Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
File:                     vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json)
Hash identifier:          oNqWTB4sOJCZuuAGQ3xllYsLDtg/BQ04Xt6r/xgg3TE=
Subject key identifier:   A5:99:A7:32:31:43:55:80:46:A3:68:F0:1E:6E:19:9E:E0:98:83:7F
Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
Certificate issuer:       /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Certificate serial:       018F86A362B059DC360DD48F73296F487CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 13:00:05 +0000
Manifest this update:     Fri 17 May 2024 13:00:05 +0000
Manifest next update:     Sat 18 May 2024 13:00:05 +0000
Files and hashes:         1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: eRzbp65n0+/Ybd6x5hYj98tmcODwcxyyirtLv4WkKC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:62:b0:59:dc:36:0d:d4:8f:73:29:6f:48:7c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
        Validity
            Not Before: May 17 13:00:05 2024 GMT
            Not After : May 18 13:00:05 2024 GMT
        Subject: CN=a599a7323143558046a368f01e6e199ee098837f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:46:94:01:69:03:94:e4:2e:7b:d9:99:54:
                    f6:fd:2e:87:d3:91:09:62:b6:51:22:6f:66:b3:7c:
                    51:12:b0:3c:28:4d:85:5b:8b:75:2e:2e:35:7b:35:
                    73:d7:72:ea:12:46:0b:1e:96:57:8b:6b:a6:1d:34:
                    5e:3c:44:41:51:06:6f:8f:60:bd:a5:54:41:a2:30:
                    a8:8b:96:ca:26:c3:8b:8c:43:53:0e:62:a3:5b:ba:
                    f9:5a:33:d7:fb:0e:85:ac:c7:c3:73:2d:6c:d5:f5:
                    e3:27:42:7d:dd:23:aa:5b:4d:34:fa:68:5c:d0:64:
                    40:c7:eb:1f:5b:7a:6c:6d:73:15:8b:bd:6d:93:26:
                    f3:45:dc:f5:ee:95:e7:a2:4e:b2:9f:1c:6d:7e:55:
                    98:c9:bd:22:7d:e8:01:d7:e5:9c:6d:7e:79:5a:5e:
                    ab:b9:7b:d9:73:27:12:01:e0:6e:14:b3:15:7e:7f:
                    9d:e1:40:ce:29:5e:20:f1:69:29:87:69:37:b6:e7:
                    6d:b2:f5:14:9d:eb:ca:48:5f:8f:26:75:ed:b2:43:
                    f6:f4:6a:91:cb:b1:74:96:74:8e:f7:33:a1:79:1f:
                    29:b9:83:89:1a:ca:c1:55:a7:05:07:05:21:03:0f:
                    2c:c6:d1:90:ae:6e:7c:1b:2f:64:1f:1c:d1:4a:e2:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:A7:32:31:43:55:80:46:A3:68:F0:1E:6E:19:9E:E0:98:83:7F
            X509v3 Authority Key Identifier:
                keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:07:bf:a1:5d:52:8d:8d:6b:67:d7:70:5e:65:ae:f2:3b:
         ae:d3:d2:40:c4:46:d0:4f:eb:fb:44:82:12:b5:71:28:c0:12:
         4f:cf:73:4a:5b:24:37:b9:81:f8:ca:96:5a:9f:b0:0a:a1:41:
         fd:60:5c:a0:b7:f9:8f:ea:ca:08:91:a9:cb:28:34:09:88:c3:
         68:15:49:20:11:da:b2:49:0b:81:83:51:71:8f:a0:21:3c:6c:
         c1:08:32:00:ad:6d:fe:5c:04:a2:e0:ef:c3:60:93:a1:f6:01:
         a2:2b:7f:0f:77:ef:ee:b3:aa:58:2d:b6:60:be:5c:fc:0f:71:
         06:e9:41:f8:ac:fa:98:d7:27:0c:5d:d1:13:80:ca:83:59:6f:
         3f:e2:f6:bf:53:0e:2b:27:83:d7:d9:8d:48:f3:58:fa:9f:c7:
         c5:28:13:e7:0a:29:6e:18:13:31:07:ca:93:ad:df:cc:19:1c:
         2b:ba:9f:d9:81:5a:dc:69:7a:f0:5c:62:3e:ce:5b:32:7b:9c:
         7d:cd:ed:7e:e6:b5:c6:30:10:0b:44:97:2d:ec:fa:ea:1c:0c:
         2a:c5:00:40:dd:ce:78:05:e2:d7:04:cf:c4:77:27:64:b0:96:
         ca:d0:07:eb:ce:cf:35:1a:1a:2d:ab:01:6b:55:b7:fb:55:0a:
         26:67:fd:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go2KwWdw2DdSPcylvSHylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjNhOWQzNTIzZjRmMTU2NTg5YmEwYWEyNDlmZDM1MjVj
ODVmNmIwHhcNMjQwNTE3MTMwMDA1WhcNMjQwNTE4MTMwMDA1WjAzMTEwLwYDVQQD
EyhhNTk5YTczMjMxNDM1NTgwNDZhMzY4ZjAxZTZlMTk5ZWUwOTg4MzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYlGlAFpA5TkLnvZmVT2/S6H05EJ
YrZRIm9ms3xRErA8KE2FW4t1Li41ezVz13LqEkYLHpZXi2umHTRePERBUQZvj2C9
pVRBojCoi5bKJsOLjENTDmKjW7r5WjPX+w6FrMfDcy1s1fXjJ0J93SOqW000+mhc
0GRAx+sfW3psbXMVi71tkybzRdz17pXnok6ynxxtflWYyb0ifegB1+WcbX55Wl6r
uXvZcycSAeBuFLMVfn+d4UDOKV4g8Wkph2k3tudtsvUUnevKSF+PJnXtskP29GqR
y7F0lnSO9zOheR8puYOJGsrBVacFBwUhAw8sxtGQrm58Gy9kHxzRSuLqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWZpzIxQ1WARqNo8B5uGZ7gmIN/MB8GA1UdIwQY
MBaAFL7zqdNSP08VZYm6CqJJ/TUlyF9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAt
ZGZlYWRlM2Q1NjQxLzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAtZGZlYWRlM2Q1NjQx
LzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc0Hv6Fd
Uo2Na2fXcF5lrvI7rtPSQMRG0E/r+0SCErVxKMAST89zSlskN7mB+MqWWp+wCqFB
/WBcoLf5j+rKCJGpyyg0CYjDaBVJIBHaskkLgYNRcY+gITxswQgyAK1t/lwEouDv
w2CTofYBoit/D3fv7rOqWC22YL5c/A9xBulB+Kz6mNcnDF3RE4DKg1lvP+L2v1MO
KyeD19mNSPNY+p/HxSgT5wopbhgTMQfKk63fzBkcK7qf2YFa3Gl68FxiPs5bMnuc
fc3tfua1xjAQC0SXLez66hwMKsUAQN3OeAXi1wTPxHcnZLCWytAH687PNRoaLasB
a1W3+1UKJmf9gQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:53:07 2024 by rpki-client on console-ams.rpki-client.org