Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          BfJRFXzv16rShB4jTwAR/8XZm6q6jkzNK9cdfKX2LE4=
Subject key identifier:   CA:4D:55:16:B6:DF:28:29:08:E0:52:93:58:AA:23:04:5A:E4:00:00
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       018F885B59DEC92CD84A37F1DFCB9331A437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 21:00:39 +0000
Manifest this update:     Fri 17 May 2024 21:00:39 +0000
Manifest next update:     Sat 18 May 2024 21:00:39 +0000
Files and hashes:         1: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: UxDr7e+856LVYE/ihhAUfETCv4qDHuqHaqcPiAThurc=)
                          2: bUMmES3An4bVa7Eqg3M-JrZWsAQ.roa (hash: 1O8LJKA9Kq+h+MxmJdkpGc7TskhMyvig3vpALs4o5Jo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:59:de:c9:2c:d8:4a:37:f1:df:cb:93:31:a4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: May 17 21:00:39 2024 GMT
            Not After : May 18 21:00:39 2024 GMT
        Subject: CN=ca4d5516b6df282908e0529358aa23045ae40000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:f4:f5:41:4c:1d:c5:1a:0c:95:a6:da:1e:
                    18:7e:54:be:86:f5:c1:53:10:eb:65:2b:e4:1f:9b:
                    3d:15:b1:3e:0c:54:e9:81:1d:b6:1d:b5:29:30:9d:
                    a4:1b:64:4b:c3:36:5c:73:b2:54:d4:9c:36:51:0d:
                    52:42:74:11:fb:b6:2c:60:ad:d8:d6:83:82:94:c8:
                    61:d8:3e:79:3d:55:5d:37:29:a2:e6:35:ec:1e:04:
                    cb:f1:33:46:48:98:af:df:0e:a0:e7:84:d6:7c:a8:
                    1e:97:11:e3:ca:62:89:20:c9:ce:e9:32:3e:5f:67:
                    1e:3b:d6:33:02:8b:42:2c:ed:b6:f1:30:cb:fa:0e:
                    4d:cb:6e:45:a2:ce:48:3b:62:7e:21:7a:e5:a7:15:
                    56:3f:55:b9:a4:07:f0:fa:e4:f7:0c:a7:7a:1a:97:
                    91:96:db:b7:dc:a7:07:4d:10:ef:07:40:55:b8:fe:
                    c0:5a:c1:78:a8:ae:b3:38:de:8f:cb:c1:ca:5e:fa:
                    1f:f1:67:3b:c8:ab:33:bc:da:e8:22:e3:9d:b2:3d:
                    97:b9:d3:09:53:c5:5e:99:b6:79:6b:6d:54:fc:b2:
                    b6:08:f7:4a:e2:b2:ca:8c:1c:a4:89:fc:57:14:2a:
                    d9:15:4b:ea:e7:30:36:4f:99:86:30:77:dc:f8:d0:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4D:55:16:B6:DF:28:29:08:E0:52:93:58:AA:23:04:5A:E4:00:00
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:a6:7a:4c:67:ab:3c:56:5f:43:93:56:94:8a:bb:60:db:
         6d:94:23:26:c5:6a:2c:19:3d:a0:70:ec:81:c7:32:86:0f:1b:
         f7:90:c1:4f:4d:28:c7:42:1c:7e:0b:d3:9a:ce:cd:6d:41:fd:
         1f:05:a2:11:1e:04:62:55:fe:04:7c:5f:4d:2a:ea:a3:3d:92:
         2b:73:2c:0e:a3:87:2e:24:78:e1:07:4a:ab:ef:c3:9b:22:a0:
         36:ed:03:ce:cb:6c:f5:23:b7:5f:31:5b:26:8a:d9:3c:12:b7:
         33:fb:06:f3:13:30:aa:42:7c:f9:06:0e:21:16:3a:73:a6:5f:
         98:0e:df:80:86:fe:57:d7:95:da:0e:02:15:71:52:fc:85:73:
         e7:05:88:9b:10:61:ee:ba:54:fc:5e:64:10:9b:5b:a0:44:2e:
         1c:40:c3:09:18:24:38:9a:61:09:95:75:ea:a5:d9:bf:d6:57:
         34:02:34:5b:85:b0:9a:44:a6:2a:60:72:ab:1a:53:5e:9d:84:
         26:f7:72:7a:7d:d2:7f:5d:a9:da:29:59:d2:e3:4c:64:71:2b:
         16:f2:1c:e1:81:50:69:0a:65:d2:ef:b7:9b:40:f5:a3:00:50:
         06:cc:24:22:f5:42:a6:73:86:a5:c0:b1:d2:bb:70:34:4f:76:
         05:61:38:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IW1neySzYSjfx38uTMaQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MWEwZmMwMTJlZmI4OTY1MGE3N2U2ZmJkMTJkY2FiZGE0
MjhjYjAwHhcNMjQwNTE3MjEwMDM5WhcNMjQwNTE4MjEwMDM5WjAzMTEwLwYDVQQD
EyhjYTRkNTUxNmI2ZGYyODI5MDhlMDUyOTM1OGFhMjMwNDVhZTQwMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKn09UFMHcUaDJWm2h4YflS+hvXB
UxDrZSvkH5s9FbE+DFTpgR22HbUpMJ2kG2RLwzZcc7JU1Jw2UQ1SQnQR+7YsYK3Y
1oOClMhh2D55PVVdNymi5jXsHgTL8TNGSJiv3w6g54TWfKgelxHjymKJIMnO6TI+
X2ceO9YzAotCLO228TDL+g5Ny25Fos5IO2J+IXrlpxVWP1W5pAfw+uT3DKd6GpeR
ltu33KcHTRDvB0BVuP7AWsF4qK6zON6Py8HKXvof8Wc7yKszvNroIuOdsj2XudMJ
U8VembZ5a21U/LK2CPdK4rLKjBykifxXFCrZFUvq5zA2T5mGMHfc+ND2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpNVRa23ygpCOBSk1iqIwRa5AAAMB8GA1UdIwQY
MBaAFFcaD8AS77iWUKd+b70S3KvaQoywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUt
OGI0OWRhYjE2NmE0LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUtOGI0OWRhYjE2NmE0
LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEOmekxn
qzxWX0OTVpSKu2DbbZQjJsVqLBk9oHDsgccyhg8b95DBT00ox0IcfgvTms7NbUH9
HwWiER4EYlX+BHxfTSrqoz2SK3MsDqOHLiR44QdKq+/DmyKgNu0Dzsts9SO3XzFb
JorZPBK3M/sG8xMwqkJ8+QYOIRY6c6ZfmA7fgIb+V9eV2g4CFXFS/IVz5wWImxBh
7rpU/F5kEJtboEQuHEDDCRgkOJphCZV16qXZv9ZXNAI0W4WwmkSmKmByqxpTXp2E
Jvdyen3Sf12p2ilZ0uNMZHErFvIc4YFQaQpl0u+3m0D1owBQBswkIvVCpnOGpcCx
0rtwNE92BWE4BQ==
-----END CERTIFICATE-----
Generated at Fri May 17 21:43:43 2024 by rpki-client on console-fra.rpki-client.org