Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
File:                     Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft (raw, json)
Hash identifier:          qEyWvkG7EGdfxuxY5fCsW13TWqp4ux6kRTOZKrPAXV4=
Subject key identifier:   12:FC:EE:91:83:1D:AB:CE:BB:BB:CA:4B:D8:80:AE:6D:FF:09:75:16
Authority key identifier: 56:AF:20:A6:0A:EF:AC:F3:9F:D5:6A:74:3D:1A:99:53:4C:48:50:BC
Certificate issuer:       /CN=56af20a60aefacf39fd56a743d1a99534c4850bc
Certificate serial:       01901CD84D3995FEAEE78A12FD5DEB968AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
Manifest number:          0FF9
Signing time:             Sat 15 Jun 2024 17:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:55 +0000
Files and hashes:         1: 50mgL_DE2avMT4OACaL8yK-M0DI.roa (hash: dNvZf7DhG9XzQ5f79bRAkZ0AANoA3CAg/4TdgXMcjh8=)
                          2: Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl (hash: w1mySOIY1rTZPnNHw5tcFto3hb2JyS97WbRyjb0jHps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:4d:39:95:fe:ae:e7:8a:12:fd:5d:eb:96:8a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56af20a60aefacf39fd56a743d1a99534c4850bc
        Validity
            Not Before: Jun 15 17:00:55 2024 GMT
            Not After : Jun 16 17:00:55 2024 GMT
        Subject: CN=12fcee91831dabcebbbbca4bd880ae6dff097516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:00:3c:e0:e6:60:bd:6d:a6:2a:45:01:4c:
                    55:67:5b:91:5a:cb:8c:33:64:87:1a:33:e8:05:68:
                    37:8e:3b:c5:4e:27:30:ad:27:c3:94:3b:27:54:31:
                    fe:4c:45:ad:be:07:00:cb:71:96:77:35:21:00:17:
                    33:48:44:89:10:f9:ae:52:18:df:16:df:cf:b1:8b:
                    16:8e:42:98:c9:79:1a:19:37:ce:b1:06:eb:12:ac:
                    40:92:4f:39:88:84:57:3f:df:e0:8b:73:8e:69:d1:
                    07:28:0c:da:0e:61:70:a7:78:fa:b6:e5:38:25:d5:
                    38:18:f0:b1:cd:5d:a0:6d:6a:be:41:f6:df:e8:94:
                    d0:3a:4b:7d:de:f7:2f:1d:c5:3f:3d:8c:8c:73:f7:
                    f2:3a:cc:60:81:87:a1:d1:42:92:a5:6e:2f:73:1d:
                    ac:b2:48:07:73:55:c4:c6:60:32:be:be:6a:9c:45:
                    7c:7c:7e:99:97:8b:68:57:10:31:f7:c4:f5:20:b9:
                    78:89:c8:cb:a1:dc:3c:7e:b1:75:b6:c7:d2:fe:84:
                    c6:d3:c8:83:6a:ed:52:b4:fd:fa:68:c3:06:02:5f:
                    29:c3:93:f5:ac:1d:85:36:d1:e8:bc:9d:4c:a6:27:
                    0c:b0:00:0e:99:1c:eb:8d:76:c3:a7:ef:7c:bf:03:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FC:EE:91:83:1D:AB:CE:BB:BB:CA:4B:D8:80:AE:6D:FF:09:75:16
            X509v3 Authority Key Identifier:
                keyid:56:AF:20:A6:0A:EF:AC:F3:9F:D5:6A:74:3D:1A:99:53:4C:48:50:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:81:f3:f5:97:75:42:5a:25:0a:33:c9:43:ab:66:d3:62:98:
         d8:c2:b5:ea:da:23:d5:37:43:fb:34:4b:de:11:2d:3f:29:12:
         0c:f1:8f:4d:75:7c:be:a0:68:2e:1e:c2:52:b2:8a:d6:b8:f9:
         e4:d0:43:26:ea:e2:ae:f5:45:4d:2f:68:87:e8:09:ba:44:66:
         18:5f:d6:11:e5:e9:30:28:68:aa:fc:b8:88:cc:8c:c7:5a:d4:
         03:aa:fb:6f:3a:da:f2:27:33:35:d0:fb:14:b1:40:07:18:94:
         72:61:ff:6e:84:da:ca:48:78:68:ff:18:b7:37:a0:cc:63:a5:
         7b:cd:0d:a1:c3:c8:f3:aa:f1:51:30:85:9b:be:8b:65:c7:18:
         a6:49:85:ce:70:43:3b:1d:81:28:91:c4:b3:87:ba:bf:87:b8:
         88:61:23:d6:fc:94:c4:ec:71:9f:c6:14:86:1f:10:61:a5:d0:
         a8:d5:e8:1b:06:9e:dc:ec:9b:0e:7c:01:54:3b:aa:d4:14:02:
         0c:0a:79:9a:0c:d1:7e:f4:14:29:21:2b:09:10:82:12:79:3f:
         3e:a6:c3:e6:f6:99:0b:fe:be:7b:47:9d:63:5d:c1:08:c7:2f:
         45:c2:23:99:47:50:ec:2a:83:af:aa:0d:c0:24:41:88:f6:d2:
         53:15:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:30:55 2024 by rpki-client on console-ams.rpki-client.org