Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/517d29-f736-4fbc-9d13-6fdda61b50d7/1/vUh_IQcgLRkC1QvMJylDHZmTVUM.mft
File:                     vUh_IQcgLRkC1QvMJylDHZmTVUM.mft (raw, json)
Hash identifier:          bc6LNHynNBWBvzjG9kHzlNZojipPI7p0EuUIk/sK1zo=
Subject key identifier:   8D:33:BF:B2:15:5E:5A:06:40:13:65:48:F0:0E:24:FC:8A:E0:C5:66
Authority key identifier: BD:48:7F:21:07:20:2D:19:02:D5:0B:CC:27:29:43:1D:99:93:55:43
Certificate issuer:       /CN=bd487f2107202d1902d50bcc2729431d99935543
Certificate serial:       018F874A6E23150A699A77CD880F1249735E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUh_IQcgLRkC1QvMJylDHZmTVUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/517d29-f736-4fbc-9d13-6fdda61b50d7/1/vUh_IQcgLRkC1QvMJylDHZmTVUM.mft
Manifest number:          0957
Signing time:             Fri 17 May 2024 16:02:32 +0000
Manifest this update:     Fri 17 May 2024 16:02:32 +0000
Manifest next update:     Sat 18 May 2024 16:02:32 +0000
Files and hashes:         1: vUh_IQcgLRkC1QvMJylDHZmTVUM.crl (hash: 99O1mmEHx+6Q0H90gtuUB934X4Bz/bSa9WCyRLa0ua4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/517d29-f736-4fbc-9d13-6fdda61b50d7/1/vUh_IQcgLRkC1QvMJylDHZmTVUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/517d29-f736-4fbc-9d13-6fdda61b50d7/1/vUh_IQcgLRkC1QvMJylDHZmTVUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUh_IQcgLRkC1QvMJylDHZmTVUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:6e:23:15:0a:69:9a:77:cd:88:0f:12:49:73:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd487f2107202d1902d50bcc2729431d99935543
        Validity
            Not Before: May 17 16:02:32 2024 GMT
            Not After : May 18 16:02:32 2024 GMT
        Subject: CN=8d33bfb2155e5a0640136548f00e24fc8ae0c566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:71:13:5b:c1:a2:2d:21:d7:cf:97:de:3a:
                    92:81:50:59:9a:6f:23:6a:41:2d:31:e2:b7:02:fa:
                    8c:12:4e:c2:af:5d:cf:ee:71:4c:2f:07:97:79:62:
                    69:f2:81:1e:f9:38:03:2d:60:83:d0:09:3f:c6:99:
                    5a:7b:8e:cd:5a:76:b9:8c:4f:dd:0b:e5:40:77:62:
                    51:ab:70:5e:c0:0c:29:de:0b:22:e5:07:a8:92:77:
                    b5:87:44:d7:c9:d5:37:bd:cd:76:db:6e:a2:3c:99:
                    6c:a9:52:69:6d:4e:a9:1d:cf:89:b6:b2:34:72:02:
                    66:c1:c5:05:70:5d:ed:15:5f:6f:88:99:a0:6a:c8:
                    45:6d:fc:76:cb:d2:62:de:e4:6d:50:03:54:ef:8a:
                    e6:23:cd:ab:ac:fd:39:0d:e4:78:4e:64:99:c4:25:
                    43:02:02:14:66:be:fe:5d:76:5f:25:ca:f5:1b:30:
                    a2:8a:45:a9:ee:6c:cf:f9:d7:ba:d6:39:b4:45:e0:
                    88:08:b6:e4:07:28:d7:ce:b5:35:05:94:0e:3c:0c:
                    d1:4a:f0:f8:2e:ce:de:42:4e:66:5e:4a:4e:c5:18:
                    be:4b:c1:f9:f7:a2:58:55:43:9a:5f:e3:db:47:1a:
                    53:a9:56:ac:21:4f:b3:26:72:b3:6c:eb:9c:c7:ab:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:33:BF:B2:15:5E:5A:06:40:13:65:48:F0:0E:24:FC:8A:E0:C5:66
            X509v3 Authority Key Identifier:
                keyid:BD:48:7F:21:07:20:2D:19:02:D5:0B:CC:27:29:43:1D:99:93:55:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUh_IQcgLRkC1QvMJylDHZmTVUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/517d29-f736-4fbc-9d13-6fdda61b50d7/1/vUh_IQcgLRkC1QvMJylDHZmTVUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/517d29-f736-4fbc-9d13-6fdda61b50d7/1/vUh_IQcgLRkC1QvMJylDHZmTVUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:5e:0c:1e:23:eb:14:69:b3:b0:22:6c:69:23:be:a4:e7:
         32:ca:f2:41:52:4f:57:bb:78:36:e4:48:df:e7:0c:4f:d4:d8:
         c8:68:cd:5a:d0:b9:d7:4e:2c:bc:af:0b:f6:67:4e:3f:9e:61:
         13:25:28:2a:04:62:73:c1:05:f7:dd:b3:83:c4:fd:ee:87:f0:
         0d:b2:e8:f1:47:b7:f7:30:40:10:ee:83:29:85:3f:34:95:c7:
         49:2e:b4:37:06:48:49:de:b6:60:47:84:3f:3d:b0:f0:c4:b6:
         6b:6e:c6:37:8a:e1:0d:43:93:e7:49:c0:12:38:00:6e:4f:54:
         db:9f:4a:91:ab:be:4b:79:40:34:a5:c9:00:3e:a3:65:11:3c:
         35:90:61:73:f4:06:86:24:60:b8:30:6f:4d:47:0f:7e:28:3f:
         57:f9:4e:b0:42:e9:66:0c:03:70:7f:1d:c1:9f:2b:6d:ff:a8:
         68:80:77:af:01:06:3d:62:12:5a:62:a9:48:cf:86:58:67:2a:
         1f:fa:8a:6d:3c:a4:01:57:06:d2:2e:f7:ab:a0:4b:d6:16:27:
         cf:75:a7:57:6d:0c:d5:e7:d3:27:dc:84:fe:1f:89:27:02:04:
         f5:8d:c8:9c:e2:a3:4a:92:ba:07:78:ba:27:2f:43:b2:71:4f:
         75:be:99:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:51 2024 by rpki-client on console-ams.rpki-client.org