Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File:                     VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier:          VgD1A3W7jqVvpWwU/UUreg+pMJCv2VI1gHWiDpDXwwQ=
Subject key identifier:   C9:54:01:C7:E6:48:57:A2:61:30:18:95:7B:28:57:48:44:45:2F:86
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer:       /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial:       018F8892492B8D77C9D8472ECC28AAD31CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number:          0D10
Signing time:             Fri 17 May 2024 22:00:39 +0000
Manifest this update:     Fri 17 May 2024 22:00:39 +0000
Manifest next update:     Sat 18 May 2024 22:00:39 +0000
Files and hashes:         1: IvYXc131S8LdM_A-fTjGGzCriQk.roa (hash: mW9gX/ftRRt8QmaVyVnz/BzZyNFj2upVlrYuos3a43w=)
                          2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: +Yko1NGkLGMBwmUr50VxdZ5lFbF2kOtpbQcoolkTnLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:49:2b:8d:77:c9:d8:47:2e:cc:28:aa:d3:1c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
        Validity
            Not Before: May 17 22:00:39 2024 GMT
            Not After : May 18 22:00:39 2024 GMT
        Subject: CN=c95401c7e64857a2613018957b28574844452f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:91:c6:73:7b:8d:c1:83:b3:9a:29:b7:bf:
                    ad:32:7c:46:c6:3f:64:b1:f0:12:61:d4:23:ad:44:
                    93:87:be:21:47:c4:2d:76:70:e9:c6:17:d0:14:71:
                    de:82:96:ec:47:ba:a1:1c:61:ad:fe:28:fd:f0:27:
                    c4:b7:ab:e4:d6:61:e0:4d:2e:5f:ff:b8:c9:5f:bf:
                    0b:13:89:f9:43:12:c7:57:86:c6:6c:12:3d:bd:ba:
                    cd:ee:90:d2:a5:a3:99:58:ae:3a:dd:c1:a6:3e:8d:
                    e8:d6:ea:09:09:f0:00:e6:85:73:e0:36:e5:48:1b:
                    20:34:f8:0b:3b:c8:b7:78:7e:42:d5:bc:b3:a7:73:
                    e6:ca:ef:f2:45:0b:76:14:79:c4:61:6f:e1:67:af:
                    99:a2:23:b4:20:73:45:93:54:0a:40:0a:39:4d:21:
                    8a:96:91:e6:88:86:4a:8f:49:72:21:c3:e7:44:b8:
                    c0:fa:2b:63:af:87:69:e6:0a:35:4c:b4:d7:30:14:
                    10:47:6b:83:f7:b4:0e:c1:19:78:41:51:85:1c:6c:
                    e8:57:9e:f1:28:c3:21:3c:36:b8:91:58:77:0c:30:
                    f5:ae:ff:17:9f:10:dd:c0:20:4f:b1:5e:c2:24:2e:
                    2f:2a:c7:a6:98:d7:c1:a6:66:4e:ba:cc:b9:e3:e8:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:01:C7:E6:48:57:A2:61:30:18:95:7B:28:57:48:44:45:2F:86
            X509v3 Authority Key Identifier:
                keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:2a:b5:b0:0b:1c:c7:ff:bd:1b:29:9c:66:50:ac:32:e0:
         56:88:5c:66:a3:60:04:b1:0c:db:1c:ad:29:d7:a5:cc:62:7b:
         9e:a2:31:d6:96:bf:7d:98:7e:b0:a0:0e:1e:43:af:69:4a:33:
         7c:a3:b6:58:b5:e8:89:a1:24:16:09:8e:93:b0:b4:f0:e7:1f:
         bc:df:ed:91:28:7f:11:52:06:de:76:6c:58:7e:ab:1b:5c:09:
         36:af:63:64:e8:c6:5d:fe:ad:8b:5e:09:1a:90:c4:1f:7f:25:
         47:90:1e:27:0c:7a:06:2d:f2:54:e1:e8:9f:56:73:82:7e:e2:
         bc:9d:eb:ae:f6:11:3b:d4:1e:77:0f:b1:e4:68:43:3f:a4:d0:
         1d:6e:27:2a:e6:d9:aa:53:9d:18:d6:00:5b:fb:c8:51:57:d5:
         d5:0b:a7:2b:16:c0:af:81:07:9a:72:41:f1:51:4e:cb:68:9b:
         c6:fd:ce:7e:4f:bd:ff:2c:51:e1:71:cd:5b:37:7e:cd:2d:24:
         2a:04:5e:b4:68:72:ba:a4:77:f7:2e:77:bc:06:a3:d3:c2:6b:
         b8:0f:ec:ef:6d:6b:b5:cf:cb:5c:e1:9b:b1:18:1e:04:6b:ee:
         43:86:05:ba:c0:62:2f:8a:3a:0f:4e:9d:58:cc:49:6c:71:5a:
         70:31:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:17 2024 by rpki-client on console-ams.rpki-client.org