Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
File:                     VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft (raw, json)
Hash identifier:          snRM+IjXs8ULNvxzdj6kyX2zBPlqkpk0dgDIRgf88+4=
Subject key identifier:   A1:47:3B:40:95:E6:DB:0C:48:BB:55:C6:27:B2:29:13:D3:19:92:60
Authority key identifier: 55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
Certificate issuer:       /CN=5517c90523f5664180f71e3060dda23172e4cf75
Certificate serial:       018F8748ADC357197E06585D079F2994A754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
Manifest number:          0A4E
Signing time:             Fri 17 May 2024 16:00:38 +0000
Manifest this update:     Fri 17 May 2024 16:00:38 +0000
Manifest next update:     Sat 18 May 2024 16:00:38 +0000
Files and hashes:         1: VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl (hash: xhqlL1ZJso4+u5BSgHyGthI4RQAr+KpHJQ6CK9H+fkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ad:c3:57:19:7e:06:58:5d:07:9f:29:94:a7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5517c90523f5664180f71e3060dda23172e4cf75
        Validity
            Not Before: May 17 16:00:38 2024 GMT
            Not After : May 18 16:00:38 2024 GMT
        Subject: CN=a1473b4095e6db0c48bb55c627b22913d3199260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:0a:19:d9:75:4b:8d:0d:d1:06:ce:94:9f:
                    88:74:70:21:b2:3d:95:71:23:8e:c1:40:63:48:aa:
                    f9:a3:2d:be:75:99:e4:c8:ff:d6:24:08:03:8b:50:
                    c6:1f:43:18:1e:29:e5:69:53:f8:7b:d6:ed:d6:7b:
                    61:2e:c6:07:e2:38:46:af:f7:aa:36:9d:fb:fd:a0:
                    a9:07:35:55:10:fa:72:73:95:c9:26:7a:4a:f3:58:
                    7d:2d:5d:9f:40:f8:67:86:7b:87:0e:cf:49:13:c5:
                    52:45:1e:37:d9:41:9f:95:b4:86:34:92:c0:8b:04:
                    a2:e2:0c:8e:57:a2:ad:e9:d4:23:ee:54:10:98:d8:
                    53:5d:13:be:c2:07:7d:d0:aa:76:cf:f0:d1:4c:52:
                    50:88:73:14:8e:19:da:9f:a9:7b:b9:67:09:68:83:
                    b3:03:72:14:b6:f9:45:3c:98:4b:95:e9:d7:01:7d:
                    83:68:6e:53:50:e2:fe:e0:4e:ff:98:f1:ea:58:5e:
                    07:9f:c3:15:b6:26:71:e7:11:7d:c1:b4:d8:b8:f0:
                    43:3e:06:72:e5:ff:ac:97:ac:5e:6b:0c:77:69:5d:
                    01:72:f8:7f:45:f6:67:10:d3:51:b4:1d:b7:f5:f1:
                    72:88:be:45:a4:ca:47:53:28:5e:54:38:61:0d:f6:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:47:3B:40:95:E6:DB:0C:48:BB:55:C6:27:B2:29:13:D3:19:92:60
            X509v3 Authority Key Identifier:
                keyid:55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d6:f8:aa:40:72:38:2c:9a:85:b8:3e:be:d7:a2:8a:76:4a:
         9d:07:de:a9:7a:85:a6:99:30:d8:fc:6e:ff:4a:cc:96:8d:e2:
         e1:97:f0:10:be:00:53:0b:9c:77:0f:f0:6c:ce:4d:51:f2:08:
         e1:4b:05:05:66:b2:98:cd:68:1a:2b:cc:06:a4:0f:c8:16:88:
         d2:84:a8:da:d9:8e:73:03:36:ec:a6:ef:6d:13:d9:ad:10:1b:
         c9:4b:11:16:13:b7:ab:62:99:ed:40:f9:d7:4b:e7:9d:87:20:
         cd:3f:bd:4f:c1:9c:3c:3d:bc:d7:ff:79:19:aa:ae:2d:24:2c:
         6a:1a:4e:a8:3a:ca:aa:cc:a2:60:29:d9:fe:73:c8:b8:35:76:
         4b:66:b0:0b:73:eb:cf:85:16:80:dc:57:cd:03:89:f0:26:1b:
         ae:ed:ad:25:6a:c8:f4:5a:cb:d5:4e:79:1c:52:38:19:a6:ce:
         a6:0e:d1:fd:98:ef:11:6f:09:e2:ac:cc:05:00:cf:8d:24:2e:
         40:af:60:5f:29:47:09:cc:87:52:81:8b:7f:dc:51:07:40:41:
         a9:69:a2:25:54:d8:1f:78:30:8a:50:f2:1f:67:ba:e8:22:47:
         a4:a8:67:3e:85:75:20:b8:4d:ac:f2:ad:94:ea:86:7e:7a:05:
         04:60:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:11 2024 by rpki-client on console-ams.rpki-client.org