Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
File:                     VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json)
Hash identifier:          lwlXpCVkRpoHI5WdaAdbE6X2W76zTQvkjq6TSz4MsBY=
Subject key identifier:   B0:F7:12:A5:C7:25:50:C0:F4:6D:28:47:83:70:08:76:A4:80:14:1C
Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Certificate issuer:       /CN=56f82214f54379d7b34e1a103d658a131e70181b
Certificate serial:       018F874AA8A584F6A271C277F88534CDBED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:47 +0000
Manifest this update:     Fri 17 May 2024 16:02:47 +0000
Manifest next update:     Sat 18 May 2024 16:02:47 +0000
Files and hashes:         1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: 8Pd1oRX0Kmou3jjFj0O0M/hmQHmK+4zlSEglAMxtEu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a8:a5:84:f6:a2:71:c2:77:f8:85:34:cd:be:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b
        Validity
            Not Before: May 17 16:02:47 2024 GMT
            Not After : May 18 16:02:47 2024 GMT
        Subject: CN=b0f712a5c72550c0f46d284783700876a480141c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:a1:9a:03:87:77:75:3d:2c:ad:40:49:1c:
                    43:1b:fd:30:12:c1:af:a6:9e:9d:ba:ec:c0:ca:07:
                    1b:77:c8:3b:54:c7:57:92:64:45:ae:82:1e:77:ff:
                    99:e0:ae:d2:11:db:ce:88:81:3b:61:3f:f7:97:0c:
                    cd:ec:5c:12:b1:15:c6:a3:42:6b:ea:a1:a5:20:f7:
                    1e:c4:50:93:82:61:76:a7:a3:ad:45:04:b5:1a:de:
                    fd:7f:33:02:2b:87:31:3d:a8:56:5e:e5:14:20:e4:
                    e6:81:37:6b:c0:9b:89:0f:28:23:e6:d9:09:60:6b:
                    b9:b8:3b:de:d9:e6:98:67:fe:5b:de:3d:b8:73:f1:
                    ed:19:01:0b:a8:64:80:f7:39:04:85:46:1f:08:41:
                    12:a5:09:c8:5e:3c:eb:52:b1:5b:f7:5d:ef:da:4b:
                    1d:33:77:2d:ee:d1:4a:be:f3:b1:c6:07:1d:e2:08:
                    c7:06:d5:96:7e:08:01:53:25:ba:2a:5b:74:2c:55:
                    ae:09:53:d4:8b:17:8e:f2:7a:78:e0:78:05:83:4d:
                    74:d7:78:e6:0a:8a:11:35:a1:3d:f5:8e:93:3c:99:
                    f1:4c:20:ee:5c:fd:6a:95:b4:3a:c7:16:53:28:4c:
                    da:a9:50:99:3f:45:b3:ef:32:fd:74:13:5d:85:90:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:12:A5:C7:25:50:C0:F4:6D:28:47:83:70:08:76:A4:80:14:1C
            X509v3 Authority Key Identifier:
                keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e4:a2:50:46:36:11:92:35:5d:0b:8c:57:17:90:52:4e:40:
         6d:01:d4:a5:ba:89:d9:36:27:77:4a:2b:f7:64:c9:69:4b:50:
         9a:bd:22:11:27:ee:17:39:00:91:8d:b8:2f:45:86:e4:61:53:
         74:f2:d0:67:f3:31:42:dd:c6:df:01:4e:ca:1e:b5:8a:75:91:
         c9:48:a8:1b:8f:bb:86:6a:87:c9:bb:8d:b9:9c:82:3f:51:ff:
         8c:1e:0b:ac:5c:86:3e:f2:75:be:34:0e:6a:f2:d0:a5:e6:01:
         b5:25:62:b0:ed:1e:f2:26:b6:fe:c8:12:0a:91:64:1c:2e:79:
         74:d6:54:26:b4:12:77:f1:b5:af:e8:12:dd:85:f2:20:f7:98:
         21:16:27:8d:4f:b0:25:42:3f:b9:ef:dc:f2:9a:fa:0f:e4:50:
         ca:9d:0d:7b:23:3b:9d:73:b3:ff:bd:6a:c5:4d:fe:84:5e:9f:
         3d:05:37:07:b3:cb:30:f5:1e:40:a5:bf:f4:f9:b6:fd:43:ff:
         e4:cb:9e:7e:ee:1d:3b:91:39:8d:d2:bf:cf:08:66:0f:26:51:
         a2:e6:9a:ef:60:ae:5a:2e:78:b0:26:8c:48:48:89:42:e3:f5:
         d0:a7:cc:4d:61:fb:55:dc:d3:6c:93:27:45:5e:d1:d9:8f:7c:
         e6:a6:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:01 2024 by rpki-client on console-ams.rpki-client.org