Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File:                     vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier:          yLTudaHWQOt2ApQvkuCyPRyP2H3oq7B4jeGPei+T5AU=
Subject key identifier:   E5:86:28:43:6D:92:B2:52:F4:5A:44:06:C3:0B:B5:18:3B:F7:F9:D5
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer:       /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial:       018F8748E0077633C7A560A8DD71B3727777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number:          074A
Signing time:             Fri 17 May 2024 16:00:51 +0000
Manifest this update:     Fri 17 May 2024 16:00:51 +0000
Manifest next update:     Sat 18 May 2024 16:00:51 +0000
Files and hashes:         1: G93x2FNs9iUi2iZ2m7oPVTqQA8Q.roa (hash: ORZNvGGPvocaR2Oh4bQYRgl2kOSwWWWVdeZpyZL85Ww=)
                          2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: YOgpcabOHedqUN9aop0sGP+6mOODd7/5qNO0nfIl1Wo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e0:07:76:33:c7:a5:60:a8:dd:71:b3:72:77:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
        Validity
            Not