Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File:                     vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier:          8vZgX0meeGEqKCWtlgT+HPz3zdHRxmLHivAhHyPImRg=
Subject key identifier:   CD:DD:75:F7:E5:E9:8F:36:A6:59:1E:C7:11:2E:27:FB:07:DB:76:13
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer:       /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial:       018F8749EF1FEBAA5D1BF10EE57610B2A194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 16:02:00 +0000
Manifest this update:     Fri 17 May 2024 16:02:00 +0000
Manifest next update:     Sat 18 May 2024 16:02:00 +0000
Files and hashes:         1: SIu5F_B6GCwYSv12DQjcqdH3REs.roa (hash: 9oF9/SSihGo8Erl+kaljhQwsnwXiqC2Trk7FcDh57wM=)
                          2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: 2UIu1eS3lBF9WjVdNRMCxfmlKXNeKqRqsvC6ny8J1sc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ef:1f:eb:aa:5d:1b:f1:0e:e5:76:10:b2:a1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
        Validity
            Not Before: May 17 16:02:00 2024 GMT
            Not After : May 18 16:02:00 2024 GMT
        Subject: CN=cddd75f7e5e98f36a6591ec7112e27fb07db7613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:94:85:67:e9:56:e9:cd:66:30:49:73:43:
                    ba:a0:c0:c3:96:32:cb:34:64:8d:a0:24:93:79:2b:
                    53:2c:a1:3e:f9:21:6b:7c:e8:4d:fa:24:0b:33:e1:
                    78:b3:46:7d:39:71:df:e9:71:a3:25:be:45:99:52:
                    21:13:de:cf:f3:53:27:5c:e0:35:1c:cd:5a:bd:6f:
                    45:66:fb:43:c2:80:5f:40:47:b4:17:97:34:43:f2:
                    a2:35:b8:ef:01:51:b2:73:af:f2:a5:0b:3e:36:65:
                    63:db:7e:7d:8d:ce:db:68:6a:2b:3b:94:4f:b7:f9:
                    30:c1:5f:24:e9:3b:4a:9f:44:5f:93:d3:51:36:39:
                    b7:0d:41:f5:3f:84:8d:50:3e:9f:a5:35:68:90:6b:
                    c5:03:fb:11:59:74:a3:09:16:95:66:bc:89:4b:dd:
                    b6:84:96:a5:b0:b9:83:78:25:23:d7:d6:58:60:e1:
                    63:79:05:ee:16:cb:c3:d6:c5:b9:cc:ad:4e:d6:1c:
                    92:0c:d9:a8:78:f8:11:72:63:a5:5d:ba:65:f0:9d:
                    b0:2e:fb:6e:5f:df:cd:a8:01:6d:7a:ef:ed:c7:a3:
                    da:d8:a7:14:39:ae:2f:ba:ec:48:d0:af:bd:7f:13:
                    46:42:d7:2d:f3:1e:b6:61:68:f4:69:c5:e1:05:e7:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DD:75:F7:E5:E9:8F:36:A6:59:1E:C7:11:2E:27:FB:07:DB:76:13
            X509v3 Authority Key Identifier:
                keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:23:13:4c:13:8a:4c:7d:04:14:86:7b:33:1f:86:51:95:a9:
         c7:97:d1:09:9c:56:9e:76:1a:57:e4:ad:86:5d:4e:13:36:d3:
         66:31:21:e8:79:a4:dd:12:b7:1c:ff:e4:11:71:68:e2:41:12:
         65:22:f3:b4:98:6d:31:ce:63:74:98:5c:53:36:5d:24:3a:4e:
         99:92:21:d3:1c:fa:1c:87:ee:3b:f5:3f:74:71:f9:05:be:f7:
         a7:28:40:80:a6:b0:2f:be:84:12:57:38:3f:c7:8f:0f:5e:65:
         60:fa:a6:38:f6:b8:ed:42:3e:39:d3:72:3d:af:77:7c:5a:0b:
         eb:e1:7a:9a:ff:28:7d:93:e6:17:54:95:24:28:d2:ff:c9:3d:
         a5:56:05:cf:1e:a0:8a:92:98:69:e5:61:aa:7f:c4:e1:f3:52:
         b8:cb:02:ad:12:91:a7:04:69:75:9c:34:37:a7:d5:4d:8e:58:
         1f:98:72:2b:2c:7d:d4:2c:3c:c0:69:43:95:44:57:81:e1:a7:
         fe:ad:1a:1e:47:3d:8b:93:fc:b5:ba:79:28:0d:ab:29:c4:3b:
         0a:97:df:64:bc:3d:ff:4d:59:ba:52:7d:3f:af:ec:18:cd:43:
         0d:a4:e0:c5:cd:8e:9a:3a:f0:70:48:26:1e:99:63:0e:70:2e:
         b3:69:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:01 2024 by rpki-client on console-ams.rpki-client.org