Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File:                     zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier:          hKxE9l6geFk8XVBQOqLGiEpzekSw9N1jy2KhblzrCyQ=
Subject key identifier:   20:E4:FD:63:27:B1:C3:6D:48:04:25:40:50:23:3E:1E:D0:75:13:F7
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer:       /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial:       018F8749A90EA775D386A4EAA53634B86E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number:          085E
Signing time:             Fri 17 May 2024 16:01:42 +0000
Manifest this update:     Fri 17 May 2024 16:01:42 +0000
Manifest next update:     Sat 18 May 2024 16:01:42 +0000
Files and hashes:         1: nUmPjXZY7vELeJbtwNRqt_OjKpk.roa (hash: 1QexfDPxmAJDlAV9Q3JgiUiVKvHUyV8BeupQEICCEAw=)
                          2: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: 7ZH0cXoPMhO729kmsTEDBXBjsRPtCStYLiPNwvk3la4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a9:0e:a7:75:d3:86:a4:ea:a5:36:34:b8:6e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
        Validity
            Not Before: May 17 16:01:42 2024 GMT
            Not After : May 18 16:01:42 2024 GMT
        Subject: CN=20e4fd6327b1c36d4804254050233e1ed07513f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:b8:f0:8e:70:c1:55:62:3e:97:ba:6d:81:
                    9a:2c:44:a4:50:94:b1:3f:fe:9b:fc:d2:a2:33:0d:
                    2d:75:7f:8f:d1:5d:d4:05:49:cf:ce:65:9b:f6:ab:
                    8b:40:02:6e:8c:bb:1e:a7:43:a1:11:3e:4a:45:4a:
                    0e:02:90:a3:8d:ef:42:48:17:07:6d:fe:0d:b0:02:
                    dd:55:8d:80:88:b5:07:6f:45:3f:bb:cf:dc:8f:a2:
                    d3:e9:0f:1e:38:c6:a8:85:3f:31:97:0f:af:ab:11:
                    a7:df:34:f4:ca:f0:02:d9:7f:87:1b:c5:47:b9:51:
                    68:4f:56:19:e3:29:3b:df:c8:5f:51:ce:d8:63:6d:
                    5f:1c:f4:96:b5:53:44:1d:52:0c:65:c3:89:4f:0e:
                    74:f9:93:46:cb:a3:45:f6:73:20:83:43:cd:b2:ad:
                    b9:bf:11:b9:0f:8e:35:2c:b7:e6:50:a0:63:59:e1:
                    f0:e2:1c:98:00:76:af:3d:39:17:92:51:cf:77:15:
                    a5:1c:c9:33:0b:6d:bb:cb:73:bd:b1:a7:ac:5c:ee:
                    55:02:eb:7e:35:61:5f:e5:4c:b4:75:d5:18:08:7f:
                    23:1b:c5:f3:0b:6c:17:ce:1c:8d:a4:5d:11:44:64:
                    cc:b4:dc:d6:97:01:86:e6:b3:b3:08:74:5c:ca:94:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E4:FD:63:27:B1:C3:6D:48:04:25:40:50:23:3E:1E:D0:75:13:F7
            X509v3 Authority Key Identifier:
                keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:84:6a:b8:1e:64:a3:b8:90:a4:86:9f:e7:bb:13:b3:66:
         c3:43:0d:fd:a2:2c:5a:0e:ed:0e:7b:33:ec:91:cf:fe:7c:35:
         88:7f:d7:05:cb:b7:c0:60:70:c6:74:a6:13:d2:b0:4a:81:fc:
         cf:a2:d2:44:32:57:c3:8f:6d:df:99:f7:e8:9a:49:15:18:08:
         9a:de:6c:85:ea:b9:74:58:ee:d8:24:ac:6e:88:0c:f2:43:a3:
         de:9f:ec:ec:fa:13:a0:3e:bf:d8:b7:6a:b5:b9:95:e6:99:ce:
         14:30:c7:45:d6:26:23:a8:df:2c:55:e6:80:1b:8f:c3:ad:fb:
         a0:de:91:5e:0f:1d:13:d5:90:ca:79:94:ce:8d:15:71:3e:73:
         95:d0:ad:ce:1d:0e:2c:65:2e:c4:13:c9:2d:07:57:2d:8f:21:
         91:1e:cb:94:af:4f:16:1a:4a:f1:b1:8a:69:43:8b:ed:40:5e:
         07:db:b0:22:40:4f:28:7e:58:73:5e:54:ac:0e:47:0a:9d:18:
         f7:6d:24:1b:76:d4:1e:f9:b2:59:57:32:05:4e:2b:42:76:6e:
         4b:91:15:56:23:b3:b1:10:3c:a7:98:46:bb:7e:12:db:9e:69:
         ed:65:1a:5a:81:e9:bd:8d:78:28:7f:44:00:5a:6e:77:24:14:
         9b:a1:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:23 2024 by rpki-client on console-ams.rpki-client.org