Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft
File:                     VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft (raw, json)
Hash identifier:          wAlw/hNwkUkwXrwcCdo9oWOlWiEYGjQurwGk5lY7hYI=
Subject key identifier:   70:61:2C:45:20:09:73:BC:4F:54:A3:33:46:10:FD:8F:FF:E7:BF:05
Authority key identifier: 56:D5:3B:9D:88:16:68:04:4E:5D:CD:09:D5:D1:A0:4B:95:38:8F:C4
Certificate issuer:       /CN=56d53b9d881668044e5dcd09d5d1a04b95388fc4
Certificate serial:       018F86A4096EACD61D221FEAF404CAD31120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtU7nYgWaAROXc0J1dGgS5U4j8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 13:00:48 +0000
Manifest this update:     Fri 17 May 2024 13:00:48 +0000
Manifest next update:     Sat 18 May 2024 13:00:48 +0000
Files and hashes:         1: VtU7nYgWaAROXc0J1dGgS5U4j8Q.crl (hash: OzmTbYBLvu55b59Ez1/umC5S8kIXmYcZoxV0Kp9bKwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtU7nYgWaAROXc0J1dGgS5U4j8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:09:6e:ac:d6:1d:22:1f:ea:f4:04:ca:d3:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d53b9d881668044e5dcd09d5d1a04b95388fc4
        Validity
            Not Before: May 17 13:00:48 2024 GMT
            Not After : May 18 13:00:48 2024 GMT
        Subject: CN=70612c45200973bc4f54a3334610fd8fffe7bf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:ac:7b:62:b9:cb:d0:fe:1b:b0:b3:da:27:
                    c4:50:7e:eb:fd:99:35:cd:d8:1a:b7:7f:a4:89:ec:
                    a4:d2:7e:b6:a4:f4:db:b5:8f:0d:ce:29:1a:30:3c:
                    97:1d:69:37:7b:39:ae:8c:42:7d:8c:8b:bb:f2:95:
                    53:58:83:85:92:96:c3:ca:cf:5a:b3:9f:9d:c9:3e:
                    3e:da:f6:39:b8:fd:20:b8:ef:f4:8f:1e:9e:13:82:
                    7b:82:12:c0:2d:fc:f0:62:fe:0f:5f:1d:2c:97:1e:
                    ad:b5:81:1e:2a:5a:58:e7:3d:d1:38:16:53:8e:d6:
                    9a:81:7c:5e:de:f1:5f:a8:b8:94:8a:81:ba:6a:8d:
                    d3:45:8f:88:a5:de:9e:33:1b:bb:a4:84:97:0d:58:
                    3b:08:67:4e:9a:dc:ad:b1:a3:0b:fe:87:d5:76:df:
                    60:7f:da:74:6e:40:81:31:d9:57:6f:ce:1e:ad:5f:
                    5b:fa:29:ce:3b:31:ca:40:f3:19:a5:7d:9f:11:a0:
                    78:56:d3:25:3c:7e:41:4f:99:c4:42:0a:5b:8c:12:
                    f0:42:de:9e:bd:65:28:cf:35:fd:ac:6b:c0:d1:b1:
                    88:b3:73:af:5e:79:ec:60:47:fe:de:dd:5b:e3:de:
                    22:c2:55:61:2b:77:11:6e:a6:ed:e8:27:0e:18:21:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:61:2C:45:20:09:73:BC:4F:54:A3:33:46:10:FD:8F:FF:E7:BF:05
            X509v3 Authority Key Identifier:
                keyid:56:D5:3B:9D:88:16:68:04:4E:5D:CD:09:D5:D1:A0:4B:95:38:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtU7nYgWaAROXc0J1dGgS5U4j8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:de:dd:c5:c6:ce:96:92:14:04:3a:9c:ae:d2:5f:83:5d:22:
         d2:36:e6:5f:92:f1:12:71:3d:cb:e2:e9:b1:0c:0c:45:59:cd:
         34:60:82:a3:b4:45:6a:8a:f1:07:9d:03:95:6d:65:85:47:de:
         eb:ed:96:b7:18:0a:ee:64:3c:16:67:52:1b:9d:4c:3e:b6:b6:
         86:fa:f3:93:81:0b:4e:e3:65:0d:d6:fb:0a:eb:1e:63:63:c4:
         2c:da:ae:48:cc:9d:84:52:34:03:b8:c9:7e:37:8c:f2:9a:f9:
         1e:54:2e:46:8d:fa:71:08:d5:18:ac:5f:ac:a7:94:62:e7:57:
         ad:95:87:9a:c4:f1:7c:b8:06:b6:e4:97:84:27:56:d9:6c:71:
         bb:27:06:ef:46:a1:0e:9c:a9:75:20:18:4f:dd:9e:91:1f:23:
         9a:0e:36:4e:94:11:eb:c2:82:2c:61:05:11:4d:83:d4:21:0f:
         53:fb:14:ff:0a:47:b8:ac:d3:f8:be:5d:25:2d:e7:c5:52:71:
         0e:11:4e:04:14:51:1b:ce:12:9d:55:01:88:80:21:f4:4a:9c:
         cd:c5:81:ec:1a:55:4a:ea:8c:74:4e:b0:00:fc:88:9f:bc:7b:
         83:60:c5:6b:41:03:5c:42:2f:06:a8:a3:25:78:72:2c:d0:e3:
         5a:0a:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:04 2024 by rpki-client on console-ams.rpki-client.org