Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File:                     vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier:          YjiDzC4bvY2V+wyVu1rAqLc3VoIeVlIJ/4pcSQzBe6E=
Subject key identifier:   6D:C0:0D:9C:15:64:A2:2D:5C:18:D4:C2:0C:F5:B3:46:EC:F2:E2:64
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer:       /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial:       018F9A9A69921E251FB3AB2213A3CFF9AE4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number:          0787
Signing time:             Tue 21 May 2024 10:02:41 +0000
Manifest this update:     Tue 21 May 2024 10:02:41 +0000
Manifest next update:     Wed 22 May 2024 10:02:41 +0000
Files and hashes:         1: K7U8pfx_m6P_2qcP0ABR_GE0hlI.roa (hash: euzqHAFV6WFcRx/W0Fusx93wd3hEek1OnRNG+U7YM9s=)
                          2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: RymVrX29bgavfo0sb9Mzk6XAofiXtsdPaLye/4B7eSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:9a:69:92:1e:25:1f:b3:ab:22:13:a3:cf:f9:ae:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
        Validity
            Not Before: May 21 10:02:41 2024 GMT
            Not After : May 22 10:02:41 2024 GMT
        Subject: CN=6dc00d9c1564a22d5c18d4c20cf5b346ecf2e264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d3:9a:d9:4a:a5:f1:f6:2d:9a:8e:db:5d:82:
                    9a:e1:81:98:92:03:1e:b7:cd:d0:17:9d:6a:b5:f4:
                    02:9a:c6:74:43:aa:ef:d8:6d:a0:c4:3c:c3:c0:eb:
                    99:4e:d3:d9:ff:0d:9b:62:41:7f:b8:a6:15:4d:b6:
                    2d:76:e8:cc:9f:07:63:bf:8f:48:51:fa:89:90:32:
                    a5:93:00:ac:21:68:8e:78:95:8c:56:16:1c:4f:a6:
                    34:b3:86:6e:d5:70:cb:2a:7f:6e:ec:7a:76:e8:ea:
                    f6:b8:a2:54:22:4f:e4:16:ee:2a:d1:41:e6:91:20:
                    08:6f:25:64:dc:bb:d2:e6:03:73:bd:bf:20:ab:f7:
                    82:b2:c6:7a:3a:f3:75:bb:33:53:bc:fb:11:cd:dc:
                    1c:14:b9:4d:f3:9a:12:ca:ed:9c:29:84:ca:79:d0:
                    9d:aa:62:fa:99:71:42:d3:c1:40:9c:45:96:99:11:
                    ef:6f:bb:dd:da:43:3c:f8:cf:d8:85:b5:86:55:6c:
                    2c:97:bf:ed:d8:73:35:51:87:a6:b9:94:81:e4:63:
                    69:f9:92:5e:6d:0a:18:71:ce:b4:e0:02:1b:49:0a:
                    82:d0:ad:73:17:29:8d:f0:20:07:17:62:4d:73:aa:
                    e2:11:f3:48:b8:f8:03:5e:16:ee:f2:c3:83:42:0a:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C0:0D:9C:15:64:A2:2D:5C:18:D4:C2:0C:F5:B3:46:EC:F2:E2:64
            X509v3 Authority Key Identifier:
                keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:20:07:ea:52:c5:70:83:59:91:8f:0e:fb:ee:ea:14:07:
         a3:d9:40:9d:6a:1f:fd:71:e3:b5:ac:40:4d:06:75:e7:a3:99:
         77:91:5a:9c:94:c4:de:40:0c:82:02:ef:fa:31:fe:43:26:ee:
         af:b4:34:4c:cb:ca:78:24:88:15:fd:48:ce:c9:96:72:f6:0b:
         63:18:02:66:41:6e:ad:fa:8b:9e:88:64:7a:03:ec:25:37:9e:
         89:93:0f:82:1e:65:09:ab:47:52:3a:19:4d:60:d8:53:58:59:
         7f:d2:a6:28:8e:1f:e3:ad:85:f0:b2:03:ac:fb:ae:f3:af:bb:
         77:40:a9:e4:74:7f:e2:7a:72:ec:47:a3:3a:d8:fa:41:a1:59:
         59:66:e1:0a:21:18:6d:5e:a8:3b:22:f8:75:c6:d0:3e:15:1b:
         4d:0d:0e:19:7b:ef:8c:a7:5b:a3:98:81:a4:d2:1f:36:4c:c7:
         7a:9d:9a:0c:c5:b3:c8:b6:7d:90:f9:b0:f5:fe:cd:fa:65:ec:
         cf:38:5e:82:3e:97:74:c9:5a:79:fd:fd:83:c6:99:44:bf:1a:
         b6:93:a8:77:ec:bb:53:61:b5:0f:69:9d:6b:18:42:06:d4:08:
         39:e6:2c:c4:37:e5:83:8e:46:c4:0a:b6:cb:7b:a5:ce:0d:11:
         db:96:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:37:31 2024 by rpki-client on console-ams.rpki-client.org