Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          +iIFQpFy6sKxnwWEmZrl9wvH77oTZGbfrJnF+Id2SRw=
Subject key identifier:   FD:0D:E1:88:ED:99:ED:61:9B:E3:2E:93:43:BD:9C:78:BE:75:78:C9
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       01967F0F3EDE3EC164F0186DAD09E575778C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          1512
Signing time:             Tue 29 Apr 2025 01:00:27 +0000
Manifest this update:     Tue 29 Apr 2025 01:00:27 +0000
Manifest next update:     Wed 30 Apr 2025 01:00:27 +0000
Files and hashes:         1: L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa (hash: ECXVVyoHo6mN0mEmdgrhg+O//yJsNOUcG+xLAybX5t4=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: 7Wb5jtU4dQKLVTGHNdkzIYoSrEsaWTIk7LO3S4t0k1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:0f:3e:de:3e:c1:64:f0:18:6d:ad:09:e5:75:77:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Apr 29 01:00:27 2025 GMT
            Not After : Apr 30 01:00:27 2025 GMT
        Subject: CN=fd0de188ed99ed619be32e9343bd9c78be7578c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4a:8a:a4:48:33:b9:4f:40:04:f6:fd:ca:cf:
                    95:bf:b1:7d:32:04:4c:49:1e:23:ce:fd:92:bf:58:
                    1f:df:29:52:c2:fa:08:5f:8c:1f:7a:32:fc:91:a1:
                    20:2e:b6:df:29:35:3c:1c:3b:db:fd:05:85:2b:97:
                    1b:f4:f3:86:08:aa:ae:5e:35:c6:a2:88:af:2b:90:
                    45:a0:d2:51:ac:8c:52:7b:f2:db:1d:96:03:e6:26:
                    79:46:0e:db:34:43:41:ce:9f:e4:33:05:e1:e4:a1:
                    33:b5:c0:5f:3a:ac:18:6a:fb:5d:8a:25:87:ba:2e:
                    00:ed:da:17:93:ec:07:32:04:05:ed:6f:43:da:6b:
                    1b:8f:88:0d:22:ab:62:6f:26:cc:85:3e:bd:e7:79:
                    be:06:01:24:e3:e4:9f:d4:4d:54:2b:6c:32:8e:e8:
                    45:15:0d:34:9c:ee:75:8c:36:9b:9f:02:a7:94:d6:
                    a6:7f:e1:9a:1e:55:16:44:86:6e:26:e2:26:06:43:
                    80:5f:dc:5c:3c:0d:0a:c8:51:af:25:cf:ed:62:53:
                    04:c0:c7:4a:eb:18:3c:2f:a2:cd:1f:05:28:77:6e:
                    86:f8:27:a5:b7:70:28:3b:19:0c:05:a3:89:b2:03:
                    93:22:4f:0f:7c:09:24:07:59:5a:d2:75:24:fc:e5:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0D:E1:88:ED:99:ED:61:9B:E3:2E:93:43:BD:9C:78:BE:75:78:C9
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0e:2a:9d:e0:21:71:9e:cc:71:d2:5e:72:03:e9:38:63:52:
         16:b7:59:c9:d7:14:e6:34:14:20:fe:a5:eb:b1:72:cf:a4:3b:
         f7:bb:67:58:3b:ea:85:ba:49:63:24:e0:98:05:95:0e:c2:99:
         3f:a8:dd:23:b2:e9:33:5e:21:18:db:f8:eb:0d:ce:44:de:7f:
         42:4d:24:75:11:92:cc:90:d0:d2:ed:68:eb:6d:a7:a0:35:7c:
         83:22:7f:40:09:2b:5a:5f:82:da:cb:f1:89:e5:5a:d5:af:87:
         60:38:79:73:f4:38:d6:ac:8d:22:ab:d1:27:d4:da:bd:0f:91:
         e7:0b:d7:c4:ac:d2:cf:39:c1:97:19:34:cc:97:3d:a6:95:03:
         0c:12:e6:21:a3:ad:ba:19:8d:16:a9:fb:d8:66:5a:d8:ae:53:
         0b:dc:eb:85:9f:49:02:08:7b:1b:5f:9c:33:3c:0d:5f:94:da:
         d1:16:a3:ff:3a:cd:4b:a9:57:d7:d7:b1:ad:8e:cf:72:d0:e8:
         03:57:63:a0:73:8f:ef:ba:ad:74:b7:c2:54:42:46:aa:82:2f:
         f6:93:85:3f:59:ed:07:8d:48:1f:28:41:f3:6c:29:87:8a:ce:
         8a:6c:87:27:69:46:2d:56:c0:b9:95:7b:2d:19:ef:b5:2f:aa:
         39:33:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:10 2025 by rpki-client