Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File:                     VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier:          virMNZL2aoC5jW9EWX9R386yFLiRxm3ki/oTty+Vq3Y=
Subject key identifier:   E1:70:F3:47:FA:FD:F0:F4:DB:D9:28:3A:FA:B5:AC:84:A2:CC:A8:15
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer:       /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial:       0195116C0CF237BCEB38071DFC2229AA33F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number:          1456
Signing time:             Mon 17 Feb 2025 01:00:48 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:48 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:48 +0000
Files and hashes:         1: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: t+ijaEut9cY1VL0BbumW8pR5oNdb2si8j6a30yWvntI=)
                          2: bOIrh8o4MvR1wd4C84En4JCn0L4.roa (hash: DG81fv6EP9+XjNFDQGRmy+cQGfBXw0VPtgzqJ5IZAq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6c:0c:f2:37:bc:eb:38:07:1d:fc:22:29:aa:33:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
        Validity
            Not Before: Feb 17 01:00:48 2025 GMT
            Not After : Feb 18 01:00:48 2025 GMT
        Subject: CN=e170f347fafdf0f4dbd9283afab5ac84a2cca815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:1c:f4:a2:69:74:9a:96:fa:7e:c7:5a:bb:
                    7d:cc:90:6b:af:38:93:3d:4a:74:b5:85:0d:6d:96:
                    c3:5f:51:e4:7a:fc:bd:16:5d:e2:79:bf:61:28:56:
                    1d:0c:e7:ed:e7:42:f2:97:d2:8c:01:75:a6:7b:8b:
                    56:8c:c9:09:a0:6d:52:8d:c2:1e:f4:cf:00:5b:7f:
                    27:08:8a:6d:b8:db:20:d8:f6:47:72:a9:1c:e1:69:
                    28:d5:ce:a2:cc:85:ad:cf:15:2b:ed:25:94:07:ef:
                    07:19:fe:22:7c:b2:72:0b:6a:a6:16:1b:63:1b:03:
                    39:dc:0b:4e:5a:61:ce:be:c1:2b:56:3a:60:33:c0:
                    b4:0d:31:0a:05:ff:11:b5:7f:1b:58:fd:cc:2b:eb:
                    a5:dd:e9:06:ce:f7:52:68:4d:82:dc:21:62:38:fa:
                    fb:95:f7:5e:25:07:7f:33:c3:33:ac:9d:e2:6c:d2:
                    92:90:ee:eb:76:ce:b8:ef:3c:70:fc:10:86:a3:82:
                    5b:de:c7:f4:17:e1:48:8b:e6:cf:a9:d5:db:e0:0b:
                    1f:a5:00:dc:76:33:58:0f:48:48:5a:c1:7f:ac:15:
                    a4:31:83:7d:6c:c5:ab:bc:bc:cf:08:f6:0e:ed:e3:
                    40:d7:e1:c9:9d:9c:99:d5:ce:3c:43:fe:b4:fd:69:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:70:F3:47:FA:FD:F0:F4:DB:D9:28:3A:FA:B5:AC:84:A2:CC:A8:15
            X509v3 Authority Key Identifier:
                keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:14:e2:1d:32:9b:7e:b4:a5:44:9b:13:49:ce:21:c2:16:e9:
         7d:09:a9:5d:f9:71:4a:de:e8:9a:d9:65:1b:33:ae:7d:b6:32:
         b6:e5:94:ba:24:c5:8c:e4:6c:14:ec:7f:c0:4f:0e:f3:7a:6e:
         75:36:e9:76:2d:2f:4a:fe:95:94:b6:1e:c9:f9:dd:e7:80:e3:
         cf:0c:4c:9a:ab:87:14:84:62:01:6d:86:a3:92:3d:ee:20:59:
         9c:6a:6d:78:a4:f2:8d:45:e5:04:57:78:b0:29:8d:86:a9:d8:
         9d:3b:c2:69:4c:2a:b5:f7:cc:3b:fb:bc:34:3a:f1:99:2f:3d:
         43:01:0e:c1:88:a7:95:b9:d1:56:11:26:0d:c0:23:b3:88:6c:
         cd:ef:e1:ea:85:48:cc:71:4a:22:74:1a:93:97:d0:45:ac:1a:
         8a:75:4b:ae:ed:e9:1b:9d:b4:45:05:ed:c4:cd:c8:8a:8d:68:
         9f:f0:8c:31:1e:c4:0f:cf:b9:3e:21:7b:db:a8:44:f7:84:28:
         87:bb:28:af:1f:f4:b4:3e:32:f9:66:a4:73:97:c3:f4:0c:95:
         62:4c:87:58:14:7d:ba:c8:fb:9d:67:29:00:e1:37:66:cd:ab:
         c6:62:fc:08:08:ed:80:59:02:f8:3e:9f:a7:c4:45:b4:51:67:
         8c:da:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:51 2025 by rpki-client