Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          /znMRpAPzDotZKIpXuHbFo60GbTtq1zKelwL3MGVkbo=
Subject key identifier:   F7:74:10:D6:89:68:1E:F8:41:F5:46:EE:96:40:75:C0:92:AC:3D:56
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       018F87B6A78E5DFA03836E1D3E0E93EEF988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          096E
Signing time:             Fri 17 May 2024 18:00:45 +0000
Manifest this update:     Fri 17 May 2024 18:00:45 +0000
Manifest next update:     Sat 18 May 2024 18:00:45 +0000
Files and hashes:         1: 64HlaXHTy3clBlQZlkFZu9u7VpY.roa (hash: qnfCoo1Vd7wDV2LStZZ4q3lu3WFCYo52MkWnIYOWpQo=)
                          2: HmYbr_8TMNKPaRQYeDVv6g_F3h4.roa (hash: 2qqjz/7uTV0/B37gAhdhLBIlqgpKYw5vco/nYCd4SuE=)
                          3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: NrVSW8JLyDTB00062VyxLMgIFJeNxJNl+EvMRNWLdHg=)
                          4: V9-OPp5CO_ZOLNufwo_oAmWq560.roa (hash: pjQ5z3g7zdtnKAhc8wOA/UKKekNBmjlMTC9ALfutZfY=)
                          5: tbP8hxJL4cY2T6FM1_Fpl_us5a8.roa (hash: gvIWNc4+6W8cDMjHk61tsdScna3D3kjj7DAdDPqu7nA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a7:8e:5d:fa:03:83:6e:1d:3e:0e:93:ee:f9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: May 17 18:00:45 2024 GMT
            Not After : May 18 18:00:45 2024 GMT
        Subject: CN=f77410d689681ef841f546ee964075c092ac3d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:be:21:4a:a0:f8:4a:57:25:07:cd:36:ab:
                    04:0a:54:ee:a1:64:3c:1d:da:72:bc:4d:f7:b9:6e:
                    63:f9:e3:22:4b:0a:86:75:8e:41:46:4d:42:f6:3e:
                    4c:0f:88:15:81:71:99:02:ec:91:21:65:e2:df:73:
                    1c:97:b2:0b:7e:aa:8b:60:69:9b:13:ff:59:f1:cc:
                    7e:d8:7f:42:31:57:78:9f:62:06:a5:cf:04:f1:17:
                    08:77:c6:c4:f0:35:44:cd:ef:cf:d5:47:ac:a0:db:
                    f4:5b:2d:98:03:dd:73:6a:cc:26:a2:59:37:de:81:
                    66:2f:a0:df:43:b8:32:6f:cc:a5:81:c6:80:4d:7a:
                    2b:c1:47:ed:cf:df:6b:de:60:a7:e6:72:da:da:ca:
                    a8:13:6b:11:f3:67:d1:c4:4b:14:20:eb:7c:09:e0:
                    cf:61:78:5d:d7:9a:dc:de:20:10:be:d0:8c:2b:24:
                    d8:8d:a9:2c:94:c1:03:56:2e:f4:e4:7c:f7:32:57:
                    7f:c2:64:6d:44:3e:25:9d:8d:6b:92:8f:51:aa:90:
                    06:4d:5c:cf:3b:bb:7b:99:e4:42:17:55:60:ff:f0:
                    ea:4a:a1:9e:c4:c6:76:87:b2:7b:36:7b:c6:83:cc:
                    ee:7d:e2:d3:55:b5:bf:4c:f2:f0:83:b4:47:58:e7:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:10:D6:89:68:1E:F8:41:F5:46:EE:96:40:75:C0:92:AC:3D:56
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:11:de:58:13:9d:40:0c:11:91:8b:9f:91:f8:00:d2:ff:be:
         3e:17:d9:6b:30:32:52:71:22:de:7d:b1:19:7e:fc:5f:e1:f3:
         92:1a:76:83:72:b3:40:cc:3a:a1:61:26:b6:b2:d7:bf:7e:e7:
         0e:05:e3:a0:1a:a0:7b:3a:3e:ec:64:2e:97:2c:f4:79:d0:ee:
         0a:96:66:57:fa:fe:1c:cd:a0:bd:3a:78:d4:8a:2e:81:4c:62:
         d4:90:78:19:0a:17:d8:18:0f:8b:33:93:08:99:ca:8a:13:49:
         fc:16:5e:ad:c8:b2:b4:93:d3:f9:f6:5f:64:5f:34:64:8e:51:
         dd:d0:e2:a0:d8:d5:5b:9e:53:67:79:1c:bd:d8:16:d5:a0:66:
         44:b5:d6:ac:d4:7e:9c:80:33:5e:30:c8:73:9e:b9:c9:0f:3e:
         3d:88:48:23:89:c3:ce:83:be:16:31:79:cb:c9:fe:f5:94:a7:
         db:0a:0c:67:4b:e0:2f:4f:d6:94:bf:87:3d:b4:9b:31:19:4c:
         82:63:04:9a:d7:20:ec:84:32:23:b8:97:71:b3:d1:62:cd:ac:
         5a:54:8d:3b:cb:bc:e8:c5:55:9f:36:c9:50:c8:8f:ab:e2:5c:
         55:b1:32:7d:49:b3:93:28:e1:4e:50:e4:3e:84:d4:02:b1:89:
         bc:74:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:02 2024 by rpki-client on console-ams.rpki-client.org