Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
File:                     VB_cei8RpXZtOte99iXOXhGaj98.mft (raw, json)
Hash identifier:          DvLzvMdW0PkhVRzRpDjrCk1WNihdBpiORwBAzE4IfTY=
Subject key identifier:   B0:C3:36:26:B4:DA:F9:68:75:E0:82:C7:F4:A2:AC:46:12:A0:8F:0C
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Certificate issuer:       /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial:       018F1557DACB2F18A232564F78C3FF42C95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
Manifest number:          0F2A
Signing time:             Thu 25 Apr 2024 13:00:30 +0000
Manifest this update:     Thu 25 Apr 2024 13:00:30 +0000
Manifest next update:     Fri 26 Apr 2024 13:00:30 +0000
Files and hashes:         1: IpyjPjITWlseeUupUFrw00pXGhc.roa (hash: wfhq+7WtDiw/cWKUNH69txt79cgDz20sL+t4c9WWyaM=)
                          2: VB_cei8RpXZtOte99iXOXhGaj98.crl (hash: OOstCR2sUxwXb/mFReNYDRscFdDZUAgCipwE53YwB1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:15:57:da:cb:2f:18:a2:32:56:4f:78:c3:ff:42:c9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
        Validity
            Not Before: Apr 25 13:00:30 2024 GMT
            Not After : Apr 26 13:00:30 2024 GMT
        Subject: CN=b0c33626b4daf96875e082c7f4a2ac4612a08f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:bf:e6:00:a5:ed:3c:88:e0:01:77:19:68:
                    e5:b1:b0:17:38:25:ec:de:9a:bd:c4:82:0d:21:78:
                    31:7d:93:7b:c0:2f:14:1e:be:3d:37:20:2b:2c:07:
                    fe:16:5a:02:29:cd:0b:8e:36:8c:64:b7:3e:dc:dc:
                    7d:e0:14:fb:56:79:2b:bb:42:e8:67:95:7a:be:cc:
                    d7:e9:f7:43:6b:a5:74:1b:39:59:10:8d:ee:fd:5f:
                    ba:14:c4:34:29:91:27:fe:2a:13:02:a5:21:b1:e9:
                    c9:84:88:95:46:11:e7:45:ae:d6:d8:7d:03:52:6c:
                    c7:13:1b:30:6e:1a:7a:b7:48:f0:9a:e9:9c:ad:fa:
                    3e:ed:f2:aa:5e:ce:fc:53:d8:72:bd:a0:cf:26:33:
                    4d:ac:b9:e6:ec:25:58:10:2d:1b:bf:0e:43:f5:61:
                    a8:e7:7a:83:f8:04:3c:bf:80:93:38:48:65:0e:04:
                    67:08:d1:b1:e3:c0:38:2f:12:aa:46:9f:ac:fb:89:
                    4a:0d:46:bb:b7:a6:78:83:47:50:9a:b8:3f:be:1f:
                    25:ce:5d:11:8f:9d:ab:f6:99:16:2f:d9:e2:c7:5a:
                    3f:9d:06:48:fb:ea:4d:f9:d2:af:1f:ad:4f:03:ab:
                    94:4e:79:f7:a3:2e:3f:a7:8c:6f:de:55:f7:8a:85:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C3:36:26:B4:DA:F9:68:75:E0:82:C7:F4:A2:AC:46:12:A0:8F:0C
            X509v3 Authority Key Identifier:
                keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:96:b1:7e:89:6a:34:c3:79:9d:ff:c4:e9:9f:ba:3f:5b:
         b9:10:5b:ab:ea:4e:e2:0c:28:77:a3:13:87:e7:e6:ce:11:85:
         5e:8e:8e:99:2f:25:06:0d:8d:c0:06:27:b1:0e:80:c8:7a:6b:
         05:e4:a6:30:44:10:11:fb:86:fa:f8:be:65:72:e2:70:06:00:
         04:ec:da:1c:28:bd:37:60:80:12:98:cf:2b:06:e7:d8:57:5b:
         c8:45:70:47:ea:62:0f:dc:2d:3a:3b:ad:61:26:7e:86:9d:4d:
         fb:8d:52:0e:e0:70:59:c6:20:24:bb:30:e8:b7:91:a7:40:23:
         54:dc:75:ca:f5:a0:71:9e:5c:09:fa:23:50:12:df:f3:36:90:
         b8:a5:49:d4:a2:67:51:43:f6:43:43:87:23:df:82:70:b2:90:
         fa:21:df:a7:ea:9c:8e:22:f5:ac:d2:aa:ef:e8:e6:c1:36:cb:
         02:7d:44:f6:cc:f4:da:cf:9d:0a:19:c7:d3:a3:b1:b4:e2:3a:
         16:a6:20:71:0f:cb:ec:fd:a1:da:a2:52:7a:10:84:4b:ba:2d:
         52:35:17:f0:ab:e0:99:ef:c2:48:f1:d0:09:e0:56:05:96:c8:
         0a:48:01:f8:23:31:cd:2d:19:16:8c:f6:ec:d0:21:1c:2e:4f:
         e8:37:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 18:50:18 2024 by rpki-client on console-fra.rpki-client.org