Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File:                     vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier:          4v26azbCaIwZjiezAfJMh6k6/KuqxpQRsnkYObMo6o4=
Subject key identifier:   1B:2F:CA:C6:15:DE:2C:68:92:B1:24:88:62:9A:8E:A6:72:41:E1:51
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer:       /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial:       018F885B423160AEED1765081EEBC5A0CF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number:          0E49
Signing time:             Fri 17 May 2024 21:00:33 +0000
Manifest this update:     Fri 17 May 2024 21:00:33 +0000
Manifest next update:     Sat 18 May 2024 21:00:33 +0000
Files and hashes:         1: 35xjOqxW6rFHScqa9K2M7EFP5IY.roa (hash: OE/LRPVkfS18gE8Re0BnKo7k/Ftr56OgDuFw6SsSqeo=)
                          2: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: PWnIPBZj7dTLsTdB0cvJxdzoMjDKFh5ldw6gb/DLHb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:42:31:60:ae:ed:17:65:08:1e:eb:c5:a0:cf:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
        Validity
            Not Before: May 17 21:00:33 2024 GMT
            Not After : May 18 21:00:33 2024 GMT
        Subject: CN=1b2fcac615de2c6892b12488629a8ea67241e151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:71:96:bb:03:6a:51:c8:2b:d3:d1:0f:46:
                    77:7c:c7:b4:24:ff:27:28:6c:17:a7:ff:9d:5c:28:
                    d2:40:36:44:32:6e:6a:96:3f:fa:f3:98:2c:27:50:
                    f7:dd:ce:29:52:a2:e0:50:49:42:e7:d7:93:f7:67:
                    39:47:19:16:07:b3:e8:ed:93:38:14:b1:4f:bc:7b:
                    c6:94:2c:ec:5f:58:be:bc:3c:40:5f:da:0e:bb:69:
                    ab:0f:28:41:22:b8:0d:7a:a1:3e:e4:e3:d1:e6:81:
                    1f:ff:6b:c0:dd:9d:49:de:c2:b2:5f:0d:81:2d:42:
                    19:77:34:3b:65:8d:6e:a8:f8:94:87:e6:c6:ad:2e:
                    64:13:c6:86:18:7b:39:d6:b6:85:18:5f:02:84:e2:
                    3e:b9:14:3e:cf:5f:3d:7b:22:50:03:65:91:a0:e3:
                    66:a7:5d:4a:59:00:2a:d9:37:ec:56:8e:7d:9c:9d:
                    08:b7:4e:e1:5f:60:e3:57:15:e3:72:60:64:50:af:
                    3f:1e:62:77:ca:87:3f:0a:01:b9:5f:3c:fd:4d:eb:
                    d5:93:c2:fb:44:06:29:4b:e2:79:4c:30:cd:bb:d7:
                    5c:83:49:00:3d:91:e5:db:1d:b9:94:0c:b9:fc:de:
                    9b:25:6a:50:c3:05:81:e0:77:42:ec:69:4e:fe:4d:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2F:CA:C6:15:DE:2C:68:92:B1:24:88:62:9A:8E:A6:72:41:E1:51
            X509v3 Authority Key Identifier:
                keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:18:b0:b6:bf:25:f9:61:38:a0:a8:cc:84:f1:33:ce:44:
         53:28:f7:ba:10:65:4b:89:e4:73:b3:e6:99:35:91:13:66:f4:
         ee:e1:87:90:76:f2:bf:cb:9c:6a:fb:4d:e7:43:5d:49:c1:0f:
         7b:25:e1:01:9f:74:0f:b3:23:aa:55:e4:6d:5c:84:ff:27:aa:
         19:32:ee:84:1d:7b:35:7b:38:db:4c:78:20:3a:7a:48:c7:7f:
         ca:ee:6c:d2:9f:65:a4:9d:cb:9c:eb:0f:c3:14:0e:5a:cb:e6:
         90:af:3b:29:8c:2d:a3:81:09:c6:bd:71:44:6d:a6:a6:03:96:
         b9:78:d6:67:d3:19:cf:50:91:36:01:90:d4:10:58:ff:d4:9e:
         0c:0d:7e:ef:ab:df:29:fb:cf:ea:27:86:67:2f:98:3f:f0:ce:
         9f:52:ad:97:86:a7:c4:84:94:ff:54:9e:8e:7e:a9:ae:36:77:
         3a:14:66:0f:a0:be:83:02:43:10:84:ab:c8:d7:ab:58:65:d6:
         99:7e:67:f0:4c:d5:ee:58:11:32:7f:82:21:4c:3c:30:d6:dc:
         35:70:f6:10:26:18:57:45:04:a8:68:71:78:63:87:b7:68:81:
         c1:3f:31:65:48:29:64:cc:1a:ac:14:89:1d:65:75:ed:f5:55:
         b6:5a:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:42:31 2024 by rpki-client on console-fra.rpki-client.org