Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.mft
File:                     VPtE7srY0H-E7TTgoitnHnDxauA.mft (raw, json)
Hash identifier:          b1yz059UitWFwWeO5QEBk4yf2uRhAspyfQAp1+qjgz8=
Subject key identifier:   96:DE:7D:FE:FC:02:04:6C:DE:7A:BA:F3:44:58:EE:97:DD:6C:85:0D
Authority key identifier: 54:FB:44:EE:CA:D8:D0:7F:84:ED:34:E0:A2:2B:67:1E:70:F1:6A:E0
Certificate issuer:       /CN=54fb44eecad8d07f84ed34e0a22b671e70f16ae0
Certificate serial:       018F874AC61B8FE6E6975B7554A785CC52C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPtE7srY0H-E7TTgoitnHnDxauA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.mft
Manifest number:          0C13
Signing time:             Fri 17 May 2024 16:02:55 +0000
Manifest this update:     Fri 17 May 2024 16:02:55 +0000
Manifest next update:     Sat 18 May 2024 16:02:55 +0000
Files and hashes:         1: VPtE7srY0H-E7TTgoitnHnDxauA.crl (hash: QkW33JsSLFiUw4WOgxUqiXUN8fRzXNIjMMX2Tbze+uQ=)
                          2: f28TCHkGl7rkIny32uMHBjB25h8.roa (hash: PN9FBzsqIGCVYmyuW944DVdpTPp6ivNFIwY0HT8dliw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPtE7srY0H-E7TTgoitnHnDxauA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c6:1b:8f:e6:e6:97:5b:75:54:a7:85:cc:52:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54fb44eecad8d07f84ed34e0a22b671e70f16ae0
        Validity
            Not Before: May 17 16:02:55 2024 GMT
            Not After : May 18 16:02:55 2024 GMT
        Subject: CN=96de7dfefc02046cde7abaf34458ee97dd6c850d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:28:f1:4d:ca:67:1f:f9:6a:33:7a:d6:9b:
                    2a:22:e9:8f:6b:4b:c9:0d:98:88:1a:57:26:88:7d:
                    65:1f:16:52:f6:7d:98:11:8b:13:53:8b:48:ea:91:
                    c3:68:6c:08:36:7a:00:bf:f4:9c:eb:e4:7b:3c:39:
                    a0:1f:cc:83:02:92:70:92:9d:8b:85:32:6b:8d:25:
                    cb:43:57:e1:11:b0:1c:3d:69:0b:75:e7:fb:33:6d:
                    9a:aa:96:76:37:68:01:ca:88:3e:d6:24:06:c4:a7:
                    42:b3:74:11:ba:b3:59:c4:84:ac:40:12:8f:8f:76:
                    18:32:8f:01:e0:94:fd:3c:c4:35:d6:e7:7b:a0:8f:
                    51:35:47:b6:6c:ac:07:44:2b:a4:de:24:f4:fe:5f:
                    8e:69:b3:b0:06:4c:eb:52:c9:08:69:f6:e7:d0:d0:
                    25:ec:90:08:c5:7a:32:6f:bf:32:b2:91:ab:f3:95:
                    e0:43:04:81:e6:88:7d:ce:1d:a2:ee:0a:13:b7:76:
                    e8:63:33:0f:b6:85:06:9c:d6:13:05:5d:15:0e:ff:
                    83:d4:2f:c5:f3:62:77:8e:b0:57:70:28:6e:81:71:
                    db:e7:3f:10:12:54:88:95:90:49:7c:c3:c2:8b:00:
                    33:a3:55:ec:3c:8a:9a:90:bb:85:30:58:e3:62:94:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DE:7D:FE:FC:02:04:6C:DE:7A:BA:F3:44:58:EE:97:DD:6C:85:0D
            X509v3 Authority Key Identifier:
