Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File:                     VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier:          VbsyzOJz5cZjvdabAxJhtvFN8nbdoPakTH275NtgdJ8=
Subject key identifier:   F7:B0:E0:94:AE:7D:D0:F0:93:10:12:9F:79:1B:3C:E2:9E:A5:BD:1B
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer:       /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial:       018F87B6CB7750CB15E8002A289BD66C9979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number:          7C
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: KiZ7a2NgUol38nII8logjowEXLY.roa (hash: D1h9f4Uho4bf7PWCS4UI9JtTcK9YbJ9A6ulSEpxBKyA=)
                          2: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: 9iNF4ELJt1dP7XzKQSvRH8nQgSKzstIF0UvFNTJm3ag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:cb:77:50:cb:15:e8:00:2a:28:9b:d6:6c:99:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=f7b0e094ae7dd0f09310129f791b3ce29ea5bd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:4e:78:4d:b6:08:87:6d:21:fa:7c:3c:63:
                    87:4b:5f:af:e3:9b:92:de:43:76:76:4e:eb:25:02:
                    1c:c5:eb:2e:6e:13:0f:bd:f1:0e:0a:55:2f:24:d4:
                    82:8b:51:62:8d:86:8f:ef:43:fa:c7:4b:b4:89:c1:
                    39:43:5e:ec:2f:0e:fe:39:14:ae:f4:28:3d:3c:98:
                    83:af:7c:e0:12:30:48:e5:07:dd:a0:c8:a9:39:76:
                    cd:44:8b:d8:f4:cb:6b:d9:86:39:95:e7:32:8a:0d:
                    71:61:bc:bd:91:ec:90:90:b0:11:72:4f:2b:a8:6a:
                    b3:71:32:48:37:93:85:f1:d4:4a:c0:2c:38:9f:0e:
                    78:2a:fa:79:65:af:1f:39:ee:03:d7:dd:87:4b:d1:
                    43:f3:3f:a1:90:08:be:32:2a:6d:3d:49:2b:9f:85:
                    97:6f:90:fc:57:f0:f4:ff:e3:f6:74:a6:03:90:c7:
                    c1:bc:a0:8c:2c:09:6f:c1:ba:22:f7:e2:d1:0b:78:
                    a2:a5:bd:49:f3:5b:0a:3e:53:4a:40:8d:ec:c6:74:
                    a2:dc:b0:43:9f:d7:6a:4f:39:25:ae:9d:1c:23:ad:
                    f1:0e:e8:1c:31:46:4a:58:c2:9a:ce:cb:09:81:48:
                    db:eb:08:d0:d0:7c:03:1e:5c:ae:a4:88:90:98:2c:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B0:E0:94:AE:7D:D0:F0:93:10:12:9F:79:1B:3C:E2:9E:A5:BD:1B
            X509v3 Authority Key Identifier:
                keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:63:43:b2:c5:42:a3:e5:ce:2e:39:81:3a:06:46:25:bc:fb:
         27:5c:96:f9:4d:8e:d6:6f:ef:f4:f7:7d:2f:5a:b6:52:bc:a8:
         80:12:9d:f2:ea:6c:ea:09:c2:2b:e3:34:4d:82:00:e5:07:21:
         db:d4:62:0c:cf:6e:f7:0c:28:ef:92:32:ec:bb:46:14:45:fe:
         e5:c9:3e:1e:c7:86:b3:bd:6c:17:e5:33:70:47:4e:a1:20:96:
         81:88:02:6b:44:d3:07:24:e3:6d:79:ca:2d:88:a0:7f:37:69:
         3e:f0:ff:a2:3f:99:1d:c0:fd:10:11:90:fa:bb:1b:31:85:1a:
         b2:f8:93:6a:37:a9:44:0b:d6:c2:be:d5:50:27:5e:56:16:3e:
         e9:68:e5:c2:13:cc:74:c1:12:87:80:3b:07:a0:23:08:bc:2e:
         28:72:3e:50:9b:bf:f3:65:ac:37:ff:4c:c3:83:a4:b6:6c:c5:
         75:62:b9:c6:a5:f4:fb:42:b1:31:a2:ea:c9:7a:dc:d3:0a:47:
         59:5e:37:24:37:34:df:ae:e5:c0:cd:7f:8a:be:8e:2a:f4:19:
         3a:1c:b4:5d:12:d2:42:98:66:4f:5b:84:19:e8:db:4e:1d:cf:
         77:51:38:bd:13:16:a4:6f:07:3d:d2:b2:1b:7c:35:ec:06:52:
         ad:0f:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:46 2024 by rpki-client on console-ams.rpki-client.org