Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          K17Vcsqd8J8A/X0v75HQ0J8q6y3HxuhOC0HZPcBbbpI=
Subject key identifier:   E7:DD:52:A1:14:62:07:4C:C0:2F:87:A3:D6:83:E4:FE:C1:A9:A8:12
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       018F8749479B011BBA085ADDBD9606F9DE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:17 +0000
Manifest this update:     Fri 17 May 2024 16:01:17 +0000
Manifest next update:     Sat 18 May 2024 16:01:17 +0000
Files and hashes:         1: GGssooi9Ii2hrSc7Y5EvjogIVCQ.roa (hash: 6pV6cePq41nXfmp2/YH08aPZ9ednuSh2cF2+k6Ucx5w=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: Oa2I8UszNhfjLNH0o7MEbFGpDGl7Blpw2fpSZpAWUHU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:47:9b:01:1b:ba:08:5a:dd:bd:96:06:f9:de:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: May 17 16:01:17 2024 GMT
            Not After : May 18 16:01:17 2024 GMT
        Subject: CN=e7dd52a11462074cc02f87a3d683e4fec1a9a812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:8c:d5:75:92:33:d0:7c:30:f6:1b:10:4c:
                    eb:51:11:96:73:d8:20:56:52:f2:fe:0e:5a:c1:f0:
                    3a:cb:09:a5:02:b7:e3:f8:a5:92:26:43:2e:96:34:
                    7b:00:9a:1a:c9:6e:e9:49:26:aa:2b:2f:48:a5:bd:
                    6c:9e:41:60:25:67:0f:49:69:03:a3:96:da:69:4a:
                    5f:4b:de:df:eb:fa:b5:24:da:c3:01:df:79:63:ad:
                    7e:dd:ce:2f:47:08:90:df:12:11:bd:3d:3e:73:e4:
                    2b:6b:ae:df:9d:ab:2c:32:d7:65:a6:ed:23:57:9e:
                    7d:c6:0f:f9:6c:ec:2c:5a:77:a6:b9:75:b8:f6:4d:
                    f5:85:ae:91:05:54:59:00:48:d2:1a:28:09:a4:35:
                    8f:08:15:b6:b2:54:23:05:ad:a4:c3:b8:04:d4:a7:
                    9d:c2:e8:7f:9b:89:61:77:45:e2:41:d0:b0:b6:f2:
                    13:bd:99:bd:ab:5d:fb:e6:3b:55:41:17:e0:9b:06:
                    48:e4:8f:bd:2e:4b:e7:a4:a8:00:1e:12:7e:70:9c:
                    82:e1:b2:4b:81:c9:f9:02:f9:ac:60:08:2a:c1:c0:
                    e4:e7:3c:f8:b7:57:8f:3b:55:87:35:ae:f8:97:ce:
                    a0:04:cb:e3:8c:e4:a5:2a:37:dd:75:ad:2d:27:cf:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DD:52:A1:14:62:07:4C:C0:2F:87:A3:D6:83:E4:FE:C1:A9:A8:12
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ce:b6:22:50:19:ee:3f:84:3c:bb:dd:b2:22:b0:f2:c2:16:
         a0:c8:0b:49:d1:a2:d3:47:29:10:b2:4b:16:b6:b0:2a:1c:20:
         5d:49:8a:1c:e7:cc:a5:18:88:ad:eb:40:43:0a:cb:4a:a9:ce:
         6e:ed:28:b2:3b:1d:87:57:e6:d5:e8:e0:6b:fc:bc:6c:df:d5:
         b3:8b:51:6a:b2:e7:d4:09:c9:69:95:f8:db:52:8f:c7:44:7f:
         58:60:8a:90:1a:48:7f:8f:e9:9e:d6:8a:95:32:35:08:29:c8:
         2a:f9:0f:e6:d4:7d:cd:bc:64:d1:93:90:f6:77:91:32:8c:d7:
         0c:d2:ba:28:af:ca:6f:71:7a:a0:17:fe:a0:8c:f8:0c:ab:6b:
         5c:e6:ed:ff:e8:77:06:c2:cb:b8:5a:f1:dc:2f:6c:f2:70:7d:
         1e:e2:b4:e0:18:00:2e:02:a5:7f:29:c9:10:3b:39:d8:ac:d0:
         68:98:2f:4b:42:2b:b1:b7:75:6e:bb:32:3e:02:20:25:ea:a2:
         9e:07:1a:de:e9:52:c6:25:f9:b4:cd:45:6b:95:e6:2f:3a:30:
         9f:42:a7:e7:81:87:f0:95:ce:00:b0:ec:6d:22:2e:f4:ae:ad:
         f8:de:00:22:8a:03:b5:5c:f9:db:e4:a5:0c:ae:3d:d8:a2:f7:
         09:9e:67:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:46 2024 by rpki-client on console-ams.rpki-client.org