Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File:                     VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier:          19AFvhJxgJ8W9zytDHXHKB1iTEjVAWF2Y/pEtVk8Rm8=
Subject key identifier:   41:92:84:FA:BE:2A:84:A9:BB:AC:69:DF:FF:E2:AD:E6:8B:2A:C2:F1
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer:       /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial:       018F87498F1153ECB109D6A933D4328D083C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number:          0DE7
Signing time:             Fri 17 May 2024 16:01:35 +0000
Manifest this update:     Fri 17 May 2024 16:01:35 +0000
Manifest next update:     Sat 18 May 2024 16:01:35 +0000
Files and hashes:         1: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: GIdtb25+Cnc7sq79NC3ZoDaILOGELfkJyBWs44HqiiI=)
                          2: Wc8FzPG0JYD1xj5g1hysjT09uc0.roa (hash: o8tSvDqyWfBZm+JRvbb8xIhhfv1TbT2VbZoEeGyXaIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8f:11:53:ec:b1:09:d6:a9:33:d4:32:8d:08:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
        Validity
            Not Before: May 17 16:01:35 2024 GMT
            Not After : May 18 16:01:35 2024 GMT
        Subject: CN=419284fabe2a84a9bbac69dfffe2ade68b2ac2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:9b:f9:9f:a6:30:f4:b1:10:85:f1:b9:ad:
                    50:25:5e:e1:a0:7b:82:ba:96:78:e0:fc:64:32:c3:
                    8c:46:25:60:b9:1e:7a:f3:ac:45:ad:8f:88:ac:51:
                    5c:61:8e:9b:02:7f:ec:d9:4b:e9:34:de:14:7c:e7:
                    d6:96:db:93:20:7a:ef:ff:dd:3e:ba:85:04:80:7f:
                    dc:55:24:43:ce:c6:5a:2b:67:af:35:e6:0d:3a:55:
                    b2:79:66:21:52:40:a9:43:47:be:e1:a8:ea:65:f2:
                    b2:5a:ee:4b:42:4e:fa:0a:75:83:62:bc:1e:6e:0c:
                    32:3d:b6:72:53:11:c4:a1:cd:a9:a5:e0:fb:b2:fd:
                    33:67:70:01:62:10:88:4a:23:f1:3a:6d:d2:3b:25:
                    94:dc:46:cc:50:e2:34:38:2a:9e:b5:7d:53:e8:54:
                    2e:15:42:bc:17:8c:47:0f:2e:5c:b4:1e:06:e8:d1:
                    0a:74:ba:cc:dd:83:ed:8e:d0:33:45:93:5c:a2:b0:
                    3d:73:c0:97:c7:45:d6:99:2c:ea:c7:8d:c9:f9:65:
                    0e:bc:42:7b:17:bd:ff:b8:56:0c:31:9f:40:c4:c2:
                    89:17:bf:28:c7:73:2d:e7:9f:cd:83:b0:8b:23:72:
                    12:99:1e:8a:64:ee:10:82:0c:39:1f:15:49:80:f5:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:92:84:FA:BE:2A:84:A9:BB:AC:69:DF:FF:E2:AD:E6:8B:2A:C2:F1
            X509v3 Authority Key Identifier:
                keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6c:78:61:0b:b5:41:d9:7e:45:5c:6c:78:3f:42:1d:1a:96:
         43:6c:6f:da:ff:20:86:91:39:fd:79:8d:9f:c9:e4:d1:0f:4a:
         54:74:16:52:db:cf:9a:9e:e6:df:87:b0:d0:80:a8:e5:75:3c:
         9a:7f:97:41:db:58:b3:2d:44:69:51:4a:b0:00:d4:7c:0c:58:
         1c:a0:cc:44:08:84:bd:f1:59:4f:15:2f:9a:75:4a:80:34:bb:
         99:6c:24:bb:35:69:7a:30:ca:ec:fa:83:b1:e8:e8:b4:9f:bb:
         54:89:9f:7b:10:d2:65:ca:b3:c4:f6:d0:f5:6a:6d:11:21:7e:
         a6:d7:4b:67:83:54:9b:ea:95:c1:75:95:58:34:e1:db:f3:a5:
         7a:ce:34:04:1f:53:ef:c6:d4:3b:b3:3d:fb:d1:3f:60:cc:db:
         ab:74:fc:e1:5b:7a:ac:1d:61:c3:9f:27:5d:c6:8a:32:ca:4d:
         48:ec:17:10:7a:cc:31:1f:8b:38:79:d9:5d:69:b0:db:8d:35:
         b7:b8:c6:84:75:66:a5:37:08:17:71:1f:16:c0:ee:4a:69:a9:
         9e:cb:c7:d3:51:f2:7d:9c:79:d7:72:ac:54:4b:b5:2e:62:3d:
         22:b2:65:a6:58:57:34:24:36:54:d2:7e:7f:f9:95:92:38:7b:
         0a:80:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:28 2024 by rpki-client on console-fra.rpki-client.org