Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File:                     vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier:          68uHAuQqJpJ0rNFUuyH9Q7tNQnLxmRgJXRH4M2sF8kc=
Subject key identifier:   0A:6F:29:41:AC:B3:DD:52:EF:61:9D:D9:87:77:A4:0C:91:F7:CC:E3
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer:       /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial:       018F87ED4DBA33D6A1383034A72794396B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number:          01A9
Signing time:             Fri 17 May 2024 19:00:27 +0000
Manifest this update:     Fri 17 May 2024 19:00:27 +0000
Manifest next update:     Sat 18 May 2024 19:00:27 +0000
Files and hashes:         1: TLYcGtPR48Q3q0NhwjLqDqsfVBA.roa (hash: s+w02JX2SqLPsAPC3qmA20NFQYyP1ZH0HDhjrlXUIzc=)
                          2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: lsNBgGFTnQbKltpMtOyIH9c302+HuIypaKtUe7cXCsA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:4d:ba:33:d6:a1:38:30:34:a7:27:94:39:6b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
        Validity
            Not Before: May 17 19:00:27 2024 GMT
            Not After : May 18 19:00:27 2024 GMT
        Subject: CN=0a6f2941acb3dd52ef619dd98777a40c91f7cce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:99:3c:1c:9c:6f:ed:11:ac:ee:6a:00:2b:
                    19:bb:ab:46:46:28:1e:b4:34:c5:51:00:db:69:54:
                    d1:63:af:25:08:93:61:05:62:3d:08:83:80:b9:db:
                    64:53:0f:8e:5a:c3:44:8b:09:15:fb:02:fd:d2:f7:
                    98:9c:db:d8:49:31:00:e2:6e:cb:8f:b9:21:e7:71:
                    8f:e4:23:83:98:86:cc:2f:26:83:0f:f7:04:a7:f2:
                    41:41:0b:82:6a:91:43:ea:87:7e:cf:5f:28:b7:28:
                    3c:18:65:12:f2:f9:90:9c:ff:37:1f:c8:ce:fb:91:
                    a3:da:8e:74:9f:f8:6c:66:ff:3d:f7:c5:f2:5e:fe:
                    dd:d6:cd:22:46:9b:10:3c:f4:c0:c1:e2:b6:bf:e9:
                    82:6e:ed:d3:14:fd:90:d8:0c:27:69:cf:6c:c4:09:
                    6c:02:35:3a:a5:10:e1:1c:83:0e:77:cd:91:b0:01:
                    9a:05:3d:5c:10:58:34:34:f8:68:da:10:5e:ba:ad:
                    d2:0e:1c:aa:8e:c0:12:b0:39:b4:54:3e:06:81:be:
                    0b:b7:63:31:c3:c7:26:ce:7c:c9:bf:ca:38:cc:9b:
                    c9:7e:a4:a0:b2:ee:7f:d6:8a:ca:04:85:cc:bc:1a:
                    02:36:fe:ce:d6:99:94:8c:6e:7d:33:9c:33:d5:79:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6F:29:41:AC:B3:DD:52:EF:61:9D:D9:87:77:A4:0C:91:F7:CC:E3
            X509v3 Authority Key Identifier:
                keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:10:ac:a7:2d:04:ee:f5:f4:e7:6d:3c:63:37:e1:bf:36:7c:
         1f:0b:fe:6b:ee:96:ab:fb:05:29:dc:76:05:42:cd:d6:71:82:
         9a:5e:82:8e:b7:8e:1a:98:ef:e9:71:94:bd:66:91:74:32:94:
         3f:45:22:8d:87:ce:53:5d:4d:dc:d2:9e:93:55:4f:90:c9:a1:
         3e:05:2c:ab:fd:ae:84:d6:f4:22:8b:34:7e:6d:e0:63:91:e0:
         72:b7:67:6a:c2:91:40:3b:51:8d:8c:d8:63:c1:d4:7f:b5:49:
         66:55:a6:32:be:0a:58:49:36:ca:84:6d:25:f0:a7:59:7a:04:
         c2:a6:25:a0:2d:2c:7e:73:4d:aa:c5:7e:19:ad:1c:cf:a0:aa:
         06:0f:7d:14:b3:0d:46:1c:8b:a0:db:73:92:b6:07:6a:05:22:
         07:db:9f:c0:03:9a:0b:c8:ff:fa:de:ae:e1:a2:4f:f9:7e:39:
         15:fa:90:98:da:5c:05:99:0f:8d:fd:8e:00:ca:47:c8:60:a9:
         71:f3:57:7a:3d:f3:31:a6:10:46:a8:8d:4a:92:4f:78:be:f2:
         d3:87:47:92:4d:21:18:7c:cb:3e:b0:e3:62:b3:a1:53:4e:46:
         b4:40:a9:b8:38:ca:9b:c4:1d:08:2a:7b:bf:8f:d1:b5:c0:c3:
         c9:18:c0:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7U26M9ahODA0pyeUOWtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjdkODRmZTE1YTMyNDNjMTAwMDM0N2IwOTkwYmE0NmJi
M2FlNDIwHhcNMjQwNTE3MTkwMDI3WhcNMjQwNTE4MTkwMDI3WjAzMTEwLwYDVQQD
EygwYTZmMjk0MWFjYjNkZDUyZWY2MTlkZDk4Nzc3YTQwYzkxZjdjY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6WZPBycb+0RrO5qACsZu6tGRige
tDTFUQDbaVTRY68lCJNhBWI9CIOAudtkUw+OWsNEiwkV+wL90veYnNvYSTEA4m7L
j7kh53GP5CODmIbMLyaDD/cEp/JBQQuCapFD6od+z18otyg8GGUS8vmQnP83H8jO
+5Gj2o50n/hsZv8998XyXv7d1s0iRpsQPPTAweK2v+mCbu3TFP2Q2Awnac9sxAls
AjU6pRDhHIMOd82RsAGaBT1cEFg0NPho2hBeuq3SDhyqjsASsDm0VD4Ggb4Lt2Mx
w8cmznzJv8o4zJvJfqSgsu5/1orKBIXMvBoCNv7O1pmUjG59M5wz1Xna3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApvKUGss91S72Gd2Yd3pAyR98zjMB8GA1UdIwQY
MBaAFL632E/hWjJDwQADR7CZC6Rrs65CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMt
ZTdiODYwMzMyY2I3LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMtZTdiODYwMzMyY2I3
LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRCspy0E
7vX05208YzfhvzZ8Hwv+a+6Wq/sFKdx2BULN1nGCml6CjreOGpjv6XGUvWaRdDKU
P0UijYfOU11N3NKek1VPkMmhPgUsq/2uhNb0Ios0fm3gY5HgcrdnasKRQDtRjYzY
Y8HUf7VJZlWmMr4KWEk2yoRtJfCnWXoEwqYloC0sfnNNqsV+Ga0cz6CqBg99FLMN
RhyLoNtzkrYHagUiB9ufwAOaC8j/+t6u4aJP+X45FfqQmNpcBZkPjf2OAMpHyGCp
cfNXej3zMaYQRqiNSpJPeL7y04dHkk0hGHzLPrDjYrOhU05GtECpuDjKm8QdCCp7
v4/RtcDDyRjAsA==
-----END CERTIFICATE-----
Generated at Sat May 18 03:04:30 2024 by rpki-client on console-ams.rpki-client.org