Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          DUHtuog9bJWGR/OJBM4oFKzznX1K4G1lRKy0NjassT4=
Subject key identifier:   E1:77:AB:D5:12:52:98:98:7E:9F:F5:54:24:3E:CC:A8:2F:1A:89:0D
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       018F87495728F1428F7ED9300CBF4DB2B72D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          0D11
Signing time:             Fri 17 May 2024 16:01:21 +0000
Manifest this update:     Fri 17 May 2024 16:01:21 +0000
Manifest next update:     Sat 18 May 2024 16:01:21 +0000
Files and hashes:         1: jo7grHdiLm0iiS1-h57taF-asAg.roa (hash: kH4gI0/SEdo6PdbG9KLhqSblMfwDwBe4bFL2AF5J1zQ=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: H5a/+dmCzlbV9v29atfr5hpfrXVTSzzutn0xq5TCwRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:57:28:f1:42:8f:7e:d9:30:0c:bf:4d:b2:b7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: May 17 16:01:21 2024 GMT
            Not After : May 18 16:01:21 2024 GMT
        Subject: CN=e177abd5125298987e9ff554243ecca82f1a890d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:b9:0c:9c:db:2e:1c:2f:45:15:01:23:11:
                    e4:71:ac:09:fd:14:b6:7c:db:63:e1:ee:cf:cb:2c:
                    49:78:86:9a:f5:aa:b9:6d:e3:d7:32:db:f3:8c:ca:
                    1f:11:64:8e:61:a2:54:69:be:31:9d:0f:88:48:f6:
                    eb:dc:99:21:40:6d:9a:21:e7:26:04:2f:8f:86:00:
                    32:fd:6d:10:38:a0:9e:ce:61:02:04:ff:b6:3e:33:
                    1d:f9:84:a0:d1:54:a7:02:24:d8:de:3d:8f:0a:b0:
                    a2:16:3f:f5:5a:c4:e7:2d:53:22:f6:3c:96:f9:ce:
                    6c:1f:81:60:4d:98:97:8d:7c:db:1b:aa:45:37:40:
                    36:df:a9:94:b7:6b:70:25:33:ab:b1:f3:fe:89:60:
                    1a:3d:4d:8e:2a:43:e0:4a:88:d2:a7:0b:c3:cb:3c:
                    57:3a:82:74:18:93:94:37:3a:e4:51:3e:b6:7f:3c:
                    e3:2f:52:ca:d6:d0:49:53:42:cf:42:35:74:af:23:
                    35:fa:d7:19:7d:63:f7:04:8a:6e:c2:00:37:aa:11:
                    f2:78:55:1b:80:84:44:1a:ce:9c:4d:99:e5:db:e2:
                    b1:2f:a4:9c:aa:d2:a9:10:7e:bb:1d:da:9a:02:96:
                    a4:23:1c:cc:d9:93:99:10:3e:12:1f:00:64:5e:81:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:77:AB:D5:12:52:98:98:7E:9F:F5:54:24:3E:CC:A8:2F:1A:89:0D
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5f:c3:c4:d8:2a:21:1e:fb:fb:8e:1e:8a:fc:95:60:ff:47:
         3e:d2:9d:aa:b4:38:a4:fa:10:a9:d5:9e:2c:8d:3d:4c:8c:a9:
         54:10:16:27:70:71:15:b1:52:52:c7:ec:69:54:b7:3f:e9:af:
         ab:c3:96:46:01:f4:3f:56:a4:3c:c6:f2:04:d8:8f:c6:78:41:
         51:10:50:b4:36:8e:6c:92:ac:d2:86:68:cf:19:ab:78:72:71:
         7f:b5:d1:03:08:b4:fb:9c:df:27:19:8e:8b:f7:1c:73:5e:77:
         f7:2f:6b:aa:cd:56:e5:a0:79:0c:f5:10:3b:c3:9c:98:1a:62:
         1b:af:70:ea:d0:f5:2d:46:8a:25:82:51:f1:e7:1a:6d:b9:6c:
         55:69:f2:87:f7:7c:43:35:a2:b7:30:78:bd:24:b2:86:cf:35:
         e4:c5:06:66:3f:84:fd:e3:ba:31:19:db:69:77:26:50:b3:d6:
         17:e7:5a:5f:5b:53:0d:fe:79:55:cf:b0:dd:d6:b3:18:6a:2c:
         14:2c:89:14:3f:6a:e1:56:98:4a:48:f7:59:ec:61:44:4b:90:
         6d:f1:7c:ce:3c:01:9b:b3:2e:8b:d4:f1:cb:f9:58:45:d8:be:
         b4:f1:72:da:fe:74:1c:5b:39:1d:a0:60:f4:c9:6c:0b:26:11:
         dd:8a:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:12 2024 by rpki-client on console-ams.rpki-client.org