Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File:                     VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier:          0gJZs0QHtwDzBgMjorPVeRiPz9MVenZANkPBduJZ5Ao=
Subject key identifier:   2D:9C:18:11:EE:9A:10:92:1F:EE:D3:32:FF:EC:FD:70:97:2E:9A:F4
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer:       /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial:       018F87ECF64025F9B85FE40FA0AF0FB7EBB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number:          0F71
Signing time:             Fri 17 May 2024 19:00:04 +0000
Manifest this update:     Fri 17 May 2024 19:00:04 +0000
Manifest next update:     Sat 18 May 2024 19:00:04 +0000
Files and hashes:         1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: 9VAuEJ+h2Ae4y3Iaa8eYPsHIhQAl0BTmwqZ3XHNeHxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:f6:40:25:f9:b8:5f:e4:0f:a0:af:0f:b7:eb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
        Validity
            Not Before: May 17 19:00:04 2024 GMT
            Not After : May 18 19:00:04 2024 GMT
        Subject: CN=2d9c1811ee9a10921feed332ffecfd70972e9af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:6c:dc:bf:af:5c:f7:e3:ff:5c:b5:aa:b2:
                    0f:a8:f7:cb:3e:2b:2b:eb:6e:48:8c:19:92:fe:8b:
                    bc:a2:7b:7b:c0:a1:b3:bf:ad:3b:7b:7a:6e:df:70:
                    be:d3:f9:0d:a4:30:83:9b:43:f8:21:b9:56:2d:8d:
                    84:be:10:9a:11:18:3f:dc:28:e6:98:87:ac:12:fb:
                    2a:ab:4f:58:a4:af:f3:6c:d5:c8:2e:d0:66:a5:eb:
                    90:80:54:c7:74:93:7c:45:7f:b8:49:a4:7e:49:64:
                    f6:ff:4b:f1:ee:11:f8:72:66:96:ff:57:6e:f1:5f:
                    09:6b:82:86:b8:8d:32:ad:aa:99:bb:ec:5b:b9:a0:
                    be:10:3c:ff:67:d4:bd:1b:e0:3c:9f:ff:76:ad:17:
                    f4:d4:68:8e:c4:e9:c1:dc:56:3b:ef:6c:22:17:b8:
                    49:67:bb:4a:34:91:6e:8e:67:c1:81:82:20:bd:5c:
                    18:32:ba:92:8f:38:0b:cb:67:7e:5d:a0:cc:09:27:
                    ef:2b:4c:99:07:22:cc:b1:0c:14:28:b6:5d:0e:0c:
                    4c:3b:45:91:2e:a3:17:0d:4a:3a:e9:e2:92:45:af:
                    d3:bb:00:ae:ba:67:fa:e2:ad:a5:3d:43:15:f4:c6:
                    cc:33:42:00:a0:a4:66:2d:ff:0f:27:7f:70:b9:15:
                    e1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9C:18:11:EE:9A:10:92:1F:EE:D3:32:FF:EC:FD:70:97:2E:9A:F4
            X509v3 Authority Key Identifier:
                keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:e9:fb:47:81:19:21:ca:5d:25:14:95:09:45:21:fa:fd:
         9d:f1:b6:9b:f6:ea:af:73:dd:c9:87:f5:b9:9d:ef:0b:1a:4d:
         9d:6a:3f:48:58:c4:cf:ff:ed:a6:84:52:e2:17:5d:09:04:12:
         7e:df:d9:e6:c5:6d:b3:8a:fa:3b:1b:63:c3:1e:7c:94:fd:9e:
         fc:c0:92:0a:9a:b0:4c:d9:21:ed:0a:f0:74:ed:b8:ba:8e:7a:
         65:87:48:1a:ad:bc:aa:62:74:81:09:e4:8d:47:73:8a:66:63:
         fe:3e:4e:d1:50:33:44:6d:70:ed:95:9a:ac:32:fd:91:31:8a:
         5f:73:d4:37:77:4e:1d:91:cf:6f:ce:71:38:91:74:41:1b:a5:
         8c:1d:05:4a:ea:c1:02:cc:ae:a3:02:78:55:87:64:ee:67:b3:
         96:40:29:c4:bc:d7:93:7d:ff:08:44:2f:77:4c:32:82:0f:48:
         14:6d:ef:a1:66:74:12:ab:6c:1f:12:a3:47:1b:0e:e3:4e:a2:
         0d:d6:85:1d:44:68:50:7c:0d:dd:20:c6:34:9c:9d:bf:50:26:
         37:a0:31:3a:a0:72:c0:ad:a6:54:ec:c3:25:c2:1a:3d:24:cd:
         33:6a:1a:d7:fa:5e:8f:8c:a6:9d:22:d7:5e:81:0b:77:24:6c:
         ef:ba:83:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7PZAJfm4X+QPoK8Pt+uxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx
ZDdkOGUwHhcNMjQwNTE3MTkwMDA0WhcNMjQwNTE4MTkwMDA0WjAzMTEwLwYDVQQD
EygyZDljMTgxMWVlOWExMDkyMWZlZWQzMzJmZmVjZmQ3MDk3MmU5YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbps3L+vXPfj/1y1qrIPqPfLPisr
625IjBmS/ou8ont7wKGzv607e3pu33C+0/kNpDCDm0P4IblWLY2EvhCaERg/3Cjm
mIesEvsqq09YpK/zbNXILtBmpeuQgFTHdJN8RX+4SaR+SWT2/0vx7hH4cmaW/1du
8V8Ja4KGuI0yraqZu+xbuaC+EDz/Z9S9G+A8n/92rRf01GiOxOnB3FY772wiF7hJ
Z7tKNJFujmfBgYIgvVwYMrqSjzgLy2d+XaDMCSfvK0yZByLMsQwUKLZdDgxMO0WR
LqMXDUo66eKSRa/TuwCuumf64q2lPUMV9MbMM0IAoKRmLf8PJ39wuRXhwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2cGBHumhCSH+7TMv/s/XCXLpr0MB8GA1UdIwQY
MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt
ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw
LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEfp+0eB
GSHKXSUUlQlFIfr9nfG2m/bqr3PdyYf1uZ3vCxpNnWo/SFjEz//tpoRS4hddCQQS
ft/Z5sVts4r6Oxtjwx58lP2e/MCSCpqwTNkh7QrwdO24uo56ZYdIGq28qmJ0gQnk
jUdzimZj/j5O0VAzRG1w7ZWarDL9kTGKX3PUN3dOHZHPb85xOJF0QRuljB0FSurB
AsyuowJ4VYdk7mezlkApxLzXk33/CEQvd0wygg9IFG3voWZ0EqtsHxKjRxsO406i
DdaFHURoUHwN3SDGNJydv1AmN6AxOqBywK2mVOzDJcIaPSTNM2oa1/pej4ymnSLX
XoELdyRs77qD2A==
-----END CERTIFICATE-----
Generated at Fri May 17 20:09:26 2024 by rpki-client on console-ams.rpki-client.org