Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File:                     Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier:          bjfPCC3wZzskAOGsevydvIlNjstwzhwbgfo0HfZHaYQ=
Subject key identifier:   30:51:25:31:C2:D3:52:49:AD:EB:58:31:99:E2:8F:A2:2D:39:63:BD
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer:       /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial:       018F882437DCA4D888757DB0DA669BC9FB8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number:          074D
Signing time:             Fri 17 May 2024 20:00:25 +0000
Manifest this update:     Fri 17 May 2024 20:00:25 +0000
Manifest next update:     Sat 18 May 2024 20:00:25 +0000
Files and hashes:         1: CI-QSCwceAsre8uMpax2d1qWCLQ.roa (hash: HxqqVkSEukc685uygSCdYQhIIYjRE0gIU0FakPx8fDQ=)
                          2: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: PadNeCEd/6HwSS5/8oRHcL3E3qWfl3L1xW8YvuPYJhk=)
                          3: _K6n5CisBVSl3d6lgfeBVR4ir-4.roa (hash: OU9UeK/U8NCb75qRpWLC1OltBl7ltPLT24GS5BhFsiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:37:dc:a4:d8:88:75:7d:b0:da:66:9b:c9:fb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
        Validity
            Not Before: May 17 20:00:25 2024 GMT
            Not After : May 18 20:00:25 2024 GMT
        Subject: CN=30512531c2d35249adeb583199e28fa22d3963bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:56:bd:fe:53:7c:09:f9:48:cb:3a:5a:f6:
                    74:f3:0c:a6:8b:c1:f5:31:65:00:67:b4:ae:7c:1e:
                    a4:cb:4c:c6:bd:4d:c4:0f:0c:b7:9b:f9:95:68:cc:
                    c4:14:0d:85:e4:65:57:2e:30:ff:8b:27:12:30:c2:
                    7d:d4:1c:b1:ee:07:e3:aa:aa:b6:9e:b1:4d:e3:42:
                    cc:47:b4:70:b4:da:0a:38:2f:e6:5a:be:84:73:87:
                    30:60:28:08:9d:f0:1e:5f:66:b8:e5:eb:eb:34:96:
                    2e:cf:b8:f4:81:3d:43:16:5f:12:ef:ca:2c:16:49:
                    a5:cd:cc:d5:37:46:66:37:42:1b:40:93:f3:67:88:
                    03:02:88:5a:18:a8:92:d9:56:2d:b3:78:6d:d2:68:
                    61:b9:bc:91:ae:be:ef:fd:3d:10:eb:06:b7:a0:6e:
                    5d:82:f7:ef:46:cc:e7:89:4c:6b:e6:15:b4:ec:f4:
                    59:07:61:b8:a5:56:4e:74:7f:5b:f1:10:3c:92:e6:
                    80:c2:da:cf:6a:a6:cc:ad:65:0c:8e:51:09:0e:90:
                    aa:7c:9e:ac:49:a7:2f:40:9e:c0:99:09:e4:54:78:
                    fd:97:20:c6:db:5d:cb:14:59:5d:ff:b2:60:93:a8:
                    96:d7:b6:0b:95:47:6e:10:11:c6:bd:eb:5b:50:ca:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:51:25:31:C2:D3:52:49:AD:EB:58:31:99:E2:8F:A2:2D:39:63:BD
            X509v3 Authority Key Identifier:
                keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:f0:8e:30:4d:85:d8:4a:63:42:6e:6d:e3:86:17:47:3b:
         35:95:44:7d:fa:ca:3d:06:4d:07:17:f8:61:d4:45:c6:37:9d:
         b5:74:77:67:b4:2d:0d:02:8f:1b:ef:66:4e:f5:22:63:64:32:
         d7:de:36:d7:24:78:29:5c:82:ea:85:d8:12:34:94:77:0f:29:
         d3:b5:0e:59:9c:09:2b:66:fe:bf:2a:7a:5e:fc:43:07:4f:7a:
         c3:f2:25:3b:86:26:0e:7d:a3:e5:67:bd:1a:0e:5d:58:14:c7:
         fb:7d:eb:1f:57:b1:41:0b:3f:75:9f:d6:30:d6:33:af:77:f8:
         bf:44:30:50:73:05:56:11:ad:e8:b6:87:64:18:67:76:9d:dc:
         1f:dc:37:02:4b:4d:df:c7:fb:b9:9a:c6:e5:04:a6:64:61:f1:
         40:32:fe:07:d2:6c:da:0f:23:e2:ed:a0:1c:2f:dc:ac:86:4b:
         62:f2:69:de:d1:7c:55:e0:9a:4a:89:fc:37:9c:83:7b:be:54:
         ac:3e:80:ae:b8:99:a0:94:63:1a:2c:7c:ed:6f:1d:34:de:04:
         8a:4e:d3:59:76:af:79:a5:a3:f5:ed:36:62:b0:8e:e8:09:af:
         f3:93:3e:f5:78:6e:d6:ba:5a:04:ad:ea:5b:e6:a2:40:aa:68:
         62:fb:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:00:33 2024 by rpki-client on console-ams.rpki-client.org