Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File:                     VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier:          8kt9bk+pR9h6ZoS58m59UbNEvLAScCO/50NBbyOMzng=
Subject key identifier:   8B:FC:D6:12:C5:98:23:64:8A:A0:61:0A:F6:53:0A:47:70:F2:6A:73
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer:       /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial:       018F7BB3EAE74BB4C7C4CEC4CD2B5302A8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number:          0DCD
Signing time:             Wed 15 May 2024 10:02:19 +0000
Manifest this update:     Wed 15 May 2024 10:02:19 +0000
Manifest next update:     Thu 16 May 2024 10:02:19 +0000
Files and hashes:         1: 4Yiof5vXQMv8xsjCXvGMMrRpw_A.roa (hash: rkMBiYT/UHvW/98ZwAl4Pm/7UJfq1qoVDOx16RIE6Wk=)
                          2: SzP-O00hvPyxQ2Ay7ru4RtRKWd4.roa (hash: swBwHR+hEKPvAq/37h/pumtuHGcXoy/13UJgpMP+adU=)
                          3: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: YWGazRRZVPQrx0zAuZYr3kin2vdaN2hLoEnZfTeWf/Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b3:ea:e7:4b:b4:c7:c4:ce:c4:cd:2b:53:02:a8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
        Validity
            Not Before: May 15 10:02:19 2024 GMT
            Not After : May 16 10:02:19 2024 GMT
        Subject: CN=8bfcd612c59823648aa0610af6530a4770f26a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:65:83:ed:1d:43:f3:ef:a9:e3:dc:f7:f5:
                    77:ba:bc:69:39:b0:91:9e:c9:33:ef:74:20:70:3b:
                    7a:ad:d7:23:96:3a:60:cc:f1:35:0d:17:77:1c:14:
                    97:d9:73:75:65:53:b7:49:34:ac:8f:76:a9:8b:8d:
                    dc:ae:72:16:4e:bb:0f:ff:6c:10:ba:25:2f:63:26:
                    14:48:3a:4d:ae:e5:1a:28:b8:35:50:14:eb:5a:8c:
                    9c:92:1c:b7:11:2d:8a:68:6c:e4:00:2c:e1:67:83:
                    29:de:31:5b:da:56:2c:7d:fc:d4:de:d2:82:06:fd:
                    4d:01:05:63:5f:fb:ca:3e:4e:6f:33:c2:9c:d9:f4:
                    bf:c7:16:d3:76:ab:86:28:07:c8:03:9a:3a:18:5d:
                    2e:e2:62:fe:37:16:7d:04:04:92:7f:0a:23:86:6e:
                    82:15:bc:bd:68:fc:7a:d9:e8:93:8e:9c:88:d4:e2:
                    b3:3d:89:f7:7f:12:f4:c0:f4:f1:ba:de:d4:7d:31:
                    40:cb:c9:da:b5:52:23:f6:ea:0b:82:76:ee:64:47:
                    f5:60:fa:12:b1:49:05:b3:81:75:24:44:2f:0c:68:
                    b6:ef:d6:71:29:a5:10:51:d5:b9:d4:f5:1d:59:0c:
                    1a:39:02:62:75:b8:e7:9c:03:37:82:91:56:ee:ec:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FC:D6:12:C5:98:23:64:8A:A0:61:0A:F6:53:0A:47:70:F2:6A:73
            X509v3 Authority Key Identifier:
                keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:08:cc:04:77:18:d0:16:cd:6e:2e:6d:54:f5:99:d1:05:bd:
         77:f6:77:c2:d1:74:06:93:a9:da:93:1f:17:47:1d:0e:dd:04:
         f8:61:d4:ce:02:fd:52:52:93:2a:dd:a3:05:b0:88:03:6b:9a:
         61:19:62:f9:83:c6:df:38:f8:cd:e7:bb:10:8b:d6:1c:f7:8d:
         69:5f:47:fb:b0:5e:92:8d:1e:23:c4:93:73:30:a9:39:15:fe:
         3f:df:e1:de:bb:c2:20:ff:d1:ab:ef:55:a5:8d:52:76:f3:64:
         b9:09:b4:ad:4d:ab:7a:aa:77:1f:d0:e4:26:22:ed:8b:e9:51:
         d6:f2:06:e3:dd:6a:9c:19:1f:ac:26:17:1f:dd:30:99:1e:d8:
         15:39:47:e3:f7:b5:82:ea:e8:b9:45:24:02:c3:fd:60:91:e1:
         4f:f2:ac:de:66:68:37:48:05:4f:ea:fc:d6:05:92:e2:3b:a0:
         d3:58:fb:92:16:d1:15:e0:8d:21:c5:61:64:fd:34:c6:ab:6e:
         d4:92:97:53:72:1d:60:f2:b0:4e:ff:89:5a:aa:ae:1d:b3:39:
         26:3a:fb:e7:de:bd:0a:62:89:ef:b7:8e:46:31:da:76:4e:7a:
         b1:dd:d2:28:e9:11:25:83:88:7e:c5:ae:6f:68:f2:da:c2:2c:
         ff:58:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:13:48 2024 by rpki-client on console-ams.rpki-client.org