Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File:                     ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier:          co0u5eWka5hDI2QOXOHFdkf5ZnS5w5GX9k3uX57xmlk=
Subject key identifier:   26:4D:4F:5E:09:93:B6:D4:E9:25:0B:AD:F5:C5:41:22:FA:9C:3F:00
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer:       /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial:       018F4B6B76EC02DFA96D084E7D1E0F224219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number:          0DF9
Signing time:             Mon 06 May 2024 01:01:25 +0000
Manifest this update:     Mon 06 May 2024 01:01:25 +0000
Manifest next update:     Tue 07 May 2024 01:01:25 +0000
Files and hashes:         1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: Htgn7X52vnlSPp3AID8AE1ZIoWuoFIHE1MJ0vansFdU=)
                          2: l0AwI2QPX-qRg_kDCP2L4R5cxI8.roa (hash: IBSO5zQdzVGdn31T6LUNl3x+vpYqaKAfqjYwul+7Ihw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:76:ec:02:df:a9:6d:08:4e:7d:1e:0f:22:42:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
        Validity
            Not Before: May  6 01:01:25 2024 GMT
            Not After : May  7 01:01:25 2024 GMT
        Subject: CN=264d4f5e0993b6d4e9250badf5c54122fa9c3f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:e1:a6:4d:c3:78:a8:3e:b8:4f:bd:91:12:
                    c0:55:ff:99:9b:ee:d7:30:8b:b1:18:3c:8e:46:0a:
                    a2:a5:15:92:13:2f:e9:07:d9:a8:e8:ff:af:64:aa:
                    9c:36:a8:6a:3a:5a:65:a3:d6:e4:c4:4b:f5:9f:09:
                    ba:85:e4:07:3d:6c:b2:5e:be:38:f3:ca:47:34:99:
                    92:35:c1:6b:36:87:50:77:30:97:c5:92:13:92:6f:
                    5c:83:27:ee:e9:77:dc:d1:b8:7d:56:eb:91:6d:86:
                    1c:b1:45:99:c3:dd:29:81:e8:03:ec:c6:37:69:f5:
                    50:7e:49:a4:71:ea:72:66:3f:01:0a:08:d8:09:19:
                    07:dc:05:12:36:9b:7f:10:99:8b:2f:b2:89:8c:b0:
                    03:d6:65:9a:04:c7:75:28:75:0a:23:a5:11:a7:46:
                    f5:74:21:cb:22:1f:44:69:2e:07:86:37:f8:d8:7b:
                    be:e9:5e:4e:21:74:7c:fe:7a:a2:16:d3:93:e7:57:
                    d4:9c:85:4a:d1:d0:9b:ba:5d:ad:30:f5:f1:c4:1a:
                    73:97:da:8d:ed:21:43:23:be:27:ab:e0:ba:fa:a2:
                    b0:da:9b:54:e1:dd:a6:43:09:3f:f2:a8:d4:ef:54:
                    31:ac:c8:e6:69:ad:b7:f8:92:16:71:3a:0d:e5:5d:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:4F:5E:09:93:B6:D4:E9:25:0B:AD:F5:C5:41:22:FA:9C:3F:00
            X509v3 Authority Key Identifier:
                keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:05:96:55:79:52:1c:5c:5e:bb:e9:6d:a7:24:e1:90:9a:
         ed:51:7a:ee:13:f2:d8:1b:4a:e9:44:e0:2a:08:c8:7c:93:63:
         27:95:f2:ef:78:30:bf:11:04:eb:72:50:d0:d3:5a:d4:d3:b8:
         c5:0d:6f:0e:62:27:eb:45:76:28:d0:b2:c9:fe:73:68:47:a0:
         23:7a:35:75:ff:4a:35:f7:c4:18:29:67:6f:db:55:bf:66:a8:
         c0:7f:4f:f5:06:be:c3:96:c4:2b:5f:ad:fe:19:64:ca:27:84:
         18:3b:5c:fb:da:34:48:ac:ba:6f:0a:ce:ff:f6:94:71:60:01:
         80:ea:39:17:76:f7:03:d6:f1:2c:61:ef:23:58:fa:57:9a:5e:
         64:23:95:d6:48:16:3b:8b:2c:1d:1a:ba:be:bc:76:cb:44:20:
         d4:4d:75:c7:95:81:1b:ca:a0:19:34:d5:07:8e:a8:5b:22:e3:
         a3:4e:64:06:30:ff:a2:66:c3:78:54:a3:5f:59:ad:3a:86:e8:
         fa:4d:34:f0:d9:3c:3e:29:fb:0e:07:80:1c:36:0d:83:94:d1:
         eb:bd:03:7d:4e:72:03:7f:66:25:61:ca:4b:a1:be:38:71:43:
         6c:5a:99:1d:30:64:cd:25:42:4c:7d:bd:b5:5b:c9:ed:1b:b5:
         d8:ae:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:25:34 2024 by rpki-client on console-ams.rpki-client.org