Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
File:                     vtJXlaaCsRmplIBal2V4U9dUoFw.mft (raw, json)
Hash identifier:          wNT9UYra7O06jWxq9q+eEJBfp1YDWDiyT6OnNj5Sa9c=
Subject key identifier:   57:31:8B:54:18:19:50:3B:5B:E4:CD:2C:74:EC:45:86:A7:84:CE:D3
Authority key identifier: BE:D2:57:95:A6:82:B1:19:A9:94:80:5A:97:65:78:53:D7:54:A0:5C
Certificate issuer:       /CN=bed25795a682b119a994805a97657853d754a05c
Certificate serial:       018F87B641C0DEFDBB7864FA816594F95867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
Manifest number:          0606
Signing time:             Fri 17 May 2024 18:00:19 +0000
Manifest this update:     Fri 17 May 2024 18:00:19 +0000
Manifest next update:     Sat 18 May 2024 18:00:19 +0000
Files and hashes:         1: vtJXlaaCsRmplIBal2V4U9dUoFw.crl (hash: 47QjKFdVmwyJ3JpJMy3AIiONE2dRvW7YKCyiEkiV7pg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:41:c0:de:fd:bb:78:64:fa:81:65:94:f9:58:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bed25795a682b119a994805a97657853d754a05c
        Validity
            Not Before: May 17 18:00:19 2024 GMT
            Not After : May 18 18:00:19 2024 GMT
        Subject: CN=57318b541819503b5be4cd2c74ec4586a784ced3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:65:6a:3c:67:06:f5:e1:3b:2c:99:04:34:
                    8c:92:2f:06:32:b2:44:13:3b:6e:70:bf:c1:19:10:
                    5a:f1:92:c3:73:e8:64:d9:20:17:53:19:40:40:90:
                    fe:8c:29:5e:72:96:6c:8d:b4:cb:5d:46:d5:65:ec:
                    d0:bb:d2:e5:d7:bc:19:b3:f4:e2:c2:d9:ad:61:bd:
                    77:53:1d:fc:05:71:91:cc:cb:16:9d:7c:92:b3:50:
                    dd:e8:09:49:f6:7c:49:35:71:fc:8d:cd:6b:81:3f:
                    3d:78:85:d3:a7:0e:ab:f9:cd:97:10:6c:83:d6:39:
                    30:8e:63:ec:ea:12:a5:18:23:a7:3e:7a:5d:85:63:
                    cf:c9:ea:f6:ac:5a:01:9f:94:b9:94:16:38:6e:ab:
                    73:ee:d0:da:fe:1f:1d:2e:df:4a:87:d6:1e:b2:f5:
                    c7:ba:7f:e9:d9:ab:ff:65:70:08:80:c5:4a:2d:9d:
                    64:72:6d:07:96:16:11:c6:10:6c:39:9c:23:f2:87:
                    bc:f7:cb:f6:47:d2:ee:0c:cc:4b:d3:f2:b7:88:a4:
                    af:e9:19:b3:51:34:1f:f1:98:64:89:72:2d:50:56:
                    c1:76:af:3f:68:80:13:0a:9a:1f:2f:48:33:55:19:
                    84:f3:ba:48:47:35:7c:69:6a:00:76:fa:c7:6c:90:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:8B:54:18:19:50:3B:5B:E4:CD:2C:74:EC:45:86:A7:84:CE:D3
            X509v3 Authority Key Identifier:
                keyid:BE:D2:57:95:A6:82:B1:19:A9:94:80:5A:97:65:78:53:D7:54:A0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:91:60:42:96:5f:ad:ea:44:4d:50:0b:ee:ca:c9:5b:0a:5d:
         93:d5:e8:3f:f9:12:9a:c4:95:28:a8:37:08:b2:26:0f:40:07:
         f6:3e:9e:fd:7d:53:e2:c4:92:67:ec:7d:e8:fd:29:f5:0f:58:
         42:6c:bb:16:51:4d:f4:61:1e:59:3a:54:67:bf:54:0a:9d:97:
         87:26:f9:70:0c:b5:cb:59:50:0e:58:3c:68:e9:ac:cc:81:56:
         70:30:e0:22:83:ee:41:df:df:67:30:4d:f0:47:6b:18:ce:ef:
         83:89:a9:02:83:56:41:94:6e:c6:f4:5e:1e:81:7a:74:4a:80:
         d9:45:5e:ed:6a:e2:84:fc:f0:7f:ef:91:b6:98:e6:7d:e3:d1:
         00:c5:7b:62:df:62:ff:4c:06:69:6d:34:70:a6:5c:ba:b0:5a:
         07:64:5e:f2:15:62:e0:99:2f:6f:00:18:8a:c0:45:2c:5a:f8:
         62:10:d4:e9:5d:a9:9a:d0:b2:07:9f:57:74:fd:b4:18:f8:2b:
         38:36:5c:4f:13:d9:9a:cf:2a:a1:7f:42:b4:48:ce:23:03:35:
         78:4b:ab:df:f9:af:50:49:2b:12:f3:4d:5b:89:8c:06:9b:f6:
         7e:52:fe:3d:1e:e8:a0:d4:d5:7c:46:28:f7:90:c7:4b:7f:c8:
         95:ea:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:46 2024 by rpki-client on console-ams.rpki-client.org