Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File:                     vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier:          Vt1Ufc7jD/RGvCRx1cosD8ukkEv+CNynuY/LcFFlrcc=
Subject key identifier:   E8:E2:EE:B5:23:7A:3D:D8:2A:0A:C0:AF:69:B8:C8:25:73:E6:B1:4A
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer:       /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial:       019053FDDC6EEAA2E464A2CD1B2AEBB0FA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number:          BF
Signing time:             Wed 26 Jun 2024 10:01:04 +0000
Manifest this update:     Wed 26 Jun 2024 10:01:04 +0000
Manifest next update:     Thu 27 Jun 2024 10:01:04 +0000
Files and hashes:         1: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: s5hvJ3T5sxNRa8tzoVmoICvSyvNcEELiMC+GyZmSKRI=)
                          2: yNW5_hyXVzvJdrXPEQbcpr7H6Fw.roa (hash: RYacxBTBGHaXgdpp0aFWY6YycbG4NZhkZ7bAbXDgK80=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:fd:dc:6e:ea:a2:e4:64:a2:cd:1b:2a:eb:b0:fa:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
        Validity
            Not Before: Jun 26 10:01:04 2024 GMT
            Not After : Jun 27 10:01:04 2024 GMT
        Subject: CN=e8e2eeb5237a3dd82a0ac0af69b8c82573e6b14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:20:e2:c8:e4:d7:7a:97:59:64:25:65:de:
                    39:9d:ed:a4:36:8a:6a:48:19:3c:62:a0:75:7d:24:
                    e0:33:eb:72:bb:c5:4c:d2:0b:3a:9d:69:31:33:c7:
                    ae:8d:06:29:8f:22:3e:5e:70:7d:24:f8:d0:9b:e1:
                    a6:0b:b9:af:68:36:91:68:2d:10:5e:96:56:17:a6:
                    41:6b:b2:c1:f5:8a:a8:20:5b:00:fb:e9:e0:11:9a:
                    65:c5:a4:45:f0:98:01:39:3b:fc:cb:1c:e7:86:7a:
                    7d:78:3c:3d:d2:fc:b6:8d:4b:63:70:a5:e5:1a:d8:
                    7f:7b:3b:71:54:27:b1:da:5f:2a:5e:e3:6c:5a:43:
                    b3:04:62:ce:b3:7a:1d:c7:3e:06:bd:13:22:3f:85:
                    ac:36:10:ef:a5:85:82:9e:e9:a4:71:45:7b:92:7a:
                    f0:c5:c5:1f:d0:72:e8:43:7e:33:f8:da:8a:c5:17:
                    5f:78:d1:6a:dd:e9:98:eb:ac:b5:7f:02:4d:7b:e1:
                    c1:43:ed:c7:fc:7d:24:3f:1e:1a:86:a3:15:9b:3f:
                    91:b7:e5:e2:00:02:45:bb:e7:fc:f1:12:67:f8:3d:
                    18:82:06:92:ce:77:86:20:28:87:d9:d0:84:e4:0b:
                    ee:b6:43:4a:cf:e8:08:c0:7f:6c:34:3a:05:7e:ac:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:EE:B5:23:7A:3D:D8:2A:0A:C0:AF:69:B8:C8:25:73:E6:B1:4A
            X509v3 Authority Key Identifier:
                keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:10:32:6e:06:05:55:f4:63:b5:ea:8a:05:a1:d8:9e:68:af:
         ca:bc:24:33:df:e8:30:da:51:31:e8:24:5e:00:51:9f:2d:26:
         74:e5:f0:e0:2b:4d:a1:57:76:ef:7a:40:3b:80:c9:bf:0d:e4:
         8b:10:da:8d:da:94:e3:49:60:7c:9b:48:a7:4a:fc:e3:90:0d:
         73:8e:00:13:fb:4f:14:30:68:bb:73:0c:d2:26:7c:43:ce:48:
         46:b5:91:41:b1:03:da:44:81:c8:fa:9b:43:4f:bf:03:50:87:
         dc:f6:e5:a3:ef:09:34:ef:3f:53:4d:c0:30:e8:99:cc:12:78:
         be:1e:68:9f:62:86:73:9a:7e:2c:2d:4a:f7:2d:1d:b9:d1:62:
         87:21:60:1c:4e:99:1a:8d:73:ec:b9:18:b2:23:99:a8:16:76:
         6a:90:13:02:37:20:c9:88:9e:5f:c5:f7:b1:59:c4:57:6b:68:
         dc:e6:e8:3c:aa:df:13:8b:cf:a0:b9:52:40:25:d3:ee:db:db:
         bc:d8:f2:2e:b9:6f:4d:8c:49:f1:5b:57:3f:17:81:fc:07:1d:
         cd:95:bb:f8:84:f3:4c:93:9b:70:76:2a:39:1b:5d:70:58:d9:
         0d:7f:9f:e2:96:88:1c:21:b0:29:2f:f5:ca:f5:34:ae:2e:5a:
         32:83:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:07:23 2024 by rpki-client on console-fra.rpki-client.org