Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File:                     vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier:          +A+f6/uUdnczeWouTljtrSl+HTlzXMt7iEcXGoFp2fQ=
Subject key identifier:   4C:59:33:66:99:8A:B3:A6:4E:E7:8B:66:2B:46:C1:27:4F:C2:42:B7
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer:       /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial:       018F8749C1C498EF19E503779B23935A0936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:01:48 +0000
Manifest this update:     Fri 17 May 2024 16:01:48 +0000
Manifest next update:     Sat 18 May 2024 16:01:48 +0000
Files and hashes:         1: msdFCQEYjuwUBfgECRjNvsFzJSs.roa (hash: ESR33wkeQTiIHkHLDlCXDdOs6oBBrGahdPzld9WQ7PE=)
                          2: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: 7bgM3IQoyGgddS+rB5wuuzUD+14dsaUxMV1MnLRIx9c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c1:c4:98:ef:19:e5:03:77:9b:23:93:5a:09:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
        Validity
            Not Before: May 17 16:01:48 2024 GMT
            Not After : May 18 16:01:48 2024 GMT
        Subject: CN=4c593366998ab3a64ee78b662b46c1274fc242b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c7:41:48:de:8a:80:8f:ac:8e:68:03:1f:04:
                    b2:f1:4e:af:3d:34:e3:5a:9a:a5:b9:2c:fc:92:f1:
                    ef:8a:2e:47:c8:18:d3:94:87:6f:5a:f9:4d:d3:37:
                    ab:5f:5f:fe:4d:37:8d:3e:b5:c2:55:ff:61:95:b7:
                    cb:d0:06:5b:11:13:cc:c7:c0:73:ec:c9:88:68:84:
                    d7:87:f9:85:63:53:4c:b1:53:7b:a9:5c:4a:6e:3e:
                    47:27:77:1c:f4:1e:07:92:31:57:66:b1:50:3f:ad:
                    44:9f:23:b1:20:9d:76:24:18:e8:55:ae:34:5d:a3:
                    08:b9:b1:f3:3f:29:bb:cb:e0:00:03:9e:1a:25:16:
                    e6:a3:13:bb:7b:52:c5:df:c0:44:26:4e:d0:4b:ad:
                    f9:74:6f:ec:5f:aa:40:d0:dd:d4:7d:1c:07:f7:63:
                    8b:82:75:91:25:8d:65:4f:36:28:80:f7:a4:02:ab:
                    22:36:26:ff:f5:d2:9a:4c:c7:b0:76:ef:50:39:78:
                    f3:f2:55:e8:91:86:6b:42:7d:b7:57:6f:eb:86:f8:
                    69:5d:ee:dc:33:80:6b:68:0d:9b:04:96:4c:25:c2:
                    df:5c:29:1d:50:6a:e2:07:b2:8b:3b:02:c1:b6:8f:
                    41:a3:c9:96:0f:2f:b3:03:20:b0:74:bc:b2:61:ce:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:59:33:66:99:8A:B3:A6:4E:E7:8B:66:2B:46:C1:27:4F:C2:42:B7
            X509v3 Authority Key Identifier:
                keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a2:a1:f8:d4:ff:00:48:27:f1:47:58:92:eb:4b:d8:6d:0f:
         ac:e0:5e:81:b6:ad:1d:9f:ab:3f:99:bb:5f:85:51:9d:cf:6e:
         5c:b6:e1:df:b4:74:1e:21:32:de:44:f3:eb:d1:fc:06:5e:fb:
         48:19:4a:1d:08:94:df:2a:26:b2:be:1b:2d:e4:60:e6:cd:fc:
         54:7b:4f:aa:b7:0b:37:fc:a9:60:1a:71:04:38:8b:64:15:67:
         de:23:f9:c5:c4:fd:99:9c:ca:5c:8e:5f:71:8a:7d:51:50:4a:
         9c:4c:c0:d6:03:58:05:25:40:bd:36:5e:08:4b:48:84:11:56:
         12:a4:0c:e9:c8:c0:92:8c:7e:67:38:41:8a:6b:e7:94:88:cd:
         f1:32:9b:f7:b1:b3:f0:a6:ef:df:06:91:13:c1:be:d5:cf:17:
         e8:95:cf:38:30:14:f1:25:1f:dc:a6:8b:c7:f2:61:ba:2c:e7:
         a8:1f:5f:f5:87:47:d4:c8:82:24:b5:17:54:b7:03:e5:d3:a2:
         cd:3b:6e:50:d4:b2:88:1a:27:ac:21:87:93:3c:40:12:b1:75:
         4b:4a:2b:b8:60:38:96:f6:d3:45:25:9a:1e:cf:e0:45:e7:11:
         97:89:b4:6b:68:97:a1:11:20:16:48:08:a5:eb:5d:ab:0a:37:
         18:7b:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:40 2024 by rpki-client on console-fra.rpki-client.org