Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File:                     vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier:          01W6gxZHsIkslr130KScgfP1byg7pIL0eCOhJenxQ1o=
Subject key identifier:   19:38:35:14:7B:49:8D:A1:D0:EA:56:76:CA:EC:BD:BB:3F:27:C5:EA
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer:       /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial:       01901BFC93399071710139F269EC916FF2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number:          08F5
Signing time:             Sat 15 Jun 2024 13:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:55 +0000
Files and hashes:         1: 7CAtnZN2kCaYk4TfY7S3R7RT6EM.roa (hash: 4EboVZRmkpv6QEjrGYeLzLE8DF18L1ltC5dRQvA7YDc=)
                          2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: yG5p1HRnKg51OnFDWMToEzR8wmgNS/XNQnv0Vms/03w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:93:39:90:71:71:01:39:f2:69:ec:91:6f:f2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
        Validity
            Not Before: Jun 15 13:00:55 2024 GMT
            Not After : Jun 16 13:00:55 2024 GMT
        Subject: CN=193835147b498da1d0ea5676caecbdbb3f27c5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:69:7a:14:7e:56:92:6c:86:57:8c:17:2f:
                    ee:39:fa:44:21:82:e1:14:30:8d:1e:e5:57:44:02:
                    f2:2c:d7:ae:32:e7:50:7e:3b:5b:28:74:52:8f:2c:
                    5b:5a:8a:18:bf:e9:50:e2:95:19:e2:cd:cf:77:99:
                    cc:85:0a:0e:04:b3:d6:c3:00:c4:d5:98:25:43:53:
                    ba:ea:e7:e8:aa:59:78:66:a6:64:54:51:67:41:6b:
                    47:76:29:84:ad:63:82:0d:5d:31:79:eb:1e:d7:e1:
                    fc:26:1e:99:0a:c1:0e:c2:6b:99:56:f0:76:13:c1:
                    74:68:49:58:b0:7a:75:28:d1:99:bc:60:7f:7a:cd:
                    4a:36:92:b0:de:a6:32:33:2b:82:e5:1d:ba:3b:4a:
                    1a:09:b4:7b:60:24:4e:58:00:c7:05:9e:8d:7d:d0:
                    72:51:cf:8e:40:d9:fd:80:9f:0e:0e:ef:4c:8b:9e:
                    1e:74:9b:19:f5:31:af:cc:79:33:ca:89:f3:81:8a:
                    49:28:ef:95:57:6b:3e:a9:12:c1:3f:82:34:9b:20:
                    8c:da:bf:6e:0a:88:73:cc:15:43:77:c9:0c:c9:bf:
                    da:fc:3d:3d:d6:dc:ee:1d:9b:b7:34:7d:96:18:82:
                    cd:36:d9:34:d6:1f:bd:b6:54:ca:b7:a2:d0:9c:8c:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:38:35:14:7B:49:8D:A1:D0:EA:56:76:CA:EC:BD:BB:3F:27:C5:EA
            X509v3 Authority Key Identifier:
                keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:dd:82:c1:23:4a:6f:5f:0c:4c:39:d8:35:43:b1:40:3b:b8:
         b1:d3:4a:cd:d3:30:cd:0a:5a:ae:e4:07:5e:da:5e:e1:b1:f0:
         27:f4:ba:31:ae:25:09:22:c8:44:80:3c:40:b9:e5:0e:6d:1e:
         3e:0f:81:5e:d7:84:76:d9:0c:07:ab:58:8d:df:31:e5:a3:13:
         5d:09:c8:9a:84:f6:2d:b0:fa:6d:4d:9b:42:ae:3c:1f:49:8b:
         91:28:a9:70:88:65:db:ae:23:49:33:7e:5a:d5:4f:f2:e0:90:
         ef:9d:f2:96:c4:c3:15:d1:66:6f:3a:19:38:38:2f:3b:fc:90:
         e2:fc:4a:d3:2b:2c:d8:16:72:f2:ab:ee:9d:b3:45:ea:fc:2e:
         59:70:a8:a4:49:51:77:7c:04:57:32:2d:47:92:00:73:69:54:
         ee:bb:2f:fe:98:13:48:99:cc:67:76:29:66:c3:70:0b:dc:8d:
         f7:c2:ec:08:91:0c:7e:92:66:f8:72:a4:29:24:74:e0:1e:53:
         66:cb:29:7a:95:19:c2:ce:ad:05:3f:3d:b9:66:d1:3a:cc:ef:
         31:ed:49:6b:ef:d7:11:21:16:61:7f:99:b3:74:b3:2e:d4:9a:
         ad:62:28:f2:f1:20:80:87:0c:6f:9a:98:94:cd:17:f3:f1:94:
         97:27:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:42 2024 by rpki-client on console-fra.rpki-client.org