Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
File:                     VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json)
Hash identifier:          2azPHDxY0Bqid7v3fCeaxJ0l84b6h5PB+XGYAbME+xM=
Subject key identifier:   15:B5:C9:8D:07:07:6B:4E:E4:9E:3C:40:19:B3:DC:A0:67:97:3E:8D
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Certificate issuer:       /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial:       0191FA478944F9F057FA30F1993D14D61F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
Manifest number:          0141
Signing time:             Mon 16 Sep 2024 10:01:17 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:17 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:17 +0000
Files and hashes:         1: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: ADe2aSM9SDEdBABKmAc8hoNtEYJRnjGNX6IupuK4l4s=)
                          2: jGT038D9r5TZ6JHTblJ2eGdVypI.roa (hash: 5618+Q45zWRNQOxn5d85wJ8479hUUBcN7Pqpq+dKtLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:89:44:f9:f0:57:fa:30:f1:99:3d:14:d6:1f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
        Validity
            Not Before: Sep 16 10:01:17 2024 GMT
            Not After : Sep 17 10:01:17 2024 GMT
        Subject: CN=15b5c98d07076b4ee49e3c4019b3dca067973e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:8a:99:8d:6d:b6:48:d6:f4:24:5f:ae:50:
                    cc:73:a0:2a:6c:9a:cf:64:cd:55:74:fa:b1:c1:08:
                    73:03:57:64:89:07:80:f5:cf:aa:13:8f:b9:85:3a:
                    bd:bf:b6:00:cd:ab:9d:44:7f:f7:31:ac:62:68:09:
                    66:3c:3b:71:e8:08:95:f9:c2:28:61:9e:6c:ab:d7:
                    77:f9:4b:62:7a:12:6e:dc:6e:08:99:77:46:56:2e:
                    c8:c4:aa:3d:21:57:c3:a8:c3:7c:09:a8:51:79:b4:
                    77:b2:bd:d6:d2:15:9a:fb:3f:3c:bf:dd:63:08:b1:
                    8e:5c:e9:db:fc:4e:fd:8f:67:be:40:30:97:0e:7c:
                    00:d8:a4:64:27:65:da:13:c9:46:ae:61:0b:6e:2e:
                    76:9a:af:79:83:90:46:2f:2d:87:f0:f8:f2:b2:04:
                    4c:18:2d:8e:b9:50:24:ca:cd:22:66:77:16:09:e2:
                    66:ed:14:55:38:c0:b8:20:7b:85:80:1c:51:4c:c9:
                    d5:12:0e:fd:df:d3:95:bd:b6:09:04:9e:69:d9:d4:
                    37:40:82:75:58:21:ce:80:00:db:f9:c5:67:79:2d:
                    2f:df:3a:81:21:39:a7:d3:11:4a:de:8e:45:c4:fa:
                    82:8e:ee:a3:1e:4d:75:70:72:02:ae:c5:aa:f1:db:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B5:C9:8D:07:07:6B:4E:E4:9E:3C:40:19:B3:DC:A0:67:97:3E:8D
            X509v3 Authority Key Identifier:
                keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:24:43:6b:b3:76:03:a6:d8:c9:a7:86:c0:67:25:44:51:d1:
         7f:e3:e0:f1:f9:78:02:8d:88:01:5d:a4:1d:66:17:6d:ce:9e:
         26:ac:76:0d:fd:3d:5c:58:08:30:7f:24:a1:6a:40:96:3d:2a:
         38:e4:74:05:10:c2:42:e6:00:f0:97:16:95:1d:18:3a:d1:11:
         d0:ea:a4:55:9b:fe:38:c1:a8:6e:d2:80:6c:8b:a6:d8:60:ca:
         68:7d:ad:32:5e:2d:bc:d0:46:65:1f:1d:13:e2:cf:d4:c9:6e:
         64:c8:ca:26:e6:c8:57:d7:db:7c:cc:8b:b0:46:b6:b7:32:b6:
         06:19:48:db:da:a3:3b:fa:c3:e5:87:41:d2:8b:6c:2c:fd:04:
         2d:36:74:03:ab:95:e4:e6:bf:9b:93:c9:64:8c:fd:f1:91:48:
         32:f0:b0:a6:67:4b:30:18:ef:1a:c4:2b:44:06:15:b2:25:5e:
         d5:c4:93:07:0a:97:80:df:4c:12:fd:f4:2c:85:66:bd:d3:5e:
         c5:da:6e:63:41:53:71:69:36:f3:e5:c3:4f:19:e8:ce:94:30:
         d5:31:17:02:a3:fc:92:01:55:44:25:b8:0f:e1:90:09:f0:1d:
         93:f2:27:13:79:f8:a1:99:ea:32:85:1f:e0:93:ed:1d:b1:d7:
         17:3f:dd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:16:58 2024 by rpki-client on console-fra.rpki-client.org