Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
File:                     Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft (raw, json)
Hash identifier:          heIZ0qLX/40NXp1ZWMYp4ptPugald1EZacMnD7+mbXI=
Subject key identifier:   21:E1:95:6C:B2:93:46:F4:75:15:5D:32:A4:89:99:C3:92:A9:33:E1
Authority key identifier: 56:AF:20:A6:0A:EF:AC:F3:9F:D5:6A:74:3D:1A:99:53:4C:48:50:BC
Certificate issuer:       /CN=56af20a60aefacf39fd56a743d1a99534c4850bc
Certificate serial:       01901AEA45B669072B3F0AD17E2E833002A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
Manifest number:          0FF8
Signing time:             Sat 15 Jun 2024 08:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 08:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 08:01:19 +0000
Files and hashes:         1: 50mgL_DE2avMT4OACaL8yK-M0DI.roa (hash: dNvZf7DhG9XzQ5f79bRAkZ0AANoA3CAg/4TdgXMcjh8=)
                          2: Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl (hash: ro30jxrQc/Pv+pPc+pBOz7nFzJiTkeAOHYgiW/1mmo4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:ea:45:b6:69:07:2b:3f:0a:d1:7e:2e:83:30:02:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56af20a60aefacf39fd56a743d1a99534c4850bc
        Validity
            Not Before: Jun 15 08:01:19 2024 GMT
            Not After : Jun 16 08:01:19 2024 GMT
        Subject: CN=21e1956cb29346f475155d32a48999c392a933e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:5e:05:5e:01:20:7a:78:f2:4e:40:71:32:
                    b5:05:0d:11:36:b2:73:c4:6c:53:c0:3b:c1:c9:c0:
                    54:89:a7:0a:7b:75:68:aa:d7:c8:a9:dd:81:c2:67:
                    3e:d1:d7:31:9e:59:2f:53:7e:d4:58:85:47:85:f4:
                    8b:b4:d1:4c:72:62:c0:46:01:df:ad:b7:8c:a2:94:
                    52:30:34:12:db:8e:68:47:e2:78:37:03:68:de:18:
                    e9:92:e2:91:ef:9d:f8:f7:9e:f3:6a:30:64:3d:a1:
                    b9:9c:ea:c0:d2:cc:d1:1b:61:7e:c8:b3:42:0e:c5:
                    50:3b:de:99:5f:a7:b6:43:fa:d3:04:c2:83:44:47:
                    81:b0:90:e7:a3:4d:13:f2:25:66:14:f6:87:2e:99:
                    fb:1d:61:33:55:b7:50:05:86:1b:da:70:80:d7:a9:
                    cd:49:73:cf:20:27:87:2f:37:cb:34:d6:23:b5:43:
                    38:c5:a4:c8:ca:31:2d:fa:23:da:cc:c0:40:d0:8e:
                    c7:aa:ce:1c:79:30:f3:f5:c2:9a:b8:27:1e:9b:a8:
                    45:e8:04:83:ee:bb:4c:04:aa:cc:bd:13:49:96:87:
                    ee:5e:e5:b3:08:34:37:d6:8c:54:24:24:2f:86:02:
                    e9:a7:1b:ae:8b:d4:cf:60:c9:8a:b2:ea:02:7b:fa:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E1:95:6C:B2:93:46:F4:75:15:5D:32:A4:89:99:C3:92:A9:33:E1
            X509v3 Authority Key Identifier:
                keyid:56:AF:20:A6:0A:EF:AC:F3:9F:D5:6A:74:3D:1A:99:53:4C:48:50:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:35:90:9d:ef:0d:31:5c:b5:ee:7b:ad:53:60:bd:8f:1d:
         35:e4:db:0e:90:09:03:ba:d4:55:e2:fb:5f:35:48:75:01:36:
         e3:4b:b7:f1:df:77:32:dd:2b:fe:23:3a:bd:27:10:72:57:ba:
         f1:15:1d:b8:e8:e7:4e:6e:b8:c8:07:92:2d:64:2f:69:31:54:
         75:d6:c4:a9:70:67:5e:ce:f7:4c:a7:7d:b7:bc:02:ed:cb:6c:
         47:ff:0c:2d:20:13:3b:c4:2f:3b:5c:9f:5f:86:66:9a:8a:82:
         2d:e2:74:0c:2d:d6:eb:8d:6a:e4:4d:b7:20:2b:13:c8:36:7d:
         f2:1b:5f:25:fe:2c:95:2f:5a:1f:3c:5f:89:2a:bf:61:8b:53:
         1c:82:c0:56:5f:84:85:5f:4d:a9:3b:14:36:3d:e4:14:2a:95:
         94:be:96:00:ec:21:6e:e0:13:2f:34:67:12:e0:0a:27:f2:11:
         fa:b8:fb:6f:94:81:51:4e:03:e5:d7:13:6e:2d:41:db:6e:66:
         b2:d7:8c:22:0e:c9:1d:d4:82:95:b9:16:65:28:42:76:4d:45:
         79:e2:51:e5:05:5e:ba:f8:53:0c:fa:69:5a:fa:93:25:a6:55:
         6a:2d:d3:18:e7:64:50:3d:e0:64:3b:f0:11:84:da:2d:45:39:
         7a:fd:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:09:51 2024 by rpki-client on console-ams.rpki-client.org