Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier:          Tqo26Q75okBWwgd1IPIes6yR3wO/X6sRPiCzRvDb/5M=
Subject key identifier:   DA:61:0A:64:46:44:7A:95:6C:FA:94:8A:8C:13:E3:44:CD:3D:C3:BA
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer:       /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial:       018F874A3A6EEEF71969FCE4F18CAF6FBCC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number:          D8
Signing time:             Fri 17 May 2024 16:02:19 +0000
Manifest this update:     Fri 17 May 2024 16:02:19 +0000
Manifest next update:     Sat 18 May 2024 16:02:19 +0000
Files and hashes:         1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: hDhhX58kjDys7gAUnYJZTKvYqCf+2/9WVzrFu2IOUW0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:3a:6e:ee:f7:19:69:fc:e4:f1:8c:af:6f:bc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Validity
            Not Before: May 17 16:02:19 2024 GMT
            Not After : May 18 16:02:19 2024 GMT
        Subject: CN=da610a6446447a956cfa948a8c13e344cd3dc3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:d4:60:03:e7:11:9e:6e:dd:4b:7d:e7:99:
                    83:bc:0a:76:21:25:84:8d:3b:bf:a1:0d:07:ed:e3:
                    62:30:71:fa:a0:20:7b:b0:9c:4a:92:92:5a:d1:33:
                    1d:81:7f:06:f0:3b:05:52:6e:b1:b1:90:82:39:b4:
                    fd:d8:ac:81:d2:2b:2f:ed:55:cc:d6:69:e0:81:56:
                    c5:ef:45:cf:a9:16:6b:27:26:f3:16:eb:e8:5b:87:
                    fd:fb:1e:9e:05:eb:63:be:ce:a7:b4:a0:91:22:0f:
                    3a:9c:e8:be:45:79:cf:9a:5b:ea:2b:fc:56:f6:8f:
                    81:a1:3b:3e:21:1f:30:34:f1:5d:15:7e:9b:ae:f5:
                    0a:a6:24:63:2a:ed:53:8b:a3:74:75:a9:d3:d3:65:
                    e9:5f:36:eb:85:8c:9c:af:d4:43:b9:e5:6a:6d:99:
                    d3:1d:b6:b3:f2:83:f2:0f:9a:68:d9:92:ac:e9:4b:
                    fd:8a:53:0e:cd:48:50:98:eb:07:52:49:c2:bd:96:
                    23:b5:24:21:2f:a2:bc:34:35:d4:84:41:98:ac:b6:
                    d3:05:6a:57:d4:e5:f0:eb:44:38:f2:1b:90:46:4f:
                    2d:58:25:80:54:d8:bb:40:a4:e2:1d:57:a0:43:fe:
                    c5:35:6d:e7:1c:86:8d:ed:02:ef:64:bb:3c:ea:4e:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:61:0A:64:46:44:7A:95:6C:FA:94:8A:8C:13:E3:44:CD:3D:C3:BA
            X509v3 Authority Key Identifier:
                keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:49:86:c3:31:aa:72:ac:4c:8b:17:4b:c8:ac:da:5f:42:c8:
         58:e5:93:e3:8f:2c:8e:6c:2e:39:bd:4b:0f:75:2f:7c:cb:78:
         3f:c3:72:bc:fe:c5:4f:bd:f4:4c:a2:56:2d:1e:df:6f:32:c2:
         24:19:31:46:4f:04:82:f8:47:c6:9b:45:cd:3a:f7:ea:c5:8c:
         f2:63:58:b3:b5:a4:72:8f:50:2b:97:19:4c:54:01:c8:ea:f2:
         bf:54:3a:92:36:94:c3:9a:48:1a:b0:86:fe:5f:3c:f4:b0:06:
         e5:29:9d:a9:04:ee:b8:8d:59:2a:b8:33:da:55:1b:67:18:6d:
         59:0a:53:3b:47:d7:d1:02:a0:09:e3:bf:db:28:dc:ff:69:75:
         2c:87:ed:ae:b5:d6:01:1a:5c:26:21:0f:90:36:38:2c:6f:79:
         fb:7a:26:e7:dd:ce:95:31:84:cf:06:6d:cc:62:7e:56:29:3c:
         75:4a:16:96:38:f3:f0:65:52:b8:90:9e:05:3d:ec:b9:87:8a:
         a5:04:30:b2:42:24:0b:c1:36:9d:80:74:42:94:2f:f0:31:1b:
         e5:b9:9c:6d:85:12:e5:a4:46:99:a3:e9:bf:84:40:46:c7:fd:
         0d:1d:ab:f4:7f:84:70:dc:1e:89:99:08:d5:17:03:79:df:f8:
         b1:e3:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:33 2024 by rpki-client on console-ams.rpki-client.org