Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft
File:                     vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft (raw, json)
Hash identifier:          sU/YgxW8f39vPSZ2ZJVuOZrIouCJQGoV3x+ScVSfyD0=
Subject key identifier:   A7:2F:77:41:6A:E8:63:2A:F7:A7:00:E0:74:36:DB:7A:DC:6D:B0:95
Authority key identifier: BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08
Certificate issuer:       /CN=beffadb46a30360bb84f80701bcafb470f064208
Certificate serial:       0194C3BE5F3B189A32755A57FFFFCA44AD18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft
Manifest number:          01BD
Signing time:             Sat 01 Feb 2025 23:00:20 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:20 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:20 +0000
Files and hashes:         1: vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl (hash: usVVO9YtBH72vTfUs7vGgUBMVp/pFl1idP0EbcOn7GA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:5f:3b:18:9a:32:75:5a:57:ff:ff:ca:44:ad:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beffadb46a30360bb84f80701bcafb470f064208
        Validity
            Not Before: Feb  1 23:00:20 2025 GMT
            Not After : Feb  2 23:00:20 2025 GMT
        Subject: CN=a72f77416ae8632af7a700e07436db7adc6db095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:e2:66:11:bd:67:1b:a3:ca:91:e8:b0:66:
                    64:11:84:f7:4d:0b:01:33:80:5c:c6:2c:75:f1:a9:
                    02:38:93:b7:63:73:dd:8f:87:47:e9:fa:8a:84:83:
                    f9:8e:2b:f2:a0:42:e1:1e:b3:59:82:4b:f8:2a:df:
                    d6:e9:69:72:1d:9b:7d:a9:f9:08:da:5a:cf:88:c3:
                    cc:08:a2:77:af:0c:37:87:df:57:7b:13:bc:81:3d:
                    95:f2:b5:be:e3:13:06:34:64:68:8c:2b:05:35:7e:
                    ee:16:c2:2b:6a:29:80:f4:db:44:95:50:71:c6:61:
                    03:e3:49:da:b3:ad:a8:c8:54:47:eb:ca:37:6a:4d:
                    35:61:f2:be:c3:27:a6:34:a0:63:3f:c7:eb:d6:0d:
                    c2:37:4e:80:d7:d0:48:fb:3b:7f:88:11:01:a0:c1:
                    de:ef:72:44:95:83:63:9c:d2:f5:3d:79:a0:93:5a:
                    d8:0a:4e:62:67:c5:e7:ce:09:9f:12:c1:42:2f:da:
                    ff:1c:af:b3:2d:73:b8:fd:f4:36:b9:db:07:fa:96:
                    0e:6b:2f:c8:66:1d:d2:da:a6:85:22:5a:70:4c:f5:
                    f9:fc:73:13:c5:4b:dc:b0:5a:b9:c6:31:a4:7e:05:
                    72:e2:da:b5:e0:3a:60:50:a6:28:e3:c5:fc:30:ca:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:77:41:6A:E8:63:2A:F7:A7:00:E0:74:36:DB:7A:DC:6D:B0:95
            X509v3 Authority Key Identifier:
                keyid:BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:44:95:05:42:bd:2c:d2:e4:07:77:e4:bc:f9:c3:15:22:
         33:7d:ad:96:56:d9:8a:35:f6:1f:dc:8b:8b:17:ba:17:28:e8:
         86:05:d0:6e:69:87:a1:88:8d:6a:26:56:23:f2:54:19:ef:c6:
         2b:59:66:b2:c4:b5:41:d9:be:33:a6:ce:1d:92:93:73:13:00:
         a4:ed:f9:ca:d6:0c:c1:a8:ba:a5:8c:2e:29:a5:9a:db:33:c4:
         3a:cb:35:c1:4e:5c:9c:72:a6:d0:14:df:ba:1f:66:fa:bd:86:
         ee:1e:bb:8d:91:06:b1:99:f3:40:34:52:db:3c:cf:89:cb:b8:
         45:1b:54:98:ec:cc:5a:71:df:6b:35:8b:5e:cd:1a:ab:f5:38:
         95:fe:7e:5e:62:b0:a7:60:8c:a4:14:f3:3d:3f:71:0d:61:e5:
         79:06:30:62:3d:00:5b:17:9f:d5:90:d6:d6:d1:cb:8c:0d:1a:
         84:86:be:55:d1:0f:eb:2b:91:47:d8:bb:b3:8e:40:e9:84:a4:
         18:f9:de:1e:c0:11:cb:fb:d4:a7:c2:4e:76:99:98:e9:40:b3:
         07:b3:3a:b1:94:b6:c9:dd:35:43:36:ba:ed:d9:e0:20:9d:8f:
         7c:04:1d:27:e4:7f:a0:38:5d:bb:5e:6d:a8:96:c3:c2:a1:51:
         39:b9:88:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:26 2025 by rpki-client