                keyid:54:FB:44:EE:CA:D8:D0:7F:84:ED:34:E0:A2:2B:67:1E:70:F1:6A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPtE7srY0H-E7TTgoitnHnDxauA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:14:17:3e:bf:6d:58:d0:31:19:05:ca:0d:e4:57:aa:c5:7f:
         9c:90:b6:a1:5f:be:85:23:03:bd:a7:33:80:bf:4a:b7:45:64:
         97:ef:db:e8:d4:dd:3e:08:d5:26:e6:72:9c:28:be:76:f5:eb:
         ab:6a:3a:fc:18:36:80:6f:c5:7f:e3:a0:3e:27:a0:eb:d6:9d:
         37:bf:6a:f5:eb:81:04:62:dd:33:19:2a:25:01:72:2a:44:f8:
         4c:2e:23:e6:7f:8f:40:26:31:b9:8f:78:02:74:42:60:8a:de:
         02:46:e6:21:e5:2e:ff:1d:89:5e:1c:40:5c:56:f6:c5:a6:a3:
         18:9c:25:db:da:86:49:18:ba:b1:fc:e6:b5:ed:6c:85:45:33:
         5a:2e:18:e2:6f:2f:3c:c1:c5:2c:4e:3c:e9:59:d5:91:80:65:
         24:71:7d:11:0f:32:3f:55:67:44:15:f2:84:cb:ba:41:e9:be:
         b1:ff:76:e8:11:b2:48:b7:b8:70:87:6c:41:14:0e:a9:ea:0a:
         3e:8e:6d:7b:e2:b7:82:3b:3d:13:f0:b6:d3:1d:93:e5:54:b2:
         09:54:20:fe:78:0c:a1:4a:4d:6c:40:80:ed:5b:fb:82:d9:fc:
         79:b6:78:54:31:20:30:3a:9b:0a:96:2c:30:80:f9:26:c5:01:
         18:12:f2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSsYbj+bml1t1VKeFzFLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZmI0NGVlY2FkOGQwN2Y4NGVkMzRlMGEyMmI2NzFlNzBm
MTZhZTAwHhcNMjQwNTE3MTYwMjU1WhcNMjQwNTE4MTYwMjU1WjAzMTEwLwYDVQQD
Eyg5NmRlN2RmZWZjMDIwNDZjZGU3YWJhZjM0NDU4ZWU5N2RkNmM4NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg8o8U3KZx/5ajN61psqIumPa0vJ
DZiIGlcmiH1lHxZS9n2YEYsTU4tI6pHDaGwINnoAv/Sc6+R7PDmgH8yDApJwkp2L
hTJrjSXLQ1fhEbAcPWkLdef7M22aqpZ2N2gByog+1iQGxKdCs3QRurNZxISsQBKP
j3YYMo8B4JT9PMQ11ud7oI9RNUe2bKwHRCuk3iT0/l+OabOwBkzrUskIafbn0NAl
7JAIxXoyb78yspGr85XgQwSB5oh9zh2i7goTt3boYzMPtoUGnNYTBV0VDv+D1C/F
82J3jrBXcChugXHb5z8QElSIlZBJfMPCiwAzo1XsPIqakLuFMFjjYpQIyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbeff78AgRs3nq680RY7pfdbIUNMB8GA1UdIwQY
MBaAFFT7RO7K2NB/hO004KIrZx5w8WrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlB0RTdzclkwSC1FN1RUZ29pdG5IbkR4YXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iY2M4OTktN2E1NS00YzVjLWE5ZWQt
ZTVlMDJlZjE1MTI2LzEvVlB0RTdzclkwSC1FN1RUZ29pdG5IbkR4YXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iY2M4OTktN2E1NS00YzVjLWE5ZWQtZTVlMDJlZjE1MTI2
LzEvVlB0RTdzclkwSC1FN1RUZ29pdG5IbkR4YXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhQXPr9t
WNAxGQXKDeRXqsV/nJC2oV++hSMDvaczgL9Kt0Vkl+/b6NTdPgjVJuZynCi+dvXr
q2o6/Bg2gG/Ff+OgPieg69adN79q9euBBGLdMxkqJQFyKkT4TC4j5n+PQCYxuY94
AnRCYIreAkbmIeUu/x2JXhxAXFb2xaajGJwl29qGSRi6sfzmte1shUUzWi4Y4m8v
PMHFLE486VnVkYBlJHF9EQ8yP1VnRBXyhMu6Qem+sf926BGySLe4cIdsQRQOqeoK
Po5te+K3gjs9E/C20x2T5VSyCVQg/ngMoUpNbECA7Vv7gtn8ebZ4VDEgMDqbCpYs
MID5JsUBGBLyGQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:22:31 2024 by rpki-client on console-fra.rpki-client.org