Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File:                     VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier:          damckiXezFZAlW5k1ZDFYmGfXilLKrLpgm8EJwWFz7s=
Subject key identifier:   A7:ED:26:8F:74:D1:54:6A:5E:8F:CA:70:E1:22:56:A5:C1:09:F0:6D
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer:       /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial:       018F87488D8FFA560A1084CD19848DFF35D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number:          05D8
Signing time:             Fri 17 May 2024 16:00:29 +0000
Manifest this update:     Fri 17 May 2024 16:00:29 +0000
Manifest next update:     Sat 18 May 2024 16:00:29 +0000
Files and hashes:         1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: tpVw7VGtK9gF6DxkVjM4ZUh75vSAXkRv0Z5uac6hwYk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8d:8f:fa:56:0a:10:84:cd:19:84:8d:ff:35:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
        Validity
            Not Before: May 17 16:00:29 2024 GMT
            Not After : May 18 16:00:29 2024 GMT
        Subject: CN=a7ed268f74d1546a5e8fca70e12256a5c109f06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:60:a7:9f:16:da:b5:b3:57:6b:9a:04:c2:
                    3b:61:89:18:0f:46:6c:ca:01:62:5d:dc:73:40:1c:
                    6a:ea:34:9c:2e:f8:30:3f:9d:32:6d:62:1a:2f:53:
                    e8:d1:c8:94:c0:a9:fc:6a:dd:f9:09:66:e0:0a:48:
                    53:de:a1:4c:a5:3c:05:b3:40:ae:42:2f:f2:a8:dc:
                    c2:4e:cb:6f:79:70:4a:75:da:57:1e:29:f2:ea:74:
                    73:64:62:18:6d:01:cd:35:b1:77:03:df:b8:44:a2:
                    3c:96:6e:99:31:ec:3e:5c:b9:5a:a0:9f:4f:22:68:
                    4f:64:f2:55:26:74:97:c7:14:77:c4:eb:df:71:20:
                    e4:a8:42:3b:2d:2c:8c:f0:09:5f:3e:2e:a1:2b:da:
                    b4:8a:89:62:8d:2f:44:30:2b:47:6e:44:6f:cc:98:
                    60:48:72:0a:16:de:a4:3f:d1:ea:3a:f4:f2:93:66:
                    50:58:b4:28:39:fd:87:d5:68:c9:5c:3b:69:8f:06:
                    15:c0:b1:c8:d7:4f:b7:28:15:ee:6a:48:92:09:7c:
                    c8:95:9b:38:18:a0:5b:88:5e:ec:5a:26:f5:24:af:
                    4f:82:36:50:50:7d:d9:b6:6e:fc:e1:b4:7a:b5:f1:
                    32:d5:a1:4d:ab:d5:06:63:62:2b:5d:da:ce:3e:21:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:ED:26:8F:74:D1:54:6A:5E:8F:CA:70:E1:22:56:A5:C1:09:F0:6D
            X509v3 Authority Key Identifier:
                keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c7:d1:40:f8:1b:c3:ff:61:c1:2d:3b:34:dc:58:1c:5b:26:
         24:00:5a:0c:70:34:38:ee:11:fb:50:36:07:a0:73:4b:91:75:
         d8:d5:72:e6:d7:d4:e7:44:a8:7d:ee:e5:47:4d:b8:bc:e9:00:
         55:a8:9d:1f:ff:1e:80:59:2f:98:6e:50:7f:08:06:71:8c:83:
         97:6a:5d:c7:f1:d8:a9:2c:5c:fc:5d:7d:37:6c:bd:f5:51:cc:
         f4:e9:a1:cf:67:28:d2:3d:50:71:b1:ef:9a:02:90:93:52:e2:
         b1:0d:02:db:93:1c:12:c5:b2:da:c0:b3:03:25:03:fa:59:84:
         93:5d:56:49:b4:51:e2:e1:3e:ff:17:a9:32:d8:f6:3d:9c:43:
         dd:52:99:2e:64:94:80:d7:9f:61:64:e9:9f:12:3d:0e:73:dc:
         7f:31:f0:85:3b:aa:d1:f6:a6:0e:78:0f:94:d3:80:3a:a7:40:
         5a:ae:c7:06:2f:8f:e9:5b:a9:6c:33:91:e4:69:10:47:a8:c6:
         c2:03:34:84:61:8e:18:12:2c:32:52:30:af:42:a0:07:26:73:
         04:76:c5:ca:d6:20:49:ee:c0:84:6f:da:ef:ab:59:b7:b3:23:
         cf:84:c3:6b:6f:c9:0f:1b:77:94:21:f9:57:8d:a0:4c:45:55:
         e9:5f:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:08 2024 by rpki-client on console-fra.rpki-client.org