Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File:                     VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier:          CW9lvbsLrQa/6rGUzQO1ezZb0bPKhXQhHVbWgDz9aQ0=
Subject key identifier:   E3:0E:24:E2:13:65:12:3C:71:4D:A9:1B:5E:50:17:A7:F0:8E:4D:CE
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer:       /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial:       018F86DA550C1B6BC538B49E558AE486240D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number:          99
Signing time:             Fri 17 May 2024 14:00:06 +0000
Manifest this update:     Fri 17 May 2024 14:00:06 +0000
Manifest next update:     Sat 18 May 2024 14:00:06 +0000
Files and hashes:         1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: Ikc22IrZkrByVX7QjYu6ydLUkV5hX+Tew1D5wI/pZns=)
                          2: k0V_sPMFJNT1cQxuEYkKqm2AHTY.roa (hash: jz2UqmEdPm0VJReGPGg2469PjogseTfTHtMMtSBGays=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:55:0c:1b:6b:c5:38:b4:9e:55:8a:e4:86:24:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
        Validity
            Not Before: May 17 14:00:06 2024 GMT
            Not After : May 18 14:00:06 2024 GMT
        Subject: CN=e30e24e21365123c714da91b5e5017a7f08e4dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:0b:af:91:76:99:fe:9e:bd:99:cf:b9:76:
                    8a:ca:dc:37:70:10:23:af:9a:80:e2:db:0d:70:60:
                    42:f6:74:5c:01:23:0e:7a:94:be:ed:47:6e:a8:08:
                    17:15:4c:07:87:b2:0c:f5:d9:81:3e:6f:79:9f:b9:
                    df:1e:1f:a3:c5:b7:41:5e:b3:d2:f5:3a:ca:5e:91:
                    70:6a:f3:94:3a:39:7e:f3:84:06:40:5c:0e:11:56:
                    e9:8a:4f:24:91:93:55:a0:b5:d9:dc:5b:e6:3b:68:
                    e6:58:c0:97:c7:90:bc:0c:f4:ba:2a:de:4f:8d:14:
                    b0:dc:54:0a:d4:fc:11:23:36:4e:3b:fc:3f:6f:64:
                    6f:c8:31:e3:b9:d7:5b:ab:b1:e5:2d:14:d5:ba:5c:
                    1a:50:0a:cd:d3:94:0c:31:3b:ac:4b:08:48:e1:a9:
                    b3:73:b6:98:04:7d:ad:51:c0:bd:d0:41:87:2f:ca:
                    24:83:7a:26:ef:f6:84:5a:4c:b7:65:18:68:05:ec:
                    e4:e5:5d:aa:ec:dc:89:95:39:65:e2:f7:55:bb:fa:
                    03:d3:a5:d5:12:e9:66:76:7d:81:ae:43:33:2a:07:
                    71:13:db:14:74:0c:19:1e:35:98:81:7b:97:ea:f1:
                    3e:b7:4e:d5:75:0a:b6:18:7b:3f:9f:d8:e3:ee:5e:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0E:24:E2:13:65:12:3C:71:4D:A9:1B:5E:50:17:A7:F0:8E:4D:CE
            X509v3 Authority Key Identifier:
                keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:23:b5:3a:34:6a:92:0d:98:18:21:c6:d6:c9:ec:4b:0a:b0:
         a9:ba:d9:b3:ac:4b:ec:63:95:36:43:b6:5c:cf:23:6b:cf:8a:
         85:cd:cb:3d:dd:62:59:bd:20:45:23:e7:39:e1:1b:67:b0:c4:
         84:a9:35:1c:f9:00:14:7b:da:c0:9c:33:58:ae:07:39:c8:43:
         25:46:09:88:0e:31:eb:32:b1:da:62:1b:db:92:2c:fa:da:f0:
         42:94:de:6d:09:1e:ec:86:b4:d0:59:82:ff:7d:ba:ef:b0:68:
         3b:20:19:94:38:a8:4a:47:14:dc:34:20:78:42:3b:82:cd:7d:
         66:fe:5f:35:a9:ab:ef:b6:69:98:4c:49:2e:c4:aa:1e:6f:88:
         aa:53:62:60:38:2c:e6:e5:65:09:9e:7d:4d:1d:ca:6b:e8:99:
         a0:ec:4d:96:1a:41:ad:33:c6:06:31:4e:4c:c4:a1:cc:37:31:
         28:cb:08:4b:76:df:24:46:be:ac:92:44:7d:bb:a5:b3:74:5b:
         8a:30:f5:31:d3:7b:12:52:49:17:4b:c5:0c:b7:86:88:cb:62:
         97:dc:4a:ad:0c:91:ff:18:2c:2a:c7:77:93:af:42:b1:00:6f:
         4a:b5:0c:c2:67:9b:85:99:45:90:d1:10:29:b1:15:54:93:4e:
         bc:db:f0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:27 2024 by rpki-client on console-fra.rpki-client.org