Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File:                     vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier:          l+vFgFoMaS+KHF6ReunWv4yU7zDmnIkdGpLQw5ubcAM=
Subject key identifier:   3B:61:08:B9:4D:37:01:68:1E:35:E8:49:08:D6:1C:70:65:A5:8C:AC
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer:       /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial:       018F885AF8D6985BF42F0FF3AE6274636F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 21:00:14 +0000
Manifest this update:     Fri 17 May 2024 21:00:14 +0000
Manifest next update:     Sat 18 May 2024 21:00:14 +0000
Files and hashes:         1: V77Lo2aVp1Y68zpOxbqjqNYt68g.roa (hash: 6htibnnzSyfbaiFqJEhty7Oc4bKGSRnM6LapHtGjkiU=)
                          2: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: VXxKNhB2BXgibhX+crQV2OpwdJ2Ta74BsUD3PPGPGDs=)
                          3: wBEF7np8klRt2WHmSnhBwoQyGxs.roa (hash: Ghnxt5oGxXj8kQnN+jFIbZRzSclo1x52FEy32Ox6oXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f8:d6:98:5b:f4:2f:0f:f3:ae:62:74:63:6f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
        Validity
            Not Before: May 17 21:00:14 2024 GMT
            Not After : May 18 21:00:14 2024 GMT
        Subject: CN=3b6108b94d3701681e35e84908d61c7065a58cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:25:e7:fa:09:67:55:09:ec:99:46:5f:96:
                    a7:cb:99:e0:4d:a7:f1:68:85:9f:cb:b5:b9:fd:a9:
                    b1:b8:72:e3:3f:2b:25:4a:28:91:95:77:af:d0:e9:
                    97:2a:f0:87:2a:3e:eb:66:f4:33:22:6b:a3:8d:79:
                    d2:74:a4:40:80:75:a7:fd:60:0a:cd:bb:3d:f5:34:
                    58:0d:9f:ee:cd:90:da:b4:8d:01:c9:73:ca:08:3a:
                    f0:e7:ac:b8:9c:a6:d2:a9:d1:6e:82:76:40:cd:7d:
                    2d:76:72:f0:10:60:89:0c:46:b9:04:0d:7a:21:10:
                    cc:bf:13:55:de:b8:b3:2a:58:86:b1:92:1c:28:bf:
                    29:d7:b5:b5:02:d2:48:80:31:ad:be:09:cf:c9:2d:
                    51:dc:d3:ee:b7:e1:42:da:d9:b5:4c:bd:94:9d:e7:
                    cc:62:5e:a6:a9:6c:0c:8a:09:b5:ae:6c:ea:7a:bd:
                    e7:cf:6b:3e:bb:97:dc:ee:59:0a:bd:b5:5d:f6:b7:
                    39:a7:b1:17:3f:8f:e3:2b:77:f8:a2:bc:02:cd:c5:
                    49:d2:50:92:79:f1:d1:09:b5:26:cc:c7:f0:dc:d7:
                    ab:22:8b:74:1e:92:00:f1:31:2a:09:4b:98:97:c1:
                    d0:37:14:7b:bb:40:85:c0:3b:ec:48:bc:ca:05:53:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:61:08:B9:4D:37:01:68:1E:35:E8:49:08:D6:1C:70:65:A5:8C:AC
            X509v3 Authority Key Identifier:
                keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:69:5e:09:c5:ce:29:e5:32:16:cb:1d:8e:35:1d:7c:16:
         d3:e9:d3:51:cf:fb:32:cd:02:de:3b:5e:0e:80:48:5f:58:e7:
         9c:e1:8c:88:a6:1b:e5:27:9b:8b:5e:dd:2d:ef:a3:57:9b:24:
         c9:f1:f9:b5:c1:8e:d4:52:57:e4:d1:b4:13:0b:51:58:95:b5:
         d9:67:14:4f:eb:99:69:23:ab:4b:d3:c8:50:bb:05:f4:b3:13:
         22:f8:c8:40:93:c4:bd:5b:6d:e7:24:e5:00:98:37:4e:88:f9:
         fc:bc:a2:8f:d8:b5:94:8b:67:9f:5a:b9:dd:c5:50:d7:4e:9c:
         e6:3c:d9:5e:63:57:ef:a9:23:95:5f:4a:30:22:42:4a:71:69:
         23:9f:28:30:35:ae:94:48:7e:6e:73:d7:b0:0e:da:7f:d7:86:
         0f:3e:4f:c7:b1:51:cd:81:7e:41:1f:4f:d7:82:e3:01:e6:56:
         77:03:23:fe:8e:80:6f:04:a4:7e:b4:71:b4:4f:8e:81:b5:05:
         ac:3e:7d:4d:b0:9d:6d:6a:50:61:91:19:33:2d:09:ae:ee:3c:
         f7:9f:3f:f0:63:9f:ba:88:74:97:83:da:66:77:24:72:7f:f5:
         a4:45:8e:59:12:18:cd:24:67:a3:07:6e:42:a7:23:27:69:25:
         72:6b:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:05:58 2024 by rpki-client on console-ams.rpki-client.org