Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File:                     VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier:          /O2fBWt/Fe9bCFOqE+cLSWvvkGuTLdcEbBj/RqpyouA=
Subject key identifier:   38:7D:2A:1A:58:DD:31:34:FB:E8:70:41:6D:D2:C6:4C:B6:AB:1B:04
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer:       /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial:       018F8749A0A232FFD9D709FE2BC7D4173D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number:          0458
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: ZPsJtOvE6takaUMZpj/jp8yk4ug9bg5TLyiRiMCAqzQ=)
                          2: aHFDk0h0zmf_Jj7slGbrqjj8s6U.roa (hash: XNYcWQL4xGS94k5E1nIvyLBAIF4jPz1iBJCqcBx8UJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a0:a2:32:ff:d9:d7:09:fe:2b:c7:d4:17:3d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=387d2a1a58dd3134fbe870416dd2c64cb6ab1b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:e7:3b:48:45:88:e4:90:27:fc:8c:d0:3b:
                    dd:28:b8:86:5d:b4:e7:74:f4:bf:14:0b:6a:bb:6b:
                    20:62:c7:67:78:51:7c:90:5b:88:a0:3a:ee:bc:07:
                    c3:77:d3:c7:44:8f:0d:5f:5e:fb:37:07:21:8a:3f:
                    88:49:70:7d:ca:fd:b2:9e:d8:39:19:bc:8c:ab:09:
                    0c:db:15:08:98:79:98:7c:15:5e:e2:1c:bd:35:4d:
                    8b:98:1f:f8:2d:3c:dc:b1:c3:24:d2:9d:f7:81:8e:
                    c3:b0:91:2e:a5:ff:e9:7f:4d:ca:82:1c:b0:6f:6c:
                    49:b2:17:e2:fe:42:2d:67:af:bf:91:af:ec:8d:6a:
                    33:1a:ec:9a:40:22:7b:b3:9d:2f:87:5f:47:a9:b5:
                    7c:1b:b0:a4:99:c8:0c:6d:d7:75:96:4e:5c:f0:83:
                    4c:46:fc:01:3b:5f:56:a6:b5:5f:b9:25:dc:e9:d1:
                    9c:9c:3c:6b:ec:a4:22:db:d8:29:7e:4e:f9:04:35:
                    8d:1a:8c:40:85:37:c8:fd:23:15:be:40:13:ea:0e:
                    72:48:ce:20:f2:91:ad:1f:e2:9f:26:bd:6c:70:c1:
                    b4:1b:e1:65:e7:8a:57:d8:fa:91:32:23:bd:8c:d1:
                    18:e5:22:91:ac:37:7e:b7:fa:2e:e5:98:35:31:80:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7D:2A:1A:58:DD:31:34:FB:E8:70:41:6D:D2:C6:4C:B6:AB:1B:04
            X509v3 Authority Key Identifier:
                keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:91:b3:b8:92:6c:61:15:ef:5c:9c:08:b4:a8:38:4b:ce:46:
         b4:63:85:d9:88:fd:cd:07:cb:18:0b:a2:c8:a4:f3:84:be:e0:
         a1:9d:ea:53:0d:d6:63:24:dd:24:3b:e5:76:71:e6:9d:d5:e4:
         83:b1:0b:3d:91:72:6b:67:02:57:d8:6d:65:b1:88:20:76:83:
         cb:7e:70:24:eb:6d:b5:83:96:8d:72:90:34:b0:15:4a:5e:bb:
         3d:d1:a7:78:e5:a3:7f:33:ef:4f:96:3c:e5:33:1c:6e:d4:56:
         ae:af:9b:d8:62:50:93:a4:bd:20:63:36:08:b3:74:46:e3:b0:
         ea:39:b7:ca:ec:eb:1a:75:82:fb:03:0a:18:70:00:bb:0e:23:
         5f:de:3f:e0:9c:5e:f4:ae:ee:a7:b7:00:f2:55:d9:c4:b1:b7:
         6f:16:91:6d:56:a2:b7:f4:70:b9:46:88:01:10:6a:ec:6b:75:
         fd:ad:80:45:c0:43:25:fc:55:2e:ca:93:23:39:9d:17:68:9b:
         19:ff:14:72:19:af:84:bd:f5:9c:bc:1d:0b:0a:74:d0:cb:e2:
         f1:18:46:ea:b0:b8:bc:30:31:3f:df:ab:0c:16:2a:df:3d:05:
         e6:6f:84:59:c8:5e:cc:0e:72:19:5f:ba:79:e6:9b:4b:af:d8:
         ae:f5:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:06 2024 by rpki-client on console-fra.rpki-client.org