Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File:                     VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier:          L84muLxoGLKA7H8lks85bBXWtyf3iyRhDRvLu2i9WMo=
Subject key identifier:   51:B9:FC:DF:B0:2B:7A:75:98:A4:67:49:72:3A:4D:3B:F7:24:42:3F
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer:       /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial:       019645567EE9491C93291BA446E6FE5711E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 20:00:18 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:18 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:18 +0000
Files and hashes:         1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
                          2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: UY8hAXiqdfs1bH7ztP4NZ8nStemGFNgTXE6bFRtFvYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:7e:e9:49:1c:93:29:1b:a4:46:e6:fe:57:11:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
        Validity
            Not Before: Apr 17 20:00:18 2025 GMT
            Not After : Apr 18 20:00:18 2025 GMT
        Subject: CN=51b9fcdfb02b7a7598a46749723a4d3bf724423f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:fb:68:ad:f2:ac:66:a7:10:5a:b8:41:9a:
                    e2:2b:b8:4c:80:b1:a5:5d:95:e5:40:58:50:66:ea:
                    51:83:30:73:06:14:43:09:9f:13:99:11:07:87:a6:
                    f7:17:09:cd:35:af:3e:65:51:85:3b:78:37:2c:64:
                    ae:aa:af:b1:c7:35:e0:bc:77:2e:87:88:fc:9f:d5:
                    43:29:39:34:ac:d6:69:c0:21:72:3b:f4:45:a7:39:
                    8a:9f:ae:17:dd:ee:2b:c7:3c:6b:33:cb:5c:a8:e6:
                    16:5a:92:f1:7a:46:17:1e:36:90:d9:92:7a:2a:85:
                    1a:88:7a:9a:5f:b7:db:07:68:f1:a2:f1:7c:84:5c:
                    39:a6:1e:80:73:31:f0:38:69:3a:cb:87:2d:14:10:
                    5d:b7:de:33:6c:f0:7e:aa:b6:3a:6d:a9:fd:44:6f:
                    9b:df:b4:e8:48:1a:86:70:48:f9:80:ad:a4:05:4e:
                    2a:7d:23:95:b9:68:b5:0f:dc:52:a8:7d:79:0a:e4:
                    ad:60:38:8b:e5:a5:25:04:0a:99:c4:e7:c9:2e:5a:
                    09:8b:82:7c:ab:49:c7:6f:1a:1a:cf:75:73:25:b6:
                    f5:c9:58:f5:6b:4f:e5:e6:ac:a9:5e:20:f4:07:c0:
                    72:c9:52:d6:4a:aa:02:49:ef:03:0c:24:50:d9:66:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B9:FC:DF:B0:2B:7A:75:98:A4:67:49:72:3A:4D:3B:F7:24:42:3F
            X509v3 Authority Key Identifier:
                keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:5e:3f:0c:70:1a:25:d1:df:3a:5a:4e:6c:f8:69:e0:f2:12:
         73:d0:41:6a:24:bd:0b:ed:b1:df:3d:cb:a6:65:8c:a9:fa:97:
         04:54:b4:f6:c3:f1:7b:b1:35:7d:e5:fd:60:27:d4:53:2c:17:
         a0:d3:b8:cf:d8:19:bf:c0:c9:e9:e4:76:8d:9d:ea:f7:cf:47:
         a3:3e:e5:3e:a0:da:9a:69:91:67:e7:36:4c:ec:39:ab:c2:97:
         a3:1d:3d:6d:37:17:ff:1e:89:fd:0a:5a:38:3c:4f:e3:54:1a:
         09:65:9a:c1:41:60:99:40:7f:3b:4e:48:2f:d5:26:f1:c2:d8:
         f1:91:26:e3:0a:6d:8a:22:96:55:72:b7:aa:44:d7:7f:8c:b7:
         79:17:ae:81:17:0f:23:10:83:46:16:cb:eb:ff:d3:70:74:aa:
         04:28:8b:49:82:18:5f:ff:37:79:a1:e7:11:68:64:85:1d:74:
         73:3c:e1:74:b5:98:51:e8:93:f3:23:a6:09:23:5c:43:36:f2:
         45:4d:40:03:eb:99:6a:d2:54:6e:94:ec:e6:87:ea:66:6a:a3:
         db:94:0c:f5:27:67:67:fe:6f:5e:7c:c0:42:f9:44:2c:6d:ef:
         8e:b3:e6:02:bb:39:2f:62:10:02:1f:13:af:09:dc:d0:10:ea:
         d4:85:06:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVn7pSRyTKRukRub+VxHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Mjg1ZmZlZTk3MzEyYzUxYzNhODA1ZmY5MzQwZWJlYzMz
NTI3MjAwHhcNMjUwNDE3MjAwMDE4WhcNMjUwNDE4MjAwMDE4WjAzMTEwLwYDVQQD
Eyg1MWI5ZmNkZmIwMmI3YTc1OThhNDY3NDk3MjNhNGQzYmY3MjQ0MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt/7aK3yrGanEFq4QZriK7hMgLGl
XZXlQFhQZupRgzBzBhRDCZ8TmREHh6b3FwnNNa8+ZVGFO3g3LGSuqq+xxzXgvHcu
h4j8n9VDKTk0rNZpwCFyO/RFpzmKn64X3e4rxzxrM8tcqOYWWpLxekYXHjaQ2ZJ6
KoUaiHqaX7fbB2jxovF8hFw5ph6AczHwOGk6y4ctFBBdt94zbPB+qrY6ban9RG+b
37ToSBqGcEj5gK2kBU4qfSOVuWi1D9xSqH15CuStYDiL5aUlBAqZxOfJLloJi4J8
q0nHbxoaz3VzJbb1yVj1a0/l5qypXiD0B8ByyVLWSqoCSe8DDCRQ2WZXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG5/N+wK3p1mKRnSXI6TTv3JEI/MB8GA1UdIwQY
MBaAFFQoX/7pcxLFHDqAX/k0Dr7DNScgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjIt
OGE3ZTYzZThjZDc1LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjItOGE3ZTYzZThjZDc1
LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA114/DHAa
JdHfOlpObPhp4PISc9BBaiS9C+2x3z3LpmWMqfqXBFS09sPxe7E1feX9YCfUUywX
oNO4z9gZv8DJ6eR2jZ3q989Hoz7lPqDammmRZ+c2TOw5q8KXox09bTcX/x6J/Qpa
ODxP41QaCWWawUFgmUB/O05IL9Um8cLY8ZEm4wptiiKWVXK3qkTXf4y3eReugRcP
IxCDRhbL6//TcHSqBCiLSYIYX/83eaHnEWhkhR10czzhdLWYUeiT8yOmCSNcQzby
RU1AA+uZatJUbpTs5ofqZmqj25QM9SdnZ/5vXnzAQvlELG3vjrPmArs5L2IQAh8T
rwnc0BDq1IUGFA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:57 2025 by rpki-client