Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File:                     VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier:          BN01CdVFbjuuI9WIfro92SlI542FmvnFvIHBg5qQPNY=
Subject key identifier:   44:77:5B:DE:2E:91:A9:3B:7C:53:46:29:16:EA:42:0A:97:8A:22:EE
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer:       /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial:       018F86A3695A5BF06D3AA5B7C2EDB729D59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 13:00:07 +0000
Manifest this update:     Fri 17 May 2024 13:00:07 +0000
Manifest next update:     Sat 18 May 2024 13:00:07 +0000
Files and hashes:         1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: XJ/R3xNpXafkTjWW46ZS1o/wVwwJ2nHBpVWj4x9J8DA=)
                          2: rx8BBhHAGTYIKLb1wjcdeKd-5AU.roa (hash: f0EOvVskwxqcBng2DRgbbtUf1503ZVyhQv9/snzTYkg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:69:5a:5b:f0:6d:3a:a5:b7:c2:ed:b7:29:d5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
        Validity
            Not Before: May 17 13:00:07 2024 GMT
            Not After : May 18 13:00:07 2024 GMT
        Subject: CN=44775bde2e91a93b7c53462916ea420a978a22ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:3d:06:d6:b4:d5:98:aa:32:b3:32:fb:60:
                    c3:cf:00:b1:da:4d:a5:da:f5:b4:f8:88:4a:26:1c:
                    3d:d5:0e:e4:43:e2:72:0e:3d:15:1b:d1:c3:ac:61:
                    4f:df:ee:52:e1:ff:b3:8e:9d:44:87:67:f2:8d:d9:
                    af:23:70:31:97:dd:b0:58:60:9d:15:24:6f:fb:16:
                    a3:46:c4:5d:f7:0e:6d:7f:0b:94:c3:c0:50:b5:44:
                    20:42:46:3d:ef:5c:32:80:fc:e5:00:7d:6a:17:07:
                    0c:76:ec:c3:2d:24:fb:38:e3:aa:5e:ed:e5:1d:10:
                    ae:6b:e8:dd:0d:85:a4:38:4c:b2:f7:0a:9c:72:e0:
                    3e:e3:d6:b8:94:e3:aa:7d:17:af:56:de:fd:0b:8e:
                    4e:b9:77:22:8c:89:76:a4:b4:9e:97:7e:28:89:a6:
                    62:e2:eb:e9:6c:3b:4a:2a:32:ac:c9:a6:0c:dd:35:
                    d7:fa:ac:99:93:94:de:c9:83:1d:3c:86:52:f9:f0:
                    4b:1d:ce:4f:ce:76:6b:1d:81:af:8a:98:39:0a:fd:
                    14:75:34:bf:d0:75:5b:17:c2:4b:ae:b7:8d:6c:c4:
                    8b:7d:7d:1f:11:ab:83:61:23:53:d9:fe:6f:2a:48:
                    ba:0b:6c:19:3f:7f:82:47:16:42:c6:af:34:8e:e1:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:77:5B:DE:2E:91:A9:3B:7C:53:46:29:16:EA:42:0A:97:8A:22:EE
            X509v3 Authority Key Identifier:
                keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:64:8f:de:ef:54:51:00:2e:d7:fb:5e:70:e9:d8:eb:d2:
         c9:e9:a2:fd:9b:83:0f:db:43:ec:34:09:7b:0c:ff:e2:be:ed:
         00:0a:ba:95:e6:88:be:af:93:a9:a7:2c:95:fd:72:2a:2b:8b:
         57:cb:f7:b7:4f:c7:de:68:e2:71:c1:40:07:1f:47:39:1b:d5:
         d8:1f:1b:b0:3a:a2:29:0e:0b:34:40:7f:cb:3c:f1:34:ef:c5:
         4b:7c:ed:62:e1:5b:c7:59:16:40:10:3a:3d:ef:1d:96:35:ae:
         d1:22:38:1b:3e:b7:9d:93:49:df:6f:ea:36:53:b0:48:fc:1e:
         b3:07:6e:5e:9a:e8:6c:03:73:c9:35:ef:b7:85:d6:40:a0:59:
         90:da:76:3b:b0:30:64:42:e9:94:b7:42:ff:3b:2a:54:d9:dc:
         c3:4f:b0:66:58:71:04:e5:bd:71:9a:3d:96:83:ac:93:90:70:
         e0:05:f7:a1:57:f6:58:b1:d4:65:24:e3:c0:07:9e:85:9c:ca:
         32:d3:1d:9a:6b:e7:da:93:dc:16:e6:9a:eb:68:86:7f:5d:6e:
         83:8c:88:a4:51:a7:84:9c:28:f5:78:96:9c:33:4e:17:a8:1d:
         27:1c:4b:d3:25:b8:a7:0e:d1:45:1a:26:9b:34:9c:71:2a:f9:
         52:2b:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:42 2024 by rpki-client on console-ams.rpki-client.org