Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
File:                     vHBHR5L1CD5iXyTW1XqrctZXIp4.mft (raw, json)
Hash identifier:          PEjqpaD1mjBcmLT2OQDqnoQZG2Rt8c5djDYNti1ADK0=
Subject key identifier:   F9:3C:B7:4F:E5:5E:A2:48:8F:34:89:42:A6:40:AE:39:4A:28:9F:12
Authority key identifier: BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
Certificate issuer:       /CN=bc70474792f5083e625f24d6d57aab72d657229e
Certificate serial:       018FC139DA6394101A115EBEA22B5C65EC1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
Manifest number:          0BBA
Signing time:             Tue 28 May 2024 22:02:25 +0000
Manifest this update:     Tue 28 May 2024 22:02:25 +0000
Manifest next update:     Wed 29 May 2024 22:02:25 +0000
Files and hashes:         1: GY2oZrtglfTkAGfhiGVH6OhdFsI.roa (hash: 99i9mYdyhOWi4HmmHb+dXMMBBgrRYRqP//RDsY72X1w=)
                          2: vHBHR5L1CD5iXyTW1XqrctZXIp4.crl (hash: CLad5JiikZEd+1PrNC0ct6sCAJ5/Pe3Z74kZKeFh4mA=)
                          3: y-_obQTBjyJNGhvahNorf2-Ya2k.roa (hash: ntAhUj6SbADn2M42I2XZFKdiyEY94SHmSfNz1XzQc+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 22:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c1:39:da:63:94:10:1a:11:5e:be:a2:2b:5c:65:ec:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc70474792f5083e625f24d6d57aab72d657229e
        Validity
            Not Before: May 28 22:02:25 2024 GMT
            Not After : May 29 22:02:25 2024 GMT
        Subject: CN=f93cb74fe55ea2488f348942a640ae394a289f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:9a:9b:65:1a:3e:44:a1:1e:4c:0b:ad:23:
                    43:33:3a:32:40:9f:15:6f:e1:26:fb:0a:c1:69:7b:
                    0c:d2:ed:4c:a5:9f:dd:a2:d4:88:9a:f6:48:4b:88:
                    da:73:28:d5:70:8c:92:68:18:3d:35:10:df:1e:f0:
                    2a:16:05:bb:39:1d:05:76:53:f5:8e:a6:4e:48:c7:
                    aa:d2:53:29:c4:ad:65:a5:57:98:20:42:77:e8:9c:
                    71:0c:5a:66:3b:fe:53:18:bf:1d:92:56:19:03:4b:
                    f7:de:ca:5c:bf:ff:c9:2f:54:5b:27:f8:90:e4:9f:
                    8f:3e:f2:49:ca:e2:13:15:36:f6:f2:a4:00:54:d7:
                    79:c8:fb:59:c4:a4:7f:6e:0c:5a:0c:7b:26:7a:94:
                    2c:21:ca:89:c9:e8:3a:15:98:24:ea:0b:19:2a:ee:
                    ce:79:1a:0c:b3:12:1e:68:bd:0e:12:b9:fc:60:0e:
                    49:f7:4a:db:3d:b1:2b:f0:28:80:25:fa:f5:5b:4a:
                    b5:0b:67:20:49:cb:e7:44:b4:92:a5:82:94:8d:05:
                    54:6e:77:3e:1a:3d:04:93:a8:72:92:c0:78:c0:0e:
                    a4:b1:13:ab:27:74:12:6f:28:96:73:2d:36:80:65:
                    7e:dc:c7:b6:2b:81:04:d1:aa:15:80:1a:3e:3f:7e:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:B7:4F:E5:5E:A2:48:8F:34:89:42:A6:40:AE:39:4A:28:9F:12
            X509v3 Authority Key Identifier:
                keyid:BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:53:da:48:69:63:50:cd:42:29:07:61:29:d7:9b:22:a7:6c:
         4d:94:fd:ab:9d:00:be:36:dd:80:97:6e:20:9d:84:6c:9a:9a:
         72:44:a0:3b:b9:aa:36:e4:93:c4:b5:89:66:b9:67:7b:0b:d9:
         ca:d2:1a:32:a4:a8:4f:6c:b6:36:b4:7c:90:9e:8c:0e:bf:54:
         69:04:80:02:5e:af:25:28:47:ab:1c:aa:ee:4b:21:7a:84:00:
         22:c4:be:41:d7:32:cd:ee:c5:f7:81:34:d5:70:14:2d:c4:ed:
         5f:d9:81:80:bc:cf:f7:9a:a1:ce:99:9d:a8:a8:fd:d3:f0:dc:
         0e:5d:1c:4c:00:ea:4a:fa:a6:e5:06:7e:25:84:d2:bc:13:77:
         95:ca:4d:11:34:43:12:42:33:84:d9:00:35:1d:1c:5c:6c:31:
         9e:48:c0:41:d2:8b:e1:cb:a6:48:49:55:7c:c3:a5:ab:77:ea:
         92:42:49:01:81:3e:b8:6d:48:ee:94:b0:ae:83:67:49:07:0d:
         e6:64:6d:37:62:41:55:66:0f:48:66:9f:43:50:76:fb:70:72:
         5b:05:6e:d4:bb:0d:8a:3b:e2:8a:a4:c8:63:5f:e7:87:f7:e7:
         ed:08:63:c4:38:a4:0b:3f:c2:96:12:90:eb:67:35:e3:0a:ec:
         61:38:f7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 04:49:25 2024 by rpki-client on console-ams.rpki-client.org