Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File:                     vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier:          0nwJdteH7WcslADzt8SlzTOz8nvRySU4PsohpXZsBUA=
Subject key identifier:   AA:BE:CA:5A:AB:22:31:8B:0E:D2:40:AC:36:D6:2F:7D:2A:CA:6D:E4
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer:       /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial:       018F889259081198548FE9FA8C6DCE9E1188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number:          06DA
Signing time:             Fri 17 May 2024 22:00:43 +0000
Manifest this update:     Fri 17 May 2024 22:00:43 +0000
Manifest next update:     Sat 18 May 2024 22:00:43 +0000
Files and hashes:         1: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: H3xFeesNAaR8RDI9ggCb6zJy63rW0MLSrtQbyoP4MUU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:59:08:11:98:54:8f:e9:fa:8c:6d:ce:9e:11:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
        Validity
            Not Before: May 17 22:00:43 2024 GMT
            Not After : May 18 22:00:43 2024 GMT
        Subject: CN=aabeca5aab22318b0ed240ac36d62f7d2aca6de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:56:8c:cf:63:dc:a4:86:91:3d:8a:f2:ac:9b:
                    86:22:68:e8:10:7b:e0:ea:37:b1:71:a2:61:6b:36:
                    36:91:15:93:41:e7:82:3d:36:56:38:07:49:fa:fc:
                    5f:3e:16:a9:5f:04:4d:d1:c6:b9:ec:c3:53:08:7e:
                    05:e0:c8:56:64:83:32:c5:a4:ac:19:d3:4d:fc:b4:
                    6e:3f:1b:53:b9:21:12:90:fa:a8:6c:dd:f4:04:0f:
                    70:1f:3d:43:03:34:28:c2:54:b8:a2:b8:fa:e5:b8:
                    a4:78:1c:34:9e:f8:58:98:69:57:f5:bd:a2:15:52:
                    c0:31:2e:63:46:24:66:aa:cd:15:fa:42:36:a3:c0:
                    2b:bb:ab:ad:8c:7c:a6:b8:44:b5:29:c7:39:d2:97:
                    60:53:5e:80:a5:8c:06:85:56:98:c3:ec:dc:e6:d4:
                    42:b5:c7:81:0d:d4:04:75:92:40:d0:31:bd:27:98:
                    8e:df:4b:79:68:ec:3f:a2:00:e8:2b:75:c0:ea:ef:
                    51:11:eb:a1:da:21:dd:c1:73:25:02:71:33:91:19:
                    18:d7:23:b6:20:90:2c:ae:3f:0e:8d:5e:61:c6:ab:
                    ba:9e:da:37:2b:3a:34:26:bf:31:62:e9:34:c4:48:
                    ae:ba:d9:17:b7:65:9d:51:57:39:6f:57:8d:8f:fa:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BE:CA:5A:AB:22:31:8B:0E:D2:40:AC:36:D6:2F:7D:2A:CA:6D:E4
            X509v3 Authority Key Identifier:
                keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:1e:27:cc:4a:91:0f:8e:d0:e3:52:45:7e:76:7c:e7:93:11:
         f7:77:54:bc:b9:85:07:69:62:10:cc:ea:53:53:65:5f:ea:29:
         c7:27:af:ad:9a:c6:7d:86:fc:d9:44:6f:19:24:a9:fb:15:28:
         5e:a3:2a:13:02:ae:ec:84:fa:88:9b:ef:0f:b8:2a:1a:6f:98:
         4a:32:18:d0:7d:4e:a0:f7:51:9d:f2:5d:ef:3a:05:b9:bc:1f:
         25:1f:34:31:aa:91:b1:dd:3d:22:92:80:74:ee:1f:8e:f7:4d:
         00:8a:61:27:6f:36:41:74:9c:74:31:29:80:76:9f:83:f8:03:
         f0:d8:01:0d:a7:ef:d4:41:b1:fc:63:f3:c3:40:5f:7d:79:6c:
         96:03:03:ee:50:7c:00:c9:ff:b3:5a:bb:51:4a:40:73:b4:9b:
         68:39:42:66:ca:43:0e:aa:eb:ba:8a:44:50:f6:2b:a5:26:a5:
         06:e9:67:62:68:e6:1a:da:3e:0b:90:c4:02:eb:8e:a0:e6:25:
         06:43:ff:3e:e9:f6:92:ff:37:51:0d:d1:e6:92:83:27:c3:8b:
         49:5c:f8:b1:f5:bc:f0:8a:83:20:06:cb:f5:e6:3a:e0:35:aa:
         57:d3:df:73:ce:a1:f9:54:a1:54:96:8b:f6:f2:67:86:ca:5a:
         de:af:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:59 2024 by rpki-client on console-fra.rpki-client.org