Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File:                     VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier:          MrRvOgCOOnieaNe5ygBSAyxqb9B68cEF12oXn892bHI=
Subject key identifier:   07:81:51:7B:E5:F4:93:54:C5:1D:B9:E3:73:BD:B7:DF:7D:7B:77:99
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer:       /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial:       01901EC67D29BB1C9BADB4C1B015639F2F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number:          034D
Signing time:             Sun 16 Jun 2024 02:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:42 +0000
Files and hashes:         1: Sn2PjWOF3YKf8_jN5STlzoMzhiw.roa (hash: UQzSwMaZC1Riajz1ab0LkAB9BBledxn4tSXcsWO7xlk=)
                          2: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: oI+1CsxoYzS0lOgD6JM98fQB4IQnr9maMAQObhKGM7E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:7d:29:bb:1c:9b:ad:b4:c1:b0:15:63:9f:2f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
        Validity
            Not Before: Jun 16 02:00:42 2024 GMT
            Not After : Jun 17 02:00:42 2024 GMT
        Subject: CN=0781517be5f49354c51db9e373bdb7df7d7b7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b7:6e:55:59:12:9e:f5:3a:c7:68:02:fe:ff:
                    cb:fd:79:70:2e:d8:2c:e5:04:ac:79:91:97:a8:83:
                    2d:64:79:83:96:b0:0f:aa:e4:23:64:6e:98:72:2d:
                    a7:05:ad:a5:34:68:57:1b:da:ad:94:96:cc:49:d1:
                    75:33:cd:06:f9:50:81:60:74:ef:b1:c9:d7:48:28:
                    60:6f:7e:d4:32:ce:46:5a:af:04:c0:9a:5a:01:2e:
                    4b:c5:e6:14:6f:6f:1f:ea:ce:40:aa:f1:20:2d:b6:
                    30:2e:ac:07:9e:8b:12:e5:de:29:df:42:de:4b:79:
                    b6:c5:f7:f6:54:54:4c:0b:52:78:b1:42:bd:4a:8e:
                    dd:b2:86:4f:5a:2c:6a:aa:6f:0e:12:58:d6:5c:f1:
                    95:66:da:f8:59:75:11:0d:f0:9e:99:35:fe:fb:b7:
                    23:6c:4c:f5:f2:e7:16:82:77:2b:67:72:5a:68:cf:
                    93:19:65:66:a7:5e:e7:e7:ff:52:2e:70:67:c1:84:
                    fd:54:6d:a1:1d:16:b7:59:7e:a9:cf:80:f6:cd:de:
                    3b:e9:2c:20:84:14:08:55:e1:d6:99:9b:db:c6:89:
                    58:b4:a9:0b:fc:86:c7:72:e0:36:c9:89:f2:af:96:
                    54:27:a5:ea:fa:f4:aa:a5:af:1c:d9:35:2b:60:7b:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:81:51:7B:E5:F4:93:54:C5:1D:B9:E3:73:BD:B7:DF:7D:7B:77:99
            X509v3 Authority Key Identifier:
                keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:55:31:20:20:3f:43:37:45:d5:e7:f9:46:19:8d:ba:29:d6:
         3c:a8:48:35:d8:56:54:bf:b9:b8:a4:ff:e8:8f:76:cf:f5:2c:
         db:50:7f:56:1c:ec:3d:07:be:6b:20:eb:ff:2c:70:8c:4d:c6:
         33:79:4f:5a:9c:18:92:7a:e7:28:d5:7a:ff:0e:b6:eb:8c:af:
         06:bf:ab:38:c6:e1:b1:2e:bb:fe:b8:85:cc:5f:4a:12:9e:db:
         3b:6c:77:8b:99:81:84:dc:64:8e:1f:64:90:b2:f3:7c:9c:10:
         29:da:27:99:5d:4b:c2:b3:0b:43:79:97:dc:48:aa:d4:c4:e1:
         18:0d:9d:6b:25:63:f5:2c:0b:9a:c0:68:fc:3f:91:15:a7:17:
         ad:2b:99:82:97:a3:8f:af:35:06:77:fb:30:d1:95:ef:50:60:
         c3:94:27:d0:4a:24:df:7e:42:4e:16:01:de:ef:00:9f:d7:25:
         bf:ea:3a:81:55:ce:3f:a0:14:e4:15:a8:47:ae:08:ea:ef:9a:
         05:76:74:0b:0a:77:45:21:fb:d9:d1:f3:bc:af:eb:94:39:04:
         83:88:1a:2d:1e:3d:a5:d9:a1:e0:e7:0d:4f:5e:8d:16:d1:ed:
         be:b4:61:18:0f:45:bc:a6:63:fd:be:c6:ee:86:8b:c3:fd:f4:
         54:d6:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:57 2024 by rpki-client on console-fra.rpki-client.org