Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File:                     VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier:          MuPTi2Pl7jBvpCqntmAAQRX3O0+T/K4UOHtxfTMI10w=
Subject key identifier:   8F:47:9A:F4:DA:A4:ED:E5:45:5B:E9:7F:06:55:57:C6:0E:0F:A4:99
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer:       /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial:       018F87B6C0D3FE7D4E2B0DFD343FC50D2C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:52 +0000
Manifest this update:     Fri 17 May 2024 18:00:52 +0000
Manifest next update:     Sat 18 May 2024 18:00:52 +0000
Files and hashes:         1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: ta1FwTvTYvOxKIl+bjiScoFQ5czSEc5I/9S/ofHUd3E=)
                          2: yBt31Rk9egf-5kskolTXZf3jJqY.roa (hash: eW9ohq70o3KoyzvvXsd3awO2dN6EFi1qKgeTt+A3wwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c0:d3:fe:7d:4e:2b:0d:fd:34:3f:c5:0d:2c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
        Validity
            Not Before: May 17 18:00:52 2024 GMT
            Not After : May 18 18:00:52 2024 GMT
        Subject: CN=8f479af4daa4ede5455be97f065557c60e0fa499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:95:6a:36:c9:67:5e:41:6e:75:26:c8:e4:
                    25:96:4d:65:00:6f:1d:3f:80:3f:9f:3e:97:33:79:
                    59:8a:70:46:23:34:8e:90:70:70:45:bb:73:85:1d:
                    bd:6c:01:36:4f:d6:57:4e:24:17:ba:cd:ba:2a:42:
                    24:48:05:7d:1e:99:33:a5:3e:d8:94:31:d1:6e:c8:
                    50:cf:72:ee:6b:9c:12:f8:79:67:10:8c:66:7b:1f:
                    12:d7:b9:8b:0a:ed:2b:cb:f8:e4:bf:57:2d:b1:de:
                    ce:f3:28:f9:0d:d3:d2:85:12:3a:86:0a:32:bc:f2:
                    87:c5:85:de:ab:d1:5f:76:71:4f:0c:6c:1f:b9:18:
                    c8:e3:56:f8:84:ca:96:54:2f:eb:8d:d7:72:47:f9:
                    f3:2e:d2:f4:d0:aa:3e:d8:0d:f1:18:2d:dd:29:de:
                    99:ff:97:da:c5:5b:88:51:b9:2c:f6:2b:b2:f0:88:
                    11:b3:49:78:9d:91:10:55:ce:c6:6a:0e:ff:9f:c8:
                    1d:c2:b5:ea:8e:49:1f:74:30:ed:82:0f:9c:08:52:
                    22:32:18:fe:68:be:3d:57:c0:3e:ec:82:18:ce:63:
                    9b:81:3d:e7:50:93:68:7a:46:8c:fc:38:f6:45:3d:
                    93:fb:ec:d3:3e:0b:35:02:55:0d:81:aa:82:b0:9a:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:47:9A:F4:DA:A4:ED:E5:45:5B:E9:7F:06:55:57:C6:0E:0F:A4:99
            X509v3 Authority Key Identifier:
                keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:31:ba:a8:20:8d:63:97:2b:88:5e:91:95:ed:9c:23:5c:a1:
         05:05:06:71:ea:59:8c:e6:8f:62:d2:0f:a9:a9:a0:cb:7c:ca:
         18:9f:ed:8e:a6:bb:a6:e9:a0:67:3f:29:3a:ae:74:e7:4f:89:
         26:36:e3:13:c2:93:5d:95:8c:5c:1a:dd:0e:00:5c:1f:77:39:
         ff:a8:14:6d:95:6d:b6:52:44:19:17:14:cc:3f:5a:d0:67:81:
         c4:d3:f4:8f:13:20:83:9a:49:ec:9a:42:d3:4a:6b:fe:55:d8:
         e8:81:cd:20:c3:4b:ef:d6:8b:ed:70:92:c1:12:88:3a:39:7c:
         a8:b9:8b:75:96:3f:ca:34:a1:90:46:22:8b:3b:dc:44:c5:e6:
         35:9c:3a:08:96:42:1d:e1:8a:ff:06:9c:6a:43:3b:21:d0:03:
         ec:e8:98:d6:1d:d5:12:94:45:7e:59:05:3f:20:d5:9a:8f:12:
         cb:a8:33:a1:b3:b7:1d:f2:79:97:3f:09:3c:21:02:41:2d:a6:
         44:60:5e:6b:79:a2:31:2b:57:65:f5:0b:d2:66:8c:1a:f8:4c:
         d7:35:fd:78:eb:90:4b:c0:de:f6:3a:c8:c3:00:e4:08:5f:59:
         43:52:42:2e:d5:2b:31:da:ae:1a:e3:07:a3:8d:3c:17:36:f9:
         5b:7f:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:07:33 2024 by rpki-client on console-ams.rpki-client.org