Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
File:                     VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft (raw, json)
Hash identifier:          269o5IMkRpnv9rfOFcuRUUKFP1YX/RDtjPZOlA52tUc=
Subject key identifier:   08:30:63:80:AA:08:BB:83:D1:FF:F4:C6:80:08:E4:80:53:5C:3A:93
Authority key identifier: 54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
Certificate issuer:       /CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Certificate serial:       018F87B6B2C8546F36304E4B83FAA73A15A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
Manifest number:          07C9
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: G5jFnlnUM6inR1GQTviGdGRZu5I.roa (hash: S1g1TNYQIVrKWsAaNQmqNrlAkV3hLvfw7WTTCwzfyds=)
                          2: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl (hash: ZVLmXUXfHMQIB0/HIJGJNnpHJY3r9ZQXURlDhWChnUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b2:c8:54:6f:36:30:4e:4b:83:fa:a7:3a:15:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=08306380aa08bb83d1fff4c68008e480535c3a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:8a:c2:84:ef:27:85:40:7e:83:71:15:4b:
                    7e:36:1c:9d:a4:aa:47:16:1b:ab:ff:b3:01:c8:06:
                    03:85:45:b2:4d:40:ef:82:92:d0:35:e4:b3:66:65:
                    a0:84:02:9a:e6:04:ee:68:b6:a3:8d:b2:b3:4d:11:
                    f1:13:ce:d0:bd:92:cc:90:b2:76:94:11:6e:aa:d1:
                    aa:61:3a:a3:ff:8e:a6:08:c8:86:bb:be:07:3a:4f:
                    e0:36:88:e4:b9:e2:0b:98:10:83:e3:60:5b:f4:97:
                    0b:7c:f9:a1:79:71:d6:8f:c9:49:d8:6c:86:b1:7f:
                    58:e3:87:bd:f6:f9:a3:6c:05:e8:3c:01:5f:64:07:
                    40:a3:26:17:14:28:88:b2:c2:b5:3c:52:37:f6:9b:
                    5c:99:ca:cf:ad:ce:82:53:10:79:84:13:8f:46:94:
                    dc:53:4e:96:76:2c:f7:02:88:c0:ac:7d:16:43:da:
                    e6:ec:c9:c6:2b:84:3e:a7:e7:65:cf:3e:d5:7a:69:
                    4d:20:9b:39:9d:c5:6b:2e:c8:29:21:9b:0d:62:dc:
                    94:1e:10:5e:6c:f6:6c:7f:e3:bb:01:24:e9:3d:b3:
                    f3:b1:8f:15:36:6c:d9:03:a1:13:93:8a:59:77:1e:
                    26:e8:67:57:f2:a4:20:19:79:23:db:cf:27:06:88:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:63:80:AA:08:BB:83:D1:FF:F4:C6:80:08:E4:80:53:5C:3A:93
            X509v3 Authority Key Identifier:
                keyid:54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2e:9d:45:47:bb:85:82:ec:74:4f:dc:f3:fc:ea:14:2f:d7:
         dd:ea:1a:69:fd:e5:10:f0:bf:b4:c0:28:65:bc:3a:65:18:d7:
         1c:8c:a5:e6:e8:9f:59:af:2d:4c:bd:51:bd:f8:d3:db:1f:a4:
         59:43:b0:af:ee:01:50:00:d0:e3:ce:23:2a:15:63:66:8e:65:
         47:6d:b4:a9:6d:e9:01:1e:de:79:b0:40:9c:31:d9:b5:83:0e:
         9d:c9:15:80:5c:1a:99:1a:61:59:10:29:fe:93:6b:60:fc:ac:
         25:bc:01:84:1e:34:20:2f:ba:75:93:4f:b3:14:f5:f3:ab:78:
         7c:0f:53:62:71:09:6d:17:7c:a5:c5:b7:b1:2b:b8:bb:f0:a0:
         b6:5f:e8:26:64:66:78:e4:62:6a:88:56:cd:11:be:a8:e5:0c:
         24:fb:ce:ca:ec:2d:ac:b7:f8:bb:6c:9b:e0:17:86:0d:90:12:
         55:49:d3:6a:0a:ce:39:43:b2:a4:a9:59:32:2a:b2:69:00:d1:
         42:1d:35:6d:d1:dc:e3:0c:3c:ad:49:ac:f3:85:64:ca:02:42:
         42:58:48:39:e2:6f:45:70:f4:1a:1a:4c:f1:fa:a6:cd:9c:7f:
         2d:2b:a1:c8:e1:f7:26:73:13:9e:c5:82:61:0a:5a:b0:ec:20:
         ae:53:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:29 2024 by rpki-client on console-fra.rpki-client.org