Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File:                     VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier:          q4yvHIh3JJB2d5GxSKTEK6GipM8kc1+WLjPzH76VVUk=
Subject key identifier:   ED:D9:57:63:87:CB:D5:85:4E:AA:6E:43:5C:02:F4:7E:71:6E:81:D2
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer:       /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial:       018F874AA408E7D49D2FCEF92BC581C26FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number:          0CAA
Signing time:             Fri 17 May 2024 16:02:46 +0000
Manifest this update:     Fri 17 May 2024 16:02:46 +0000
Manifest next update:     Sat 18 May 2024 16:02:46 +0000
Files and hashes:         1: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: YyVn1ADx6Nsc8Tz6ET9NLn21pOroq1vpDydAZAbtnuY=)
                          2: wC2OMdfhEbYfpN8DPaLcDGbxAPw.roa (hash: FOw4UeMfqVOudjA9LdPG1Jf7zb5B88w/ukM/3QV+DUE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a4:08:e7:d4:9d:2f:ce:f9:2b:c5:81:c2:6f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
        Validity
            Not Before: May 17 16:02:46 2024 GMT
            Not After : May 18 16:02:46 2024 GMT
        Subject: CN=edd9576387cbd5854eaa6e435c02f47e716e81d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:cb:97:23:56:7f:4a:c5:f5:78:28:a0:88:
                    23:5b:1e:c1:b5:bb:ca:1a:3b:63:0e:f5:d6:e9:8d:
                    81:8e:76:d8:05:1f:24:b5:bd:a6:68:f5:a6:4f:d8:
                    82:f0:ec:c4:29:ca:8a:04:94:86:8e:09:0a:4a:71:
                    c4:0a:52:44:c6:89:00:8d:f3:1b:20:7b:24:a0:2b:
                    a7:67:d8:27:e5:f4:e4:f4:3c:f6:9f:d6:4c:c5:c2:
                    b4:52:39:ba:d6:0b:12:29:a4:3d:52:4d:1a:37:8c:
                    b5:df:93:9f:ff:6c:f5:db:7a:c3:59:f9:63:8b:5a:
                    9b:b4:b4:8f:22:a1:b9:ea:ab:89:27:79:e5:33:82:
                    9c:c5:b5:aa:4d:1c:ca:43:fc:e7:22:1a:30:79:50:
                    f5:09:2c:11:8e:af:e4:5d:d7:c1:e7:b1:84:3a:aa:
                    b9:a1:b4:93:ae:4c:06:a6:5c:55:c3:74:62:29:77:
                    1e:07:7e:f5:15:83:8a:92:cd:d0:24:83:d8:05:b0:
                    11:cb:3c:c2:b9:cc:93:78:70:e3:e8:ba:e1:17:e9:
                    d3:91:de:a4:2b:a7:76:b6:70:9f:d3:03:48:9d:ee:
                    42:0e:d2:f5:ba:9e:0c:2c:4d:4e:63:e2:20:d0:6c:
                    43:62:f2:c7:f5:87:61:7f:9c:9d:2c:b8:83:09:4d:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D9:57:63:87:CB:D5:85:4E:AA:6E:43:5C:02:F4:7E:71:6E:81:D2
            X509v3 Authority Key Identifier:
                keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ba:3c:9c:5a:0d:5e:13:e6:ae:57:78:08:7c:ea:5e:e2:65:
         3c:c1:22:07:65:b2:22:e4:66:4a:b3:4f:5a:37:21:77:83:7b:
         b7:66:55:fd:9c:8d:56:0c:9b:7c:f3:63:e1:fc:77:68:7a:8b:
         7f:2d:30:27:fa:ce:72:af:e9:4d:1d:2e:38:d2:31:0f:c3:7a:
         fb:73:75:3f:b3:48:d7:d8:c2:47:39:1b:b5:41:ab:9d:51:d3:
         e8:d2:f4:6b:6e:50:12:d3:8e:a9:9f:ab:df:7d:e6:79:69:46:
         8b:95:8d:ba:ba:b1:45:13:55:b5:f8:69:73:1d:1e:89:13:31:
         21:26:36:50:b9:6f:4f:b3:79:49:51:cf:24:55:a4:c4:dc:a3:
         5e:43:77:76:50:56:37:17:70:aa:8a:fb:03:53:d6:bc:10:19:
         99:8e:5d:64:37:1d:39:0e:64:24:59:a8:fa:71:30:1f:a1:e2:
         eb:c8:46:a9:7c:c1:1d:3c:1c:09:c1:e3:52:7f:47:87:d5:3b:
         d7:d5:c4:0d:83:1c:30:ef:fe:81:92:cf:d3:80:02:30:0e:5f:
         8d:3d:8b:13:0f:1a:9c:15:81:a9:ac:91:b2:fc:d2:32:97:ec:
         5b:b8:14:d1:ec:64:d5:47:05:cf:8e:2b:13:7b:47:fb:3d:eb:
         db:42:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:39 2024 by rpki-client on console-fra.rpki-client.org