Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File:                     VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier:          aG5iNrRyd3dER3o7+YByjouGYo5dHKrbS1zg1hQJd84=
Subject key identifier:   38:AC:CD:59:09:74:53:68:AC:5F:D7:D8:0E:0C:98:A8:4A:52:C8:D6
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer:       /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial:       018F874B09470AC9F759DCECC0938B5E591F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number:          0C5F
Signing time:             Fri 17 May 2024 16:03:12 +0000
Manifest this update:     Fri 17 May 2024 16:03:12 +0000
Manifest next update:     Sat 18 May 2024 16:03:12 +0000
Files and hashes:         1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: QfI7JEAujaV91MOg0VAUD+tY0pmcb9Y6vPeXD/wUZfY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:09:47:0a:c9:f7:59:dc:ec:c0:93:8b:5e:59:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
        Validity
            Not Before: May 17 16:03:12 2024 GMT
            Not After : May 18 16:03:12 2024 GMT
        Subject: CN=38accd5909745368ac5fd7d80e0c98a84a52c8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:39:f1:94:35:a8:5f:44:95:78:1c:b4:49:
                    7c:11:db:bd:b7:3e:e0:74:42:8d:80:69:24:7d:e0:
                    5e:eb:e9:09:56:f0:67:93:5b:2f:1c:3a:ff:c3:25:
                    a2:6a:48:7a:e7:a9:ef:75:02:88:e5:d2:76:c3:4b:
                    33:85:0a:63:ab:85:bd:d1:34:6a:54:ef:cb:88:3a:
                    c8:50:88:70:39:00:bf:43:a5:eb:8d:ec:47:7a:49:
                    bc:58:33:31:2a:f9:12:e2:45:d1:29:d5:08:fa:f5:
                    70:57:71:90:aa:d6:3f:99:ba:f7:00:69:eb:4e:26:
                    7a:db:56:91:a2:fe:98:e8:5b:48:cd:03:fd:7f:8f:
                    c0:31:53:da:a8:85:8f:2d:3d:ba:76:61:4c:cb:42:
                    ff:5d:33:e5:81:30:78:82:d7:62:8f:db:dc:fb:9d:
                    1c:bf:69:15:c2:25:dc:db:c0:2d:c0:30:c1:ef:8f:
                    ac:7f:9f:cb:a2:2c:82:e5:df:62:bb:c0:ce:3a:5a:
                    ae:b5:71:cf:72:6a:09:5e:91:1a:37:00:30:18:0e:
                    73:47:52:de:97:86:2a:93:0c:db:a8:bc:57:91:e7:
                    68:ad:39:fd:0b:f8:03:fc:09:23:30:41:12:06:86:
                    0c:69:9b:3d:fb:e1:ea:e9:f0:f7:05:80:ab:09:5b:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:CD:59:09:74:53:68:AC:5F:D7:D8:0E:0C:98:A8:4A:52:C8:D6
            X509v3 Authority Key Identifier:
                keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:08:b9:07:00:e6:37:5f:0e:64:98:c8:46:59:ba:e4:8d:
         f8:0b:a4:4d:00:f1:ec:e8:00:9b:5f:df:37:59:60:a6:ea:6c:
         9a:bd:13:55:4b:37:f6:da:0d:b7:40:d8:70:fa:17:c8:81:29:
         5f:f9:b7:98:c5:7e:14:0f:fd:ea:63:4b:36:b2:69:3a:a0:7f:
         54:cf:91:f4:64:60:d8:34:dd:92:77:c1:59:76:f5:bf:c2:11:
         9e:8d:d3:a3:ac:65:fc:3d:e3:e3:9d:07:55:b8:6d:04:89:b5:
         ff:fa:7f:52:0b:54:4b:3a:81:e7:61:8a:13:a5:7e:52:3b:1d:
         cd:f0:bc:e4:98:1a:76:7c:b9:97:4b:a6:ba:d2:48:78:66:1c:
         f3:af:b6:42:96:5d:8d:f1:4d:06:c3:73:f5:3b:e4:26:09:41:
         0a:c2:20:a0:43:e9:bd:7b:01:53:8d:5f:24:b7:98:39:2c:db:
         76:9b:28:af:63:77:c2:12:31:94:5f:cf:8b:2e:07:7e:07:50:
         86:2b:6c:db:49:ba:ce:e7:56:9e:6d:3e:72:33:93:e8:11:6f:
         2f:6f:80:32:73:85:f4:be:5e:9d:05:14:6b:49:9d:3f:f8:2c:
         bc:2b:b2:4c:26:f4:df:9a:84:0c:e8:2f:0f:65:56:50:d8:3f:
         f4:d9:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:41 2024 by rpki-client on console-ams.rpki-client.org