Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File:                     VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier:          tc5GHWBDs0J7ADF5qR603oLlm265fJlcVNNUjhUt1sE=
Subject key identifier:   A1:73:9F:29:58:43:49:B6:89:18:66:DC:32:CD:D7:3C:EA:4E:C7:52
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer:       /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial:       018F877F2B905478CB48136DBA70CB262C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number:          0F98
Signing time:             Fri 17 May 2024 17:00:09 +0000
Manifest this update:     Fri 17 May 2024 17:00:09 +0000
Manifest next update:     Sat 18 May 2024 17:00:09 +0000
Files and hashes:         1: LD1tgRFASbrxthHeRqLdZbiEst0.roa (hash: bf9M8F+X1I5G4PJ4YNijqPrbeIhRGPS1kVlQoMaR7VA=)
                          2: S3hRbFAfv5UX2tPzM3A9HbJCT8c.roa (hash: 2cJt29EV8qnZ/LDQ3VDGOKrXTDPhtaFrFOaS9A/V66w=)
                          3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: MtNI4+TnzTWJq7wJjYHHji1YD44Ps8Oogk3rYWKqE08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2b:90:54:78:cb:48:13:6d:ba:70:cb:26:2c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
        Validity
            Not Before: May 17 17:00:09 2024 GMT
            Not After : May 18 17:00:09 2024 GMT
        Subject: CN=a1739f29584349b6891866dc32cdd73cea4ec752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:fd:48:cd:e8:40:14:16:ea:27:8d:f1:0d:
                    b0:8f:75:b1:16:44:ff:93:76:2c:39:a8:5b:b0:62:
                    b9:5f:ec:8d:eb:db:89:c1:cc:a9:01:cc:3c:8d:98:
                    71:8b:88:57:00:a3:c5:a8:ef:2f:17:8d:c8:7a:09:
                    88:8c:88:25:9b:1b:60:66:33:78:2d:dd:94:7d:72:
                    ef:65:b0:8b:c2:ae:21:42:7e:df:ce:0c:2c:a9:8d:
                    8e:b9:46:2b:32:64:15:f3:44:43:51:50:1c:55:75:
                    40:ff:b3:85:a1:78:cb:fa:38:be:c1:c5:10:7f:75:
                    f5:b2:fe:bc:2d:41:42:2b:c0:9d:94:bb:a7:da:99:
                    d3:e7:d4:f1:e3:ff:a9:72:d4:02:9a:a6:6f:3c:e2:
                    f4:d2:a6:53:3b:08:21:21:da:73:5c:f3:44:1c:f9:
                    28:ac:74:ea:7d:9e:bc:17:c2:dc:84:8a:88:33:bf:
                    58:a4:59:71:5c:ec:a1:79:24:f2:d7:0b:29:d3:4d:
                    24:6e:01:ac:28:b9:9e:35:97:77:3e:48:81:41:f0:
                    8c:5c:7e:61:32:ae:4b:70:12:1b:4e:a0:0d:a5:05:
                    ca:e1:41:06:d8:d3:ab:b2:76:46:19:87:67:29:95:
                    2c:b8:89:f7:cb:81:b3:d5:4b:3b:3e:ae:00:bd:23:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:73:9F:29:58:43:49:B6:89:18:66:DC:32:CD:D7:3C:EA:4E:C7:52
            X509v3 Authority Key Identifier:
                keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:34:7c:28:61:55:f8:2d:4f:96:b9:f9:0b:da:3d:de:66:69:
         13:85:c9:bc:fe:83:f3:66:cd:56:2c:89:0f:8b:f4:18:48:48:
         87:0a:b1:d5:d7:7c:a5:f2:aa:df:f1:27:dd:24:15:d3:2c:0a:
         b8:e5:f4:a4:cb:42:18:de:fb:0f:92:2e:43:e5:89:cf:ca:aa:
         ed:3b:29:28:5d:64:75:04:ed:22:b7:03:5e:d9:92:b2:5c:93:
         2f:b8:92:48:b6:9b:95:1f:e2:47:e0:db:6d:6e:b4:ed:1b:86:
         bb:7a:76:52:e4:05:2e:b4:80:20:18:c9:1c:56:f8:39:69:93:
         7a:04:d7:9f:dc:73:af:fe:e6:8d:d8:3b:8e:c9:c6:dd:02:cd:
         3c:ed:bc:e1:02:ba:6d:03:93:0e:6b:a3:04:5a:9b:d7:29:8a:
         d7:3e:df:d3:1e:2f:ab:33:d7:a4:8b:a8:eb:57:8a:af:5a:7d:
         ec:6f:cb:93:77:37:a8:3e:cf:e7:b4:ed:29:53:dd:13:f1:70:
         1c:bc:13:43:26:70:1e:d3:4a:1e:fc:4b:40:d8:de:ce:8e:ca:
         b1:92:20:b9:0d:66:09:c0:83:ae:7e:cc:65:5e:0b:df:54:41:
         9e:56:c0:30:c4:50:ea:40:b4:4b:9d:dd:2b:29:40:80:eb:50:
         17:08:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:08 2024 by rpki-client on console-ams.rpki-client.org