Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File:                     VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier:          2EtqmscipMcKA3WBIHHe0dsUdwo8H1J43bp5XO5fbEI=
Subject key identifier:   B8:BB:FC:09:2D:A9:2B:E2:16:0C:BD:47:3F:E2:A4:27:6E:C3:57:F6
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer:       /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial:       018F874B038FEBCD4E7966ADD72896DA43B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:03:11 +0000
Manifest this update:     Fri 17 May 2024 16:03:11 +0000
Manifest next update:     Sat 18 May 2024 16:03:11 +0000
Files and hashes:         1: Meagup66JRu5SbvxueDsIHTLXOU.roa (hash: 3mazj32yrtkkddyG6bTwZVsDDPYPiLx1feWnShzPQmE=)
                          2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: Re1cn2KGc7iyKCu+Jh8Z6olM07sFBCzP8DHcTbBLWwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:03:8f:eb:cd:4e:79:66:ad:d7:28:96:da:43:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
        Validity
            Not Before: May 17 16:03:11 2024 GMT
            Not After : May 18 16:03:11 2024 GMT
        Subject: CN=b8bbfc092da92be2160cbd473fe2a4276ec357f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:02:af:b5:3f:93:9d:12:89:72:6b:c8:6b:
                    98:69:c7:5c:56:86:50:13:7e:18:7e:29:47:af:43:
                    c6:d7:50:b4:5a:bb:3d:47:b6:f3:79:75:8f:41:df:
                    d3:66:71:c5:9d:05:a3:52:20:b3:13:09:5c:44:74:
                    92:30:94:18:5e:ac:6a:e9:74:2a:6c:fe:ae:94:4a:
                    0b:77:67:26:66:ba:af:b8:cf:0e:68:34:99:38:be:
                    f3:40:ee:50:c2:fb:41:06:03:06:30:02:0f:c3:b0:
                    8a:52:c9:d7:83:27:48:94:92:66:bd:88:86:1c:6e:
                    f4:e7:ca:c0:34:11:82:b4:54:e8:7a:c5:17:36:4f:
                    c2:46:9e:65:bc:ca:f0:33:7d:25:e0:85:3b:f6:8e:
                    0a:67:6f:80:56:26:f1:b1:d3:0e:55:e8:ca:1a:ec:
                    2f:b9:35:c7:94:24:60:c7:2b:3b:a1:8f:eb:19:3e:
                    1d:00:e0:5e:8f:20:0b:99:58:c5:46:c6:81:96:39:
                    5c:5d:00:14:b5:db:10:90:bf:e3:79:f3:fc:c4:26:
                    ae:ca:15:36:e5:02:07:ea:36:2b:22:8a:c6:7e:2c:
                    1a:4a:c5:71:a0:37:78:4e:fd:92:0a:69:c8:4c:83:
                    b5:a7:ea:60:8c:53:56:72:dd:20:44:c4:e4:5b:3c:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BB:FC:09:2D:A9:2B:E2:16:0C:BD:47:3F:E2:A4:27:6E:C3:57:F6
            X509v3 Authority Key Identifier:
                keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:ee:62:c6:b5:ee:dc:0a:ab:dd:d6:21:07:da:9f:86:ae:
         cd:4a:37:4a:f7:4d:36:fd:b6:75:bd:8a:94:7f:94:14:3a:44:
         c1:a7:ac:57:cb:6b:06:91:2b:85:0b:0b:70:d7:aa:ea:6f:b6:
         f0:f7:15:c5:80:8b:0b:68:e7:e6:d3:c4:80:82:75:d7:d8:2a:
         d7:00:4b:5d:9c:dc:a9:d8:31:9e:e8:85:a1:cf:e1:41:0a:52:
         e8:47:2f:95:b5:62:09:90:6a:84:df:e5:70:57:07:06:54:ec:
         6d:c3:40:99:3a:9f:ac:2f:94:b4:f4:c5:f3:61:46:c6:fe:b4:
         f4:f6:20:98:70:9f:b0:17:78:5b:21:ab:04:cd:92:cb:bf:65:
         c9:b0:32:f0:3b:37:95:44:0a:e7:86:78:d6:b9:1b:a9:65:d3:
         e4:df:67:5d:d6:1a:54:d1:b3:e8:54:76:dc:90:4c:fa:9f:b3:
         46:81:ac:fe:12:50:d6:0b:d8:fb:b7:54:db:96:96:f4:a0:79:
         a1:db:e1:32:52:29:b2:8d:29:29:f1:96:75:7a:89:b9:cc:00:
         43:93:54:42:e7:65:54:04:f3:4d:95:fe:13:16:9e:25:24:bc:
         36:2d:0c:7d:87:8e:6e:20:87:e9:0e:42:73:90:29:08:ab:18:
         29:29:75:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSwOP681OeWat1yiW2kOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjhlMDRiMGUxYTRkNGUzYTI4ZGYxNWViNTg0OTNlNzYz
NzdlYjAwHhcNMjQwNTE3MTYwMzExWhcNMjQwNTE4MTYwMzExWjAzMTEwLwYDVQQD
EyhiOGJiZmMwOTJkYTkyYmUyMTYwY2JkNDczZmUyYTQyNzZlYzM1N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLECr7U/k50SiXJryGuYacdcVoZQ
E34YfilHr0PG11C0Wrs9R7bzeXWPQd/TZnHFnQWjUiCzEwlcRHSSMJQYXqxq6XQq
bP6ulEoLd2cmZrqvuM8OaDSZOL7zQO5QwvtBBgMGMAIPw7CKUsnXgydIlJJmvYiG
HG7058rANBGCtFToesUXNk/CRp5lvMrwM30l4IU79o4KZ2+AVibxsdMOVejKGuwv
uTXHlCRgxys7oY/rGT4dAOBejyALmVjFRsaBljlcXQAUtdsQkL/jefP8xCauyhU2
5QIH6jYrIorGfiwaSsVxoDd4Tv2SCmnITIO1p+pgjFNWct0gRMTkWzyPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi7/AktqSviFgy9Rz/ipCduw1f2MB8GA1UdIwQY
MBaAFFS44EsOGk1OOijfFetYST52N36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWIt
NjM5MTZmN2YxNzRiLzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWItNjM5MTZmN2YxNzRi
LzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEfuYsa1
7twKq93WIQfan4auzUo3SvdNNv22db2KlH+UFDpEwaesV8trBpErhQsLcNeq6m+2
8PcVxYCLC2jn5tPEgIJ119gq1wBLXZzcqdgxnuiFoc/hQQpS6EcvlbViCZBqhN/l
cFcHBlTsbcNAmTqfrC+UtPTF82FGxv609PYgmHCfsBd4WyGrBM2Sy79lybAy8Ds3
lUQK54Z41rkbqWXT5N9nXdYaVNGz6FR23JBM+p+zRoGs/hJQ1gvY+7dU25aW9KB5
odvhMlIpso0pKfGWdXqJucwAQ5NUQudlVATzTZX+ExaeJSS8Ni0MfYeObiCH6Q5C
c5ApCKsYKSl1FA==
-----END CERTIFICATE-----
Generated at Sat May 18 00:02:08 2024 by rpki-client on console-ams.rpki-client.org