Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File:                     vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier:          nzGqcay7c1jiTSS9g5LHQ+boAwKgAUeUvv6ez14lLEE=
Subject key identifier:   B1:B9:B8:14:5A:F0:40:C2:8F:92:68:EC:6A:BD:A4:A4:0A:4D:BD:29
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer:       /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial:       01901DEBC0745E44A1AB3CDA92F565011AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number:          04BA
Signing time:             Sat 15 Jun 2024 22:01:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:47 +0000
Files and hashes:         1: XyeCzG_wBf12nrFjyUT3zOVrgF4.roa (hash: B6WE3T2VnI0Q/ZB8p5ymbmWBBlTF/QgWmv6nMptwgFw=)
                          2: v5B6XJkuiUlxr77y-BFXalUmc7I.roa (hash: /t0ISmqyWZkTNYepoE3TrSigo0dNPkY5O1NlIYNgxZ4=)
                          3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: Y3GObhJaLFrtWDo2wtfvQHjIoG+PRV0ZVyVFM0593PM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:c0:74:5e:44:a1:ab:3c:da:92:f5:65:01:1a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
        Validity
            Not Before: Jun 15 22:01:47 2024 GMT
            Not After : Jun 16 22:01:47 2024 GMT
        Subject: CN=b1b9b8145af040c28f9268ec6abda4a40a4dbd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:65:60:f9:c5:0d:62:22:33:69:20:27:fa:bb:
                    15:fa:ca:51:99:eb:cf:a5:55:df:d3:5b:b2:4b:66:
                    a4:4c:ce:00:ee:f2:97:94:80:3f:38:e2:33:ac:bf:
                    88:fc:a5:a2:9b:34:b4:3e:ca:82:14:9f:ba:97:ee:
                    b2:7a:61:60:e1:e5:f9:7b:0f:85:33:00:a6:92:4d:
                    7f:60:f3:22:ce:4c:60:e5:57:2b:8f:6d:d0:e6:e1:
                    7c:7a:51:f4:02:82:a6:2a:38:71:a7:3e:10:dd:19:
                    9f:39:16:20:82:a9:87:79:63:e1:97:8d:55:41:fd:
                    88:c0:38:06:84:2c:53:93:d3:47:5c:dd:f5:78:99:
                    4c:24:58:81:cc:95:11:e3:64:ad:b0:7f:73:aa:73:
                    11:ad:b9:0b:fd:ec:2b:96:9c:cd:32:a5:1b:5d:62:
                    72:b1:29:ae:bb:51:db:0c:2b:f2:8d:9a:5a:68:18:
                    4c:6c:b0:df:02:31:bf:58:69:41:15:d4:89:f2:68:
                    3e:f8:b4:0b:be:f1:23:0d:23:89:d3:11:66:05:bc:
                    70:c6:a2:e5:a4:56:fa:bf:72:b8:bb:2d:31:2c:cf:
                    ba:dd:e8:0c:15:8d:6a:fc:7f:89:fa:b3:ee:a3:9f:
                    b9:4b:db:0a:90:6f:f4:ab:aa:bf:a3:05:98:20:e7:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B9:B8:14:5A:F0:40:C2:8F:92:68:EC:6A:BD:A4:A4:0A:4D:BD:29
            X509v3 Authority Key Identifier:
                keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:73:2d:ec:9e:7d:ac:d3:8d:88:3c:be:6b:55:ab:cb:e5:33:
         a4:60:07:f2:7c:4e:25:ab:79:b5:5b:c6:ed:e5:49:8f:97:7e:
         a7:6f:f7:67:3b:68:b4:cf:8c:b2:b6:74:ed:f4:5c:a4:d1:b4:
         ad:66:fc:02:76:4f:35:64:dc:38:18:95:25:f3:f1:86:29:14:
         f8:1e:63:b9:25:be:c2:c4:37:0c:d7:a5:72:f2:64:c3:e3:e7:
         c4:01:31:60:ed:57:a7:78:da:51:c8:8e:6f:e6:6e:7d:8d:87:
         65:fd:ed:ee:c2:56:e6:b8:78:62:8a:fe:f7:32:05:1e:93:fc:
         0b:ea:6b:8c:2c:0b:cc:4f:18:2b:03:b8:53:5a:93:98:a4:e5:
         83:74:6b:3e:54:f9:5c:37:14:78:bf:92:26:0f:4f:49:59:56:
         b0:4f:8d:69:a6:62:6b:8f:d8:0b:ab:d3:bb:3c:87:ac:a0:bb:
         59:5a:f9:c1:6d:62:51:c3:41:df:c8:76:d5:76:5c:7e:98:08:
         0c:17:ab:f9:0f:4b:81:b4:6c:f1:b8:27:60:7f:a7:c8:1d:3c:
         8c:ab:a7:ea:4b:b0:33:3a:d7:ac:f6:43:13:82:f7:7c:a8:c1:
         82:a6:86:59:01:62:d1:cd:97:8a:98:94:9f:27:51:97:9d:92:
         ec:8f:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:48 2024 by rpki-client on console-fra.rpki-client.org