Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File:                     Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier:          HbYtrgouKoGp/HwC9J9uNHv/5F3kMiUR8YJPzSe3QcE=
Subject key identifier:   82:14:E1:DE:9A:DC:6A:92:C1:04:F3:7E:CA:18:DC:AF:00:6D:B2:40
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer:       /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial:       0196789F964C6960421C286BA1B588A5FD8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number:          0879
Signing time:             Sun 27 Apr 2025 19:00:46 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:46 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:46 +0000
Files and hashes:         1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: /yShdDu2s41eEX8agF5PGRQlGPnAPCUpMbLLrTBwS+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:96:4c:69:60:42:1c:28:6b:a1:b5:88:a5:fd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
        Validity
            Not Before: Apr 27 19:00:46 2025 GMT
            Not After : Apr 28 19:00:46 2025 GMT
        Subject: CN=8214e1de9adc6a92c104f37eca18dcaf006db240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:33:dd:08:17:8e:fc:2b:3c:c1:7e:b8:36:
                    db:e8:e0:4a:10:a6:13:cc:b9:5b:a0:cd:1a:fa:fb:
                    03:53:3d:d6:ac:00:fb:73:1a:08:13:b9:44:32:9c:
                    0c:48:23:8c:77:7b:44:51:9b:38:ac:cd:12:91:34:
                    94:68:ea:5c:06:ab:61:4a:3f:5f:de:7e:16:9f:03:
                    b6:00:2f:c8:ad:5f:0b:6a:ee:a3:6d:be:9c:41:09:
                    2e:53:5b:f7:ec:97:48:45:97:cd:6e:c1:ef:56:eb:
                    ff:e4:37:79:7c:a4:f6:cf:f7:33:6f:a6:a7:56:91:
                    ca:0b:b0:58:13:69:62:43:18:cc:39:34:1d:e7:68:
                    60:d6:25:94:f5:d3:b1:e8:b1:be:38:13:4d:3b:d9:
                    34:26:0b:24:95:e0:b9:73:29:0c:cb:d9:25:3d:18:
                    87:f6:91:10:3a:20:2e:3f:26:c6:60:78:4b:36:b2:
                    47:6e:a1:e2:9e:d0:54:c6:25:64:09:63:35:38:77:
                    fe:13:f8:74:69:db:6d:b8:45:d7:b7:63:40:a4:1d:
                    86:53:e8:6d:12:83:50:c5:a2:80:62:4b:d7:17:53:
                    02:80:cb:a0:81:84:f7:be:7b:28:16:3b:0e:36:b2:
                    a4:b1:0b:05:a4:e3:ee:cb:05:96:46:95:6a:28:03:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:14:E1:DE:9A:DC:6A:92:C1:04:F3:7E:CA:18:DC:AF:00:6D:B2:40
            X509v3 Authority Key Identifier:
                keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:c2:8f:6e:e7:07:a3:5f:45:58:d3:71:96:c6:dc:35:f9:
         b2:4f:41:df:4e:2f:17:62:8b:93:73:c5:85:5d:7e:27:65:47:
         8b:4a:f2:3f:e6:ba:a3:2d:c9:10:9d:74:e7:4c:4d:8b:25:fa:
         83:a9:79:0c:a0:5a:81:e9:0b:4e:37:8d:1c:1b:c8:33:f3:2e:
         04:92:fb:74:43:47:34:b6:5b:b3:8c:9f:0d:77:ea:fd:08:31:
         d5:0b:1e:fb:88:f3:58:61:39:88:4e:77:0b:4a:aa:81:a2:ef:
         63:98:e1:8b:93:13:b7:d9:a2:4a:a0:30:70:49:a8:82:be:fc:
         ee:8d:37:94:56:5b:33:7e:6b:ab:e2:b2:d0:1e:b0:7b:d7:83:
         95:b1:97:98:ee:4a:68:f5:82:38:13:4a:59:23:7c:83:d9:82:
         9c:a2:aa:4e:82:f1:9e:dc:7f:b4:fb:b6:e1:b8:c5:cb:d6:46:
         31:a8:60:38:34:65:b3:61:35:8a:7c:07:b9:47:a4:d8:91:a0:
         61:38:45:fd:4b:b1:92:f4:26:05:95:ae:dd:6f:7e:dc:e4:ef:
         b1:61:a5:08:3f:82:3d:4b:8b:0b:12:a2:cd:be:b4:b5:0b:24:
         e5:c5:50:03:00:60:9b:ce:3c:e5:0a:b1:e0:c4:e9:48:36:05:
         1d:f4:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:23:17 2025 by rpki-client