Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File:                     v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier:          pwOh0Js3u+EnLbH7AL4tzwinZhMRp+FvzE7ew9YLTEw=
Subject key identifier:   EE:70:BC:26:74:EB:DF:53:A6:E5:3F:B0:6C:EC:8D:BE:F0:69:FA:82
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer:       /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial:       018F893693E1D7BF80A54D51A33ED5023329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number:          1051
Signing time:             Sat 18 May 2024 01:00:06 +0000
Manifest this update:     Sat 18 May 2024 01:00:06 +0000
Manifest next update:     Sun 19 May 2024 01:00:06 +0000
Files and hashes:         1: gVKmbGF_GYGmI3cfQwrudCTb5AM.roa (hash: giKgNqapatZpSerF64A5k1RvAL6uIPUVnz/pzRD2j+g=)
                          2: msfAmzBbVHKVpltUtbK-fZfFpF0.roa (hash: Y4Kc9CUf5dZhU9zFcs2WzjWDU67TLdDWFbzkKRHGc0Y=)
                          3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: sAr8sNeKy7/+s1BYcfsFacEoIZrrGLsds2hOmRVmFxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:93:e1:d7:bf:80:a5:4d:51:a3:3e:d5:02:33:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
        Validity
            Not Before: May 18 01:00:06 2024 GMT
            Not After : May 19 01:00:06 2024 GMT
        Subject: CN=ee70bc2674ebdf53a6e53fb06cec8dbef069fa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:41:6f:35:f9:5a:68:5b:db:ec:98:2b:c0:
                    26:7e:54:3e:cb:89:5e:6d:6a:73:02:6d:a0:97:b7:
                    6d:ad:ae:27:e3:72:dd:23:d0:6b:68:39:64:4e:2d:
                    cd:29:11:6f:68:2d:05:55:b0:83:ec:42:b5:54:91:
                    48:d8:44:32:0b:2e:c3:31:6a:48:f4:36:d1:c4:32:
                    b1:9a:13:d9:c6:35:da:89:78:64:d3:eb:b7:f4:45:
                    b4:a1:21:4e:27:3a:87:62:0a:e3:2d:7a:7a:13:c2:
                    7c:f6:1b:d1:51:63:67:d4:a9:7e:37:a3:0e:d2:50:
                    04:95:37:3f:46:77:14:53:28:d4:07:d6:c8:34:4b:
                    8f:85:57:5e:cc:e9:05:70:31:fc:0e:ac:0d:65:54:
                    15:90:b3:5d:ba:8c:99:46:a1:44:df:55:61:8e:e0:
                    30:3b:0a:8c:8e:c0:a7:3e:1b:ba:63:e4:f4:1d:6e:
                    9f:18:a6:98:b0:06:d9:2e:19:f5:d5:18:d3:f3:af:
                    f2:b1:c8:1d:48:14:2c:75:90:7f:b5:ba:70:f3:91:
                    58:ae:c9:7b:87:f9:7f:ca:2c:db:00:9c:56:47:29:
                    ba:81:30:3f:c5:b9:2d:55:44:69:48:51:14:80:af:
                    8f:4f:8b:a9:70:90:a5:a2:f7:34:91:0e:4f:a5:50:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:70:BC:26:74:EB:DF:53:A6:E5:3F:B0:6C:EC:8D:BE:F0:69:FA:82
            X509v3 Authority Key Identifier:
                keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:af:42:fe:f2:fd:b2:5a:c4:3a:6e:be:31:41:7d:2a:1c:5b:
         47:6b:06:56:f1:2d:27:42:a2:ad:dc:74:7f:17:73:7e:fb:87:
         5c:8d:7b:22:3b:94:8c:6f:99:ec:bf:6f:93:fb:3b:79:cb:aa:
         39:63:35:dc:33:0f:7a:73:58:f0:2d:46:65:e5:11:78:74:9f:
         c7:18:18:20:90:78:ca:1c:fb:7b:99:db:f9:45:02:d3:0d:a0:
         d7:48:f9:51:65:2d:74:bd:02:ef:fc:fc:39:05:94:f0:13:fe:
         fa:77:ca:61:71:39:9c:39:28:4f:ea:0d:5c:da:b2:a5:0c:b3:
         c3:ab:fc:85:89:50:8e:66:95:0e:be:bd:e9:2d:c3:3e:00:ee:
         f8:d8:20:53:90:cb:4e:b5:91:36:a3:b4:c2:4a:4e:ef:ce:07:
         7c:2a:e9:09:18:a3:7a:0b:b3:32:e9:1d:34:a7:bb:3b:5c:71:
         82:19:54:a8:90:96:9f:96:54:01:69:40:50:64:00:6c:ef:22:
         e6:ca:b3:67:06:04:9b:95:5f:a1:c4:d9:88:56:23:75:1f:4e:
         58:16:77:e5:58:9c:26:9f:9f:0d:f6:cb:7a:c5:ca:79:c1:8a:
         5c:92:c8:66:c8:cb:9b:0a:f1:67:a6:ea:31:05:1d:2d:8b:c5:
         23:b9:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:12 2024 by rpki-client on console-ams.rpki-client.org