Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
File:                     Vxp0VREn6Q1zotOylfGm_1FRn98.mft (raw, json)
Hash identifier:          x5bMvkivxWEggaYcdY3wBXL7JMm37NNg97VGB01e71Y=
Subject key identifier:   BE:A7:74:8F:D1:41:82:16:B2:2D:D4:3F:7E:A8:7D:31:35:98:7E:05
Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
Certificate issuer:       /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Certificate serial:       018F86A3EB81748EC1CFC1D8B31EB4CAD8AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
Manifest number:          03B4
Signing time:             Fri 17 May 2024 13:00:40 +0000
Manifest this update:     Fri 17 May 2024 13:00:40 +0000
Manifest next update:     Sat 18 May 2024 13:00:40 +0000
Files and hashes:         1: Vxp0VREn6Q1zotOylfGm_1FRn98.crl (hash: z2DJfdgzBxrk4bjtdIdxuwZwCOGi+fMc8qVpEG8FBRU=)
                          2: eR1CZUlc3AW_oqClqVlGwk4yRU8.roa (hash: 0M8SX0B+iVeJQlWdwNL080nD0otnRey3k1YVu0HjZoA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:eb:81:74:8e:c1:cf:c1:d8:b3:1e:b4:ca:d8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
        Validity
            Not Before: May 17 13:00:40 2024 GMT
            Not After : May 18 13:00:40 2024 GMT
        Subject: CN=bea7748fd1418216b22dd43f7ea87d3135987e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:af:1f:7a:ed:27:03:e8:bd:ae:a7:1d:c0:
                    0e:c6:71:f8:84:07:54:70:f4:5f:4e:a4:65:55:90:
                    34:ff:55:cc:72:9e:9e:9d:c9:4f:a6:00:6e:99:6c:
                    37:45:0e:9e:84:c7:ec:2a:ca:79:a1:23:59:7f:31:
                    84:03:84:8c:50:c2:74:00:09:be:ce:dd:92:d4:d2:
                    7f:11:77:17:0d:9e:fc:07:c3:ec:46:84:34:c9:a3:
                    ba:ba:08:34:7b:93:58:96:cf:b9:8e:7d:d7:3e:2a:
                    de:6e:57:4c:2f:6b:0b:bf:9b:e1:0e:d9:2b:f6:95:
                    2c:c8:de:15:8d:de:37:9d:af:15:61:8f:5e:51:5a:
                    f8:7f:75:52:e7:2b:ab:65:a2:da:3a:06:4a:51:75:
                    a0:01:80:67:b9:ca:4f:1a:62:82:a2:9f:36:f5:4a:
                    6c:4b:ef:df:c7:80:66:f2:8c:4c:9c:50:fc:d5:b9:
                    e8:4e:c2:63:56:86:38:cd:b4:cc:e4:d5:72:a8:8f:
                    b2:df:8c:c4:77:0b:2b:ba:73:12:8d:96:86:7b:a7:
                    10:18:12:7c:64:0d:83:95:48:d5:c6:05:41:05:db:
                    4c:a2:40:f1:74:77:d8:3c:c8:18:d3:19:5e:99:11:
                    b7:0b:9b:03:0f:c0:d7:e9:4c:d1:89:af:2e:4f:37:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A7:74:8F:D1:41:82:16:B2:2D:D4:3F:7E:A8:7D:31:35:98:7E:05
            X509v3 Authority Key Identifier:
                keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:42:7f:4e:92:c1:37:55:ea:97:53:84:bb:a7:af:46:e6:87:
         a6:0f:50:5a:19:8c:6e:43:65:3b:ae:1b:53:2c:f7:8b:8c:a0:
         32:2e:ab:58:05:d3:66:71:8d:5d:e7:86:91:c9:ac:33:e2:1f:
         49:ab:94:b2:12:a5:87:41:d5:fa:ca:68:fb:4e:90:10:17:a9:
         2e:a7:00:67:e4:e1:52:84:8c:9a:d8:66:48:ce:dc:63:0c:bc:
         e8:6c:62:f5:a3:be:bf:79:d1:42:50:fc:2c:89:46:37:34:d7:
         ec:f4:01:16:ee:df:63:0b:fd:14:52:8c:32:33:0c:c4:66:c5:
         93:12:37:a5:51:c5:d3:00:32:99:82:4e:ad:0e:7a:20:47:2b:
         61:dc:41:7d:3b:6c:f9:c0:04:24:51:85:f5:59:8f:12:1d:cc:
         c6:b7:99:6a:06:12:d0:7c:f4:48:50:8d:50:7f:68:66:ba:a7:
         64:ea:52:dd:96:dc:b1:d1:22:2c:22:87:3f:9a:2d:c8:fb:c2:
         e9:24:cb:67:cf:14:dc:81:90:d6:42:b4:db:20:b4:01:02:df:
         52:8e:65:28:e0:84:69:c6:f2:ca:48:c6:ac:64:90:5d:b6:4f:
         8d:5b:bc:54:80:e4:0e:1c:e4:fb:a3:c1:2c:23:65:6b:e7:76:
         76:31:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:10 2024 by rpki-client on console-ams.rpki-client.org