4:02:a2:f9:f7:6c:9a:0c:27:92:df:
         71:1b:77:ed:2f:39:3f:c3:a6:c0:55:b0:5b:15:31:3e:91:f8:
         fc:27:74:27:23:47:9b:70:f0:f6:78:f5:f0:fb:84:cc:c9:36:
         6c:95:ba:74:d4:74:bf:21:7e:fb:f8:bc:5c:4f:d0:d0:24:de:
         d0:2f:2c:fd:33:a9:e1:ef:18:38:53:ff:ab:0d:2e:56:c0:e2:
         bf:15:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:59 2024 by rpki-client on console-fra.rpki-client.org