Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File:                     vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier:          iJxXNYQ7R5zEq56heAE/+10ZvhqHJy/JYzGwLD3ch/o=
Subject key identifier:   69:91:09:BB:38:D0:98:D5:7A:20:A5:00:07:6C:2F:44:82:3C:D3:9D
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer:       /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial:       018F87ED0A21BC29F8B787D128959E89302E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 19:00:09 +0000
Manifest this update:     Fri 17 May 2024 19:00:09 +0000
Manifest next update:     Sat 18 May 2024 19:00:09 +0000
Files and hashes:         1: FCwqRWCHgP2JV0NWd41b9Db1DFM.roa (hash: X6dqVEy3o1rQ3NGHReFBtpe0GNNwKhmS3zzND4jxWio=)
                          2: VT7X8Hbmx_CbL0bxyXxeU3rCHMk.roa (hash: 5vwS5Yyz8FB0vSACBovG7FiEGthFinorA0QpBmCI3NM=)
                          3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: Gp/TYXYWUl9XGShgjdUs2QElItglBT93YRP4seIUnNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0a:21:bc:29:f8:b7:87:d1:28:95:9e:89:30:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
        Validity
            Not Before: May 17 19:00:09 2024 GMT
            Not After : May 18 19:00:09 2024 GMT
        Subject: CN=699109bb38d098d57a20a500076c2f44823cd39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:b7:8c:74:b2:ca:eb:b4:0b:bb:b1:0d:6e:
                    f9:05:66:58:e1:b6:b0:24:cf:7e:a5:d3:c0:26:9b:
                    b9:94:97:1d:bd:47:87:74:91:01:8c:77:8f:0f:c6:
                    94:68:8b:8d:f5:36:46:bc:b8:15:03:12:31:c6:79:
                    95:50:1d:57:86:c6:19:05:a3:d5:cf:31:14:93:e6:
                    f4:a9:27:e0:fc:d8:a8:25:9c:b2:18:c2:c6:d9:ce:
                    20:b3:f4:c8:6b:25:43:19:6c:65:c9:5b:03:38:a9:
                    02:7b:39:df:1b:f8:49:2c:cf:47:20:00:ef:a5:80:
                    c1:df:d1:51:a4:54:62:81:69:90:f9:e7:58:71:34:
                    64:f6:83:a7:3d:c5:b6:a5:35:79:db:55:54:ac:71:
                    78:32:28:89:d9:bd:76:c7:f9:7d:20:f4:2e:eb:c9:
                    55:a3:05:8c:4e:b6:2b:57:4a:20:82:8c:fc:b1:e8:
                    ce:98:6e:b4:ea:01:c8:8b:7c:40:18:27:ad:0a:34:
                    0c:21:4e:2a:91:8e:f2:35:cf:06:58:da:7b:8e:31:
                    23:5f:e9:bd:5e:47:f9:97:47:7d:f7:51:cc:b6:ae:
                    90:a4:a9:44:87:e9:f6:6b:de:64:cd:1f:25:25:92:
                    02:cc:bc:8f:0c:28:9e:5b:f7:40:c1:d0:e2:02:57:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:91:09:BB:38:D0:98:D5:7A:20:A5:00:07:6C:2F:44:82:3C:D3:9D
            X509v3 Authority Key Identifier:
                keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ab:b6:76:6e:84:7b:28:67:89:5a:8c:c9:39:0a:7d:23:58:
         9c:cf:ea:48:34:f1:c5:d3:90:5a:7d:e4:eb:e2:09:d3:bc:8c:
         42:c1:3b:d6:86:d3:79:0f:a5:09:87:89:70:2d:13:ec:46:b5:
         83:c6:03:80:f2:bb:ae:4c:f1:d0:3b:11:ee:53:09:48:58:e6:
         07:78:ba:86:27:7e:cc:54:d2:10:f0:6f:b9:c6:c4:3f:77:e5:
         c5:61:cd:45:2b:4c:f5:27:e3:99:4a:d6:86:67:d3:21:fe:c9:
         9c:98:14:ea:ad:c4:1b:3f:03:22:9f:2e:68:1c:47:ff:b4:40:
         bc:b1:68:fc:ed:6d:46:de:06:c4:37:cd:3e:6c:c1:20:d6:af:
         95:6a:d0:0f:65:33:1a:20:30:92:47:e5:32:c8:21:02:ae:a8:
         84:d1:83:f2:6a:52:b6:7e:38:72:9c:75:c3:f3:b4:09:05:9b:
         32:5e:76:3c:74:68:eb:e1:5e:a4:27:6a:8f:ca:9c:f0:86:22:
         69:5c:c8:7f:b9:e5:f6:12:3e:f4:c9:68:58:fa:2c:e1:91:15:
         55:65:20:b6:b1:cb:d2:5b:7d:99:0b:f5:ce:d1:79:68:71:c1:
         d6:02:2a:3c:98:75:f0:f3:77:6d:8d:02:9c:02:b3:7e:94:41:
         2d:72:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:37 2024 by rpki-client on console-ams.rpki-client.org