Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.mft (raw, json)
Hash identifier:          aA9R7BU/DKQbCcvkZYmIpH/w7a4FMezZDqHffnaoA3Q=
Subject key identifier:   D9:42:84:AB:F3:E4:46:BF:7E:46:A5:7F:8E:53:9B:EB:23:84:D3:5D
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       0196C238E24DA8FBA7DC012309C6620D1655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
Manifest number:          1241
Signing time:             Mon 12 May 2025 02:00:29 +0000
Manifest this update:     Mon 12 May 2025 02:00:29 +0000
Manifest next update:     Tue 13 May 2025 02:00:29 +0000
Files and hashes:         1: VP-6LGIMGFPZrUdaBQviFxcYtmI.crl (hash: 3J/ARtcX9K4f2AY3wmuuYEkB/RQsOrCUNZzwSsJOHX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:38:e2:4d:a8:fb:a7:dc:01:23:09:c6:62:0d:16:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: May 12 02:00:29 2025 GMT
            Not After : May 13 02:00:29 2025 GMT
        Subject: CN=d94284abf3e446bf7e46a57f8e539beb2384d35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:71:83:ef:b3:13:ad:7a:a2:6c:7c:03:57:
                    09:19:35:77:8c:b6:42:af:6d:d8:3d:92:7c:a7:f9:
                    a8:e9:00:f8:8d:f2:ad:36:c1:f5:bd:3c:f0:ec:78:
                    8e:3e:cf:3d:68:c8:e3:0f:96:76:28:ae:a5:22:12:
                    42:7f:a5:9a:19:0d:8a:4a:ae:24:a6:62:11:6c:be:
                    a2:c1:47:a0:35:f4:9e:7e:87:c4:0f:65:4b:ca:48:
                    71:c2:a9:81:10:37:8c:3f:8b:6e:1f:51:97:68:0a:
                    36:f9:0a:19:6a:19:e2:18:6c:2d:c3:b1:e2:1a:a3:
                    3e:a7:46:45:b9:bb:3d:de:08:c8:53:08:15:e1:b4:
                    53:a7:ce:98:9c:b3:2d:3c:88:3f:c0:cf:e5:55:b0:
                    06:34:83:d6:7b:88:5c:5f:0c:23:bc:be:5d:cc:e2:
                    6f:33:91:54:d6:ae:95:53:33:f0:c7:da:6a:f8:dc:
                    ef:4e:1e:7f:7b:cd:c5:71:3e:71:20:88:36:5c:10:
                    9d:ec:ed:60:4c:1d:f2:b9:58:fc:41:f9:68:6d:9d:
                    d1:0c:c3:29:30:80:47:49:df:f6:b1:46:eb:7e:b8:
                    b6:bf:b9:2f:e0:61:6a:6c:4f:0b:ca:d0:cc:ab:28:
                    d0:3b:39:46:8c:5c:6e:67:71:b5:84:ac:5d:82:de:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:42:84:AB:F3:E4:46:BF:7E:46:A5:7F:8E:53:9B:EB:23:84:D3:5D
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:4f:e7:b3:11:8c:73:3a:49:95:2e:2b:20:ac:8d:ba:63:
         5b:7c:04:4d:f5:5e:22:b8:16:0c:e0:77:a2:06:c1:06:bf:f8:
         e2:af:78:e5:5f:b3:9a:2a:66:da:40:01:72:28:67:39:0c:b0:
         15:03:dd:45:42:c5:a9:21:cf:40:6c:42:33:bf:23:55:4b:12:
         5c:67:89:21:f3:39:31:09:c5:af:7d:a5:de:c4:ea:ac:bd:3d:
         a2:dc:46:42:db:0b:64:6d:28:12:a5:bd:5a:ee:37:30:a6:48:
         e0:58:fa:92:6a:f0:1b:91:23:45:e2:5d:f9:1b:24:e8:1f:22:
         69:e9:c9:a4:60:5d:d5:27:a3:f3:19:a0:f9:37:bc:4a:3f:30:
         c7:28:7c:67:28:f3:c1:46:ad:b0:48:aa:92:fa:b6:27:1e:52:
         c4:f0:f0:c1:a2:84:10:f3:82:44:dd:67:ab:38:dd:97:ef:08:
         25:20:59:94:2a:10:e6:a4:28:38:03:2e:11:5e:e5:a6:4b:27:
         6a:b3:cf:1f:86:1e:16:06:a9:f3:3e:35:56:15:f6:8c:1c:24:
         97:05:4e:1d:d1:4b:31:f2:38:e5:d7:95:e6:9f:90:2d:ff:b7:
         44:a1:aa:a1:e7:54:93:04:be:b0:2b:07:30:f2:6a:e8:a9:a9:
         af:71:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:59:39 2025 by rpki-client