Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File:                     VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier:          NZBgTTsslftsgT8zcRSrBBnr8JAGUAWvc53tp3qKMpU=
Subject key identifier:   85:AB:FF:B4:D9:A0:6C:DC:D2:23:33:DB:58:0C:D4:0D:0B:07:51:30
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer:       /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial:       019037742AC132A8D1FDD6FFEC97AEE5D941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number:          0F6E
Signing time:             Thu 20 Jun 2024 21:01:18 +0000
Manifest this update:     Thu 20 Jun 2024 21:01:18 +0000
Manifest next update:     Fri 21 Jun 2024 21:01:18 +0000
Files and hashes:         1: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: uNfVn/MMRoGbdf7XzfIcgjrMRA22NgMGVK55NpHxZIQ=)
                          2: r-2DrmM2I6hQkAamxGux5Lt2C7I.roa (hash: L7GvymwNwhNIlu4ppW0J27Mv8BqOKnNli0fPR9SUZjY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:74:2a:c1:32:a8:d1:fd:d6:ff:ec:97:ae:e5:d9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
        Validity
            Not Before: Jun 20 21:01:18 2024 GMT
            Not After : Jun 21 21:01:18 2024 GMT
        Subject: CN=85abffb4d9a06cdcd22333db580cd40d0b075130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:34:59:74:f8:ce:a5:01:b6:d2:f7:75:30:
                    7a:56:73:93:25:fa:9a:1b:5d:96:3a:4c:0f:f8:7a:
                    c8:02:6e:bb:c0:50:9f:a3:d7:55:8b:20:ea:5b:ec:
                    14:a0:18:0d:87:ca:ea:8b:45:59:9e:0f:2d:12:ee:
                    4a:18:65:fc:57:19:59:ab:d2:4a:63:e7:c2:b8:a6:
                    4b:ad:d4:f4:68:06:8f:b6:9b:6a:b9:45:b9:96:ee:
                    4b:64:fe:df:c6:cc:e9:c3:0e:11:e2:b5:db:41:43:
                    75:55:f3:90:63:83:92:0d:5c:94:09:5d:2c:28:87:
                    fb:ac:ef:89:88:61:5c:77:bb:c2:ef:fe:d1:f6:b5:
                    ff:0e:a9:90:37:6c:0c:33:9e:3e:b1:f9:31:8e:57:
                    ae:8a:aa:e4:a7:f2:17:1e:7d:42:b8:d6:0c:9d:8d:
                    5a:7b:81:39:90:7e:8a:e3:29:6d:55:58:ca:7e:4e:
                    1e:72:a1:02:39:0f:76:b1:a6:2a:ff:46:c5:9d:20:
                    4d:9e:7b:81:d6:b9:31:b9:3b:8f:a0:05:52:ab:25:
                    d6:6b:77:19:0d:59:d3:7f:25:93:bd:4b:76:61:0f:
                    28:70:9e:31:53:58:c1:34:1f:8e:d6:80:7c:f3:51:
                    00:e1:1c:db:66:05:aa:d1:21:f7:5d:c4:10:02:b2:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AB:FF:B4:D9:A0:6C:DC:D2:23:33:DB:58:0C:D4:0D:0B:07:51:30
            X509v3 Authority Key Identifier:
                keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:5c:e9:3f:f7:a4:c4:11:71:6f:67:82:b8:f8:f4:bf:70:
         5d:78:c0:7f:96:fd:79:e1:ca:69:ca:c1:b1:a9:5f:fa:0e:83:
         e3:10:d7:90:37:5e:94:6f:49:af:3a:76:9b:6f:6a:8e:8e:64:
         4b:2b:b5:31:d9:38:14:f0:79:e8:80:72:3e:d9:1f:1e:61:c6:
         98:0e:c8:59:2b:5e:8d:d1:71:14:cd:26:9f:fb:d3:d5:6d:c3:
         20:53:77:9f:06:27:b8:72:5a:c7:d4:cc:a4:ea:26:34:90:09:
         db:0d:b5:d6:3f:79:fb:6a:c0:f5:83:98:e3:da:b1:1d:cb:52:
         7d:eb:23:91:c7:97:af:c8:06:7c:9a:32:61:5b:66:09:13:e6:
         48:53:76:fc:ec:8e:65:7d:5e:e1:d2:8b:e8:23:e5:6d:f3:c2:
         d2:67:9f:8f:28:75:39:02:0a:45:f2:7f:a8:e6:e0:8f:10:0f:
         1a:45:66:40:07:bf:6d:9d:c9:fc:56:1a:8c:ab:ae:21:0b:99:
         78:a6:31:91:e0:04:83:f7:0d:b3:39:31:f1:37:3b:2f:49:bf:
         3d:22:f8:42:5a:bc:19:b9:d9:ea:03:6b:e6:14:17:dc:c1:cc:
         02:6d:c2:4f:74:cb:df:f0:4f:ac:55:9f:98:db:c7:a6:58:9f:
         60:02:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:00:52 2024 by rpki-client on console-fra.rpki-client.org