Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File:                     vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier:          xOKwff6xJX6UAMdqqctx8mONlxq/4AJx4E9Xxw8UFtk=
Subject key identifier:   4F:CB:D2:4C:71:AA:68:70:76:3F:A9:44:DB:A0:C5:B1:78:20:44:FC
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer:       /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial:       018F8748BDCE5C361E88643BDF6EE37100FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number:          06C3
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: 1tz66VRzT3ksgBHezpDP-dWydtI.roa (hash: 2aYx7cEdS5mEmOCtCGZr4szy4XXnCbKjEdXlmLb9uMQ=)
                          2: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: MSPnPTO4P+j3LrJ5z5NlixC0WgOwx3HI6Er4+FGmA9I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bd:ce:5c:36:1e:88:64:3b:df:6e:e3:71:00:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=4fcbd24c71aa6870763fa944dba0c5b1782044fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:68:44:ba:3e:08:30:f2:2f:3b:7a:4d:6f:
                    9a:e0:61:7a:62:14:44:25:34:35:7b:ac:38:11:d3:
                    26:41:d2:3b:38:24:cf:15:ba:69:c3:3d:1a:66:5e:
                    49:72:29:f5:9d:ee:37:0b:2d:e8:d5:44:12:73:b1:
                    af:53:9c:f2:0c:82:06:c9:38:19:b8:0c:18:00:4b:
                    2e:ce:69:e6:11:90:a9:c0:92:07:a4:bb:a5:29:f6:
                    68:88:e1:7a:b6:98:04:bb:73:3b:3a:9a:79:13:f8:
                    a5:b5:5e:8a:e0:4c:dd:35:31:e5:cb:27:33:3e:e4:
                    6d:ce:cc:f6:96:af:b4:61:81:36:bf:7a:10:8b:a7:
                    7a:77:96:10:a5:de:0a:35:c8:de:f5:c6:6d:6a:a1:
                    9f:a1:76:0d:c5:7e:13:b3:2e:7d:d2:63:f2:05:f9:
                    05:11:6d:0a:cf:2f:c1:fa:f7:4d:03:a8:8f:75:13:
                    e4:05:0c:5e:58:aa:f1:4c:9d:b9:a2:a2:8f:e2:5d:
                    3c:ba:d6:bd:56:21:f5:47:e2:61:1e:2a:4e:25:b0:
                    1b:c3:ac:7f:69:d7:4f:38:dc:e9:f5:e6:af:a2:33:
                    cb:a2:33:fe:38:e0:dd:19:bb:8b:a9:27:4c:64:13:
                    00:fb:0e:2c:4d:f5:a7:a5:7c:57:d9:d8:0e:cc:f9:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CB:D2:4C:71:AA:68:70:76:3F:A9:44:DB:A0:C5:B1:78:20:44:FC
            X509v3 Authority Key Identifier:
                keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:66:03:02:f8:37:ee:e6:a3:74:d2:cd:9b:c7:19:c0:ac:35:
         a0:b8:07:13:69:08:a5:fc:b5:eb:83:1c:72:e3:23:92:ca:96:
         ce:f3:8a:2a:bb:68:4c:41:51:1d:03:f7:6a:bb:46:1e:dc:cf:
         02:a1:f5:f2:90:f6:10:dc:b5:ac:fe:89:d1:a1:43:a9:11:0f:
         42:27:be:04:3f:69:db:57:26:5d:04:dd:f1:c2:27:1c:5e:bb:
         67:8c:fc:d6:80:bb:b2:69:84:fa:d2:70:a8:c0:16:fd:d0:07:
         d0:ec:f8:07:e2:d2:aa:43:d9:69:43:f7:d5:0a:fa:d1:20:91:
         7d:0b:09:4e:c0:75:a1:7b:71:c6:10:8c:c6:f1:9c:77:5f:28:
         83:d4:32:03:da:f9:7f:44:04:2c:14:cc:11:bc:2a:10:07:79:
         69:3a:cb:37:00:10:8f:79:ca:4c:b2:3c:eb:3d:d8:84:17:1c:
         27:bb:cf:b7:77:87:64:77:26:a4:90:5a:d4:66:ce:64:e1:42:
         92:8f:ef:1d:86:26:c9:2c:13:51:08:46:54:4a:b5:90:cf:70:
         0a:a5:78:d7:3c:52:eb:eb:55:36:43:94:7a:b4:08:ed:ed:a5:
         94:5a:dc:20:83:52:3f:97:74:d2:90:76:b3:5e:0a:30:e2:0a:
         8e:75:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:42:58 2024 by rpki-client on console-ams.rpki-client.org