Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File:                     VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier:          GhAqBUWzb2bVUj8W+3A4WrVtgkDyv+YABZK6cuA/Btg=
Subject key identifier:   50:97:A1:7D:D1:64:DC:19:97:9C:DE:9E:9B:E8:E1:51:84:E0:18:0F
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer:       /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial:       018F885AE96E150F14BF2D23F588B24BB4E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 21:00:10 +0000
Manifest this update:     Fri 17 May 2024 21:00:10 +0000
Manifest next update:     Sat 18 May 2024 21:00:10 +0000
Files and hashes:         1: CRreIKHNlP1KuobAlT9gmQax60w.roa (hash: uSSvvwPOC7wcfA3pJp9+gT0OgAVaUAKuf8Ub5i1wPMM=)
                          2: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: l9THxmxxZrEzmJz8wp70pqMbiEX0u9oIWp1p6Bpse4c=)
                          3: XU3q0IBtUDQXRpSHnhyuYJEzcz0.roa (hash: s+DHyxqRppYfmThn8ejC7CL+OsTfNd1ndOYXJH94OFE=)
                          4: e249lnZKJfrd8xANMbWOM3lvWU0.roa (hash: PyNbDLTSrWKbh0Jw9bJAfOrcvJwiC+K0jy+DxilTDNA=)
                          5: vxvXk9DIOcSwt1QR9I_aAZEuBy4.roa (hash: x2BEoEbXia8G/PuUTZSPnio9Q4Ml/4IpZKN02kdaNec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:e9:6e:15:0f:14:bf:2d:23:f5:88:b2:4b:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
        Validity
            Not Before: May 17 21:00:10 2024 GMT
            Not After : May 18 21:00:10 2024 GMT
        Subject: CN=5097a17dd164dc19979cde9e9be8e15184e0180f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8b:ff:b2:b3:72:07:e2:80:5d:0e:ab:ae:9a:
                    18:3a:90:b1:53:b0:09:43:d8:3d:a1:d8:4f:d2:54:
                    2e:b3:bb:a0:26:ff:d5:11:37:87:05:3f:75:9a:26:
                    23:d5:b1:58:9a:55:ef:86:c5:2c:86:47:6e:4c:1b:
                    70:09:fd:12:f1:11:59:bf:70:80:46:1c:f6:ab:4e:
                    29:e2:0f:c7:5d:75:4d:60:88:c0:7d:03:d4:b5:9c:
                    e8:b7:8c:2d:46:66:14:92:d6:e7:6b:59:0b:57:d0:
                    d7:a8:81:ce:d2:63:06:73:c9:f2:46:d8:73:3a:e9:
                    9f:75:a0:c0:fc:c7:a1:9c:37:b9:fc:42:a9:b1:0a:
                    e6:b6:78:90:54:6d:82:9c:59:40:c9:d2:43:bf:5f:
                    11:01:73:8f:ef:a5:b6:3f:fc:f4:e4:77:f5:66:51:
                    50:81:eb:b2:5e:bc:e0:ca:e9:19:af:7e:01:6b:8a:
                    bf:3e:e6:88:37:40:bd:8e:b3:1a:a8:e0:3a:ec:20:
                    c9:77:6b:3d:7c:a3:5b:c4:ae:f9:82:19:c4:98:29:
                    75:cc:a2:3f:47:df:28:04:a9:90:5c:a2:35:6b:1d:
                    a7:02:23:db:03:db:59:e7:03:a7:2f:7e:74:12:47:
                    2f:98:de:b4:79:94:8b:fa:18:b0:bb:dc:93:94:e9:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:97:A1:7D:D1:64:DC:19:97:9C:DE:9E:9B:E8:E1:51:84:E0:18:0F
            X509v3 Authority Key Identifier:
                keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:de:18:e1:96:6a:45:50:21:8f:6f:5d:6f:9f:b4:29:84:
         1d:c1:8a:bf:82:a8:7c:bb:5f:76:58:de:3c:8d:ce:a9:f5:b2:
         bc:ed:9f:61:25:3d:60:50:ab:31:88:ed:8a:38:6b:3f:b0:a3:
         17:6e:cb:86:fa:21:6f:dd:ee:b9:e5:71:89:d9:ed:8b:e3:cd:
         41:88:96:fb:38:3e:57:13:fc:3f:67:1c:70:f7:ee:42:59:f9:
         3e:a7:32:a6:21:64:8a:0c:30:4f:55:27:d5:d5:2f:aa:ff:b7:
         5c:da:51:3b:a3:5c:ef:ee:85:7d:c8:12:30:4a:d5:37:8c:c5:
         51:c2:4e:bb:e7:65:a1:20:30:66:eb:31:c9:38:b5:b4:d2:fa:
         76:d0:ea:b1:d3:a3:73:fd:2d:ff:45:31:6d:8e:f1:87:56:e9:
         60:7f:8a:ab:5d:f7:eb:1e:1c:87:e3:27:86:da:fe:07:c9:f3:
         98:59:81:ab:8f:52:66:59:a2:d1:1b:ea:94:fd:3f:97:c5:74:
         bb:61:23:b4:8c:f4:fe:92:1d:c1:20:70:e4:75:50:ce:23:01:
         15:a9:87:38:bf:fe:07:60:57:26:6f:b4:68:94:1d:ce:a6:88:
         40:7e:65:8a:65:5e:bb:dc:df:73:aa:96:ec:b5:2f:71:18:18:
         6b:d4:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:52:36 2024 by rpki-client on console-fra.rpki-client.org