Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File:                     vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier:          0kisI9Fv/m3NgQugZ5r3vLgP93rcco1gqKD/kFGOwkI=
Subject key identifier:   EC:69:55:5D:09:CA:E7:9E:AB:46:9A:9D:7E:4E:0E:5C:B4:4C:5E:DD
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer:       /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial:       0190347293A31860EC4F2F3908636AD2FAF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number:          11D1
Signing time:             Thu 20 Jun 2024 07:00:42 +0000
Manifest this update:     Thu 20 Jun 2024 07:00:42 +0000
Manifest next update:     Fri 21 Jun 2024 07:00:42 +0000
Files and hashes:         1: M3g8xo7SPfnePK-O4xXUvczEzgs.roa (hash: Yw4IKRU3tB4WCkSGOrEkYad79dMlCjHw8+KPJ0RnYCQ=)
                          2: bIDmk3x0i1QkM_KacacgH75P1ac.roa (hash: SYYKej9n1crqgfF0Cgn32ubFTOGUc2VbuorTTWWE4/0=)
                          3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: +U6R6alvdX69fYrBF0ld6z1RExrQ1ep6exNGuF/HuS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:72:93:a3:18:60:ec:4f:2f:39:08:63:6a:d2:fa:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
        Validity
            Not Before: Jun 20 07:00:42 2024 GMT
            Not After : Jun 21 07:00:42 2024 GMT
        Subject: CN=ec69555d09cae79eab469a9d7e4e0e5cb44c5edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dd:40:a2:2d:db:f2:e3:6d:55:68:42:5e:48:
                    b3:5a:82:d6:d4:3e:3a:c0:b4:d3:37:e1:54:a4:da:
                    2f:9d:95:4d:66:2b:48:06:16:42:9e:6d:9c:94:29:
                    fe:f7:f4:f1:f4:cb:89:e4:ff:8a:62:9c:0a:a5:e7:
                    de:e2:52:b6:38:d5:a7:d9:ce:3e:e4:5e:74:f5:88:
                    20:d1:fc:5b:d3:51:e2:2f:53:ea:c3:75:88:96:56:
                    b9:55:e4:50:18:df:65:59:a6:b0:79:c0:ef:7d:9d:
                    7a:f9:73:0e:32:41:64:3c:3f:03:a0:38:d3:fd:44:
                    7c:7f:14:8b:2a:67:61:48:34:95:74:78:78:5b:45:
                    93:61:8a:9a:c4:fd:ab:94:c4:72:30:55:43:12:ff:
                    b9:02:4a:a3:7a:d5:d2:c4:04:9d:c6:61:06:30:e1:
                    09:e6:90:60:59:dd:63:1f:1d:c1:50:d4:23:58:7d:
                    bd:bf:14:a4:a8:ec:2d:40:d0:1f:c3:54:c8:ef:4f:
                    58:58:25:7f:c6:b5:f3:5e:3a:47:0a:19:d0:e4:a8:
                    f3:0a:d9:18:11:e5:51:80:d0:7d:ed:10:fa:5d:78:
                    69:d0:fb:38:13:ed:7f:32:6a:db:f8:ef:c6:bd:70:
                    3c:07:c6:d5:36:ff:0f:6d:ec:31:87:00:a1:55:e5:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:69:55:5D:09:CA:E7:9E:AB:46:9A:9D:7E:4E:0E:5C:B4:4C:5E:DD
            X509v3 Authority Key Identifier:
                keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:71:59:4f:44:38:4b:b4:38:02:c0:ad:13:0d:63:93:16:98:
         2a:14:4b:53:f8:92:ce:a3:0a:4b:b7:70:02:58:3e:fc:7b:2c:
         80:ce:d9:3d:2b:64:43:7c:de:4d:a6:ce:b9:2c:a2:50:bb:9e:
         54:42:4d:22:be:be:9e:bd:ed:84:1c:3e:5e:ad:55:1a:97:f3:
         35:a1:88:33:a3:1c:cb:ab:f3:a2:25:f6:d1:52:e8:ab:c2:a4:
         d1:c2:f3:12:f1:f3:e5:d8:97:08:26:11:4f:74:26:bc:d5:a8:
         31:b7:c4:88:b4:bc:14:71:83:e5:a4:44:fa:5f:67:19:b0:9e:
         c6:60:c1:bd:39:bf:2c:23:ba:5d:aa:b9:5e:78:5c:2e:b0:fa:
         67:55:7d:cd:e4:c3:be:c1:20:80:27:1d:fa:6a:bc:ac:29:90:
         a0:a3:57:2f:8f:e6:a1:61:43:84:4a:04:60:cf:bc:74:62:5c:
         26:b5:59:e2:8d:72:58:a1:ef:04:39:c0:79:a0:b8:a1:55:ea:
         cb:c0:7f:e1:32:b0:89:62:8d:a1:f5:5c:a1:23:4b:35:2d:43:
         5d:f6:5f:60:b0:cf:b7:0a:e3:4c:52:ca:68:e9:9b:9e:1d:a7:
         28:90:63:e9:13:23:4f:5c:b5:4c:dc:33:55:a4:d3:65:c3:39:
         75:58:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:13:35 2024 by rpki-client on console-fra.rpki-client.org