Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File:                     vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier:          c5lfA5jY8Ibf25Q9zmnpROuxgrOhHXSTTruHpNVefqA=
Subject key identifier:   A1:1B:44:47:31:AC:A7:C7:9B:51:90:53:78:35:35:ED:31:0B:4D:43
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer:       /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial:       018F874A99DDA9BAE9594199BC3B6AE6C051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number:          1060
Signing time:             Fri 17 May 2024 16:02:44 +0000
Manifest this update:     Fri 17 May 2024 16:02:44 +0000
Manifest next update:     Sat 18 May 2024 16:02:44 +0000
Files and hashes:         1: AvQ3fVhhSgRu5eu6g4bS2x1Th9o.roa (hash: n5d+pZExmF2NQAcGQjIC3iBdHS3ew9v4U4sSQaA6P+8=)
                          2: DstLdgmW5tfXcu5YxwTRbQ_V3PI.roa (hash: z8ry+xRejc9rJEzjzhkD7cIFVnNQWlDCJlarhvZwr7k=)
                          3: GFN4Vk47KH0Dk0eYXjxZXi5H1YI.roa (hash: pJjriLE25TbVKVdHN0ETqLWX+iU870OVO8ftJoahku0=)
                          4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: wN/N81D7G5219hTTVWjRGAbcfw7YzsIbSKu0rVCYnPc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:99:dd:a9:ba:e9:59:41:99:bc:3b:6a:e6:c0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
        Validity
            Not Before: May 17 16:02:44 2024 GMT
            Not After : May 18 16:02:44 2024 GMT
        Subject: CN=a11b444731aca7c79b519053783535ed310b4d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:99:41:a4:9e:30:f1:3f:5d:ec:84:7d:3d:
                    c0:4d:9b:a1:cd:70:a9:7b:12:38:58:b1:2b:17:32:
                    57:21:88:db:51:11:23:9f:c1:72:e3:63:13:47:7c:
                    b0:3a:39:a6:50:e4:b2:9f:bf:76:c0:de:51:1f:d5:
                    01:7c:ea:31:68:e8:85:79:73:da:91:e1:dc:b1:07:
                    8c:0e:67:b3:8a:6d:60:e8:25:80:f3:fb:9b:65:32:
                    25:57:cd:29:62:53:93:55:1e:9b:0f:29:52:6b:31:
                    7c:ab:8b:52:8d:82:f2:b2:1c:c0:e5:35:e8:fa:44:
                    7e:61:ae:ce:77:2c:ee:ed:6e:96:80:d4:a8:60:5e:
                    0f:33:33:e2:cc:f9:d6:5c:c5:6e:a7:69:d4:9c:3b:
                    e8:be:7f:29:30:c1:bd:ef:7d:f8:69:b7:d4:a4:78:
                    f9:a7:3e:a1:44:40:ad:e1:a5:ba:9b:8a:78:a0:c2:
                    a9:d7:38:4b:85:7c:37:81:8f:53:98:8b:60:55:0b:
                    3e:ca:42:43:bd:ea:73:f3:51:e2:1f:09:b2:45:68:
                    30:80:e4:cd:0a:55:4f:75:6a:81:f8:30:fa:f2:50:
                    b5:bb:92:21:43:2c:b8:0d:a1:18:2d:1e:d6:d3:d3:
                    14:76:7f:25:99:9d:ec:13:04:45:31:e4:71:83:21:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1B:44:47:31:AC:A7:C7:9B:51:90:53:78:35:35:ED:31:0B:4D:43
            X509v3 Authority Key Identifier:
                keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:41:3c:a2:14:89:50:9b:c2:6e:a4:b2:5d:85:a0:50:a1:8d:
         aa:b3:1c:22:6c:52:bd:4a:56:78:da:bb:af:a3:9c:af:95:8e:
         e2:d1:d4:34:6c:e0:bd:34:cb:a4:81:31:20:ce:31:c4:3a:67:
         39:12:16:07:bb:16:ce:f0:ca:ff:d8:a1:76:10:f1:ac:04:ef:
         43:52:de:46:46:9b:3a:de:42:78:33:88:25:9a:09:fd:42:50:
         d2:c6:fb:92:e8:77:dd:b3:f4:b0:1c:61:e9:b2:76:9c:03:03:
         48:24:1d:3e:ae:c6:39:98:44:b1:ce:19:bf:70:4a:62:fb:c1:
         ef:06:33:80:5a:37:e4:1e:47:3e:bc:19:48:d7:15:26:f1:e5:
         cf:e6:e1:e8:f1:ea:4d:4f:8b:d8:68:88:f7:b9:0d:be:29:0b:
         d3:38:1d:cd:af:ed:93:1b:aa:93:05:c6:f5:a2:93:e3:84:37:
         a3:ca:16:31:14:6f:11:0b:67:7b:06:b6:98:2c:60:2a:52:14:
         76:b8:fe:d5:d4:04:62:a4:b6:33:84:43:3b:3f:f1:b2:ba:28:
         24:a1:be:f9:ec:39:14:a9:b9:87:52:1d:f9:e0:dc:62:8e:54:
         db:08:4e:de:1b:4f:3f:6f:2f:56:c6:c6:fe:0c:f6:06:b5:fc:
         b1:1c:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:27 2024 by rpki-client on console-fra.rpki-client.org