Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File:                     ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier:          s3+eza7CMtzjsDmoeu9FzMDsAZzEla9fVBkE09Uy02I=
Subject key identifier:   F5:DA:84:43:C5:88:C6:95:67:73:BC:2D:0D:87:BF:A0:75:5B:2B:96
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer:       /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial:       018F87ED54160601C81A45322A01E14526CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number:          0CC0
Signing time:             Fri 17 May 2024 19:00:28 +0000
Manifest this update:     Fri 17 May 2024 19:00:28 +0000
Manifest next update:     Sat 18 May 2024 19:00:28 +0000
Files and hashes:         1: RNVubAzaEFjTweliZnLphHguFE4.roa (hash: zb3RT06K5NVf6/uz4zR+3BusK4DbK/puqQg99xIYOk4=)
                          2: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: vlO2uI29qcAaXVQbwUatcoOQW9iWRla1gvsDG0JdmRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:54:16:06:01:c8:1a:45:32:2a:01:e1:45:26:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
        Validity
            Not Before: May 17 19:00:28 2024 GMT
            Not After : May 18 19:00:28 2024 GMT
        Subject: CN=f5da8443c588c6956773bc2d0d87bfa0755b2b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:96:c6:e0:17:cc:65:eb:07:20:40:03:f9:
                    85:71:96:77:a3:73:44:33:c1:40:d2:63:c3:c6:5d:
                    59:6c:55:81:20:70:21:d1:d4:ba:b7:1a:b2:9d:6c:
                    26:3a:f1:79:34:94:c3:4f:a7:c7:c4:bd:26:2e:c4:
                    8f:1e:2c:ee:3d:1b:3d:aa:19:bf:83:d6:e9:5d:1a:
                    da:5e:22:13:f3:81:8b:7d:7d:1d:3b:df:23:37:b3:
                    c1:9b:82:2c:a3:7b:11:74:c2:0b:8b:d4:75:93:6c:
                    7d:c0:59:16:bf:fe:25:aa:f0:59:27:d8:92:f0:6c:
                    0f:4c:4c:fd:0e:6e:5e:c4:72:9e:e0:5d:fe:98:ed:
                    51:91:fd:5c:95:c8:d4:f5:a1:1c:9d:c4:61:ae:d9:
                    87:3d:1b:48:98:d8:7c:f8:94:16:9d:3a:a4:c2:02:
                    f2:72:64:98:25:e6:76:9c:5a:aa:e4:ef:f6:75:a3:
                    61:ec:11:18:d4:83:60:aa:a1:dc:c0:ec:65:64:34:
                    f0:ca:aa:15:38:82:82:8f:b9:47:f5:2f:f9:b6:d8:
                    e5:74:13:5c:f0:df:e9:e1:e7:d4:cc:00:eb:04:12:
                    05:ae:d4:94:91:06:8d:f9:ef:50:5f:42:98:fa:47:
                    9d:0a:20:db:2a:97:4a:f6:9a:80:4a:00:f3:70:43:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DA:84:43:C5:88:C6:95:67:73:BC:2D:0D:87:BF:A0:75:5B:2B:96
            X509v3 Authority Key Identifier:
                keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:ce:4e:31:a1:5d:3b:36:ea:a0:0f:dd:04:94:a3:fd:76:
         e5:38:c0:67:98:ef:af:a8:ee:b4:f9:aa:b2:3b:71:0a:f0:f5:
         23:93:30:ec:6f:74:a4:df:37:16:76:b0:23:03:a1:18:64:75:
         1e:12:df:39:5f:d5:54:c2:1a:b9:74:a1:de:58:60:f0:90:a9:
         eb:2d:32:d8:01:41:ac:7c:1d:0a:3a:01:1d:e5:80:89:73:de:
         0c:85:54:97:07:fa:a0:b8:61:0b:63:35:0b:2e:9a:96:58:ad:
         18:6b:49:18:30:f3:e8:85:ba:13:89:85:38:5d:a4:f4:b4:f2:
         9c:d8:11:3b:4d:f6:57:8a:0b:8e:3b:9b:d8:ce:73:95:a3:0b:
         19:44:8d:c0:70:56:f9:cd:fa:22:31:6f:18:f2:e8:56:29:89:
         86:5d:60:c1:76:a3:ef:8c:f7:a0:fe:bb:79:41:1b:e7:28:e5:
         82:84:e9:cf:ff:19:a3:c3:dc:b7:ce:73:21:69:42:33:e0:14:
         8e:54:1d:a2:59:9b:61:24:22:ce:df:4e:c1:1b:d3:c3:0a:f1:
         c6:46:1f:48:b4:9e:19:6d:24:1b:e0:0f:d2:29:aa:19:b0:d7:
         17:ff:55:e1:8f:ae:52:f4:a2:24:b6:34:e0:1f:4b:88:02:10:
         58:89:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:02 2024 by rpki-client on console-ams.rpki-client.org