Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File:                     92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier:          n2NxALx40brywVEFmTHc2uWyEYah67ZrEIYZnw7mJuo=
Subject key identifier:   18:E1:90:47:7A:70:84:E0:CB:78:9D:6E:0C:1B:AC:0E:6E:27:88:67
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer:       /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial:       019021C7B4E1F77E249054127BB79AA8657D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number:          09DE
Signing time:             Sun 16 Jun 2024 16:00:54 +0000
Manifest this update:     Sun 16 Jun 2024 16:00:54 +0000
Manifest next update:     Mon 17 Jun 2024 16:00:54 +0000
Files and hashes:         1: 6LutgqR6q4o7_5UE-NRjJCPX8xM.roa (hash: 9cvxYnbAPLQ+DK6e1jAH/dJZYY+/cogrV/TOPQYtgl0=)
                          2: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: d/8aOB992XmbAnKh8+L0ALztEKjcAEMEiNuoHf8KOVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:21:c7:b4:e1:f7:7e:24:90:54:12:7b:b7:9a:a8:65:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
        Validity
            Not Before: Jun 16 16:00:54 2024 GMT
            Not After : Jun 17 16:00:54 2024 GMT
        Subject: CN=18e190477a7084e0cb789d6e0c1bac0e6e278867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e8:6f:1f:2a:27:68:3c:eb:bd:36:2a:37:81:
                    31:1c:21:94:35:97:c7:40:cc:42:c3:2c:bb:ea:f1:
                    d0:66:75:a9:e8:da:8b:29:8d:72:88:81:75:c9:2c:
                    d6:b2:0e:88:6a:72:66:2e:8a:1e:c0:df:fa:e2:20:
                    28:36:6b:8a:dd:76:20:72:20:18:ce:c0:af:62:0d:
                    d8:9b:3a:34:15:ff:f7:73:5f:76:2a:08:27:10:1f:
                    75:31:ca:6a:63:36:0a:6d:98:04:1e:92:61:1b:f3:
                    75:0c:77:d2:b0:59:80:1d:91:84:bf:77:33:19:20:
                    6d:19:2b:4e:8b:3a:fd:e5:5d:78:c0:51:2c:02:9b:
                    ad:50:be:99:ee:77:8d:a0:a1:b1:42:70:02:01:e7:
                    0b:8a:2e:ef:3b:6e:46:e9:27:36:33:a1:3b:4a:a2:
                    fc:20:8c:77:9d:3e:69:3d:26:d4:eb:5b:09:b0:24:
                    3c:73:67:7e:15:65:db:20:ec:5f:ac:eb:e7:92:39:
                    bd:a2:e1:22:46:bb:88:32:fd:6c:1c:35:4c:db:a1:
                    8d:bd:1d:9a:23:b7:7d:87:1c:fd:d8:3d:38:ad:9d:
                    53:b7:3f:34:62:51:85:eb:ad:4d:13:82:67:ac:49:
                    aa:3f:09:78:10:9d:7d:2c:48:5c:52:6d:3b:5b:b3:
                    fc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E1:90:47:7A:70:84:E0:CB:78:9D:6E:0C:1B:AC:0E:6E:27:88:67
            X509v3 Authority Key Identifier:
                keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:39:78:c0:e2:7d:f0:35:74:c0:9c:83:8c:3a:f2:9c:84:20:
         39:46:0c:ae:d1:dc:be:74:eb:69:c7:db:74:61:e1:fe:9f:24:
         2a:81:5a:0b:0e:de:18:c2:aa:8b:58:da:b0:35:f8:66:c3:06:
         0a:94:25:0b:de:48:4b:61:61:a6:f6:8c:1a:bc:16:e5:ed:a8:
         84:74:cd:c3:c2:c3:76:ea:ff:ad:eb:35:fc:1e:f8:d0:4e:9f:
         8d:7b:28:f1:b7:66:3f:bc:26:7b:2e:8d:7a:8a:59:be:02:8b:
         5e:c4:2f:e1:5a:7b:e8:e4:3d:15:b1:17:a3:53:af:75:06:1e:
         e2:58:fa:75:54:71:02:ae:7c:9b:20:63:8f:0e:07:e6:1e:be:
         4b:70:a8:d7:70:c8:48:36:14:02:12:e3:20:cb:2d:d1:79:32:
         5f:62:07:a9:12:cd:1e:01:eb:28:a1:2b:3f:ca:de:0e:46:97:
         1c:18:f5:46:03:b2:1e:37:24:f6:d7:2c:f2:20:a0:40:49:1b:
         85:6d:4c:be:1c:56:1b:3c:f9:26:79:03:8f:39:e2:23:e5:e7:
         4a:1d:c7:0c:a6:71:12:b0:8c:3b:42:06:ea:19:4f:f5:ae:63:
         27:f5:fd:a2:8a:81:11:a5:c2:81:26:3b:e7:09:e7:94:3a:c0:
         d0:3c:dc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:14:04 2024 by rpki-client on console-ams.rpki-client.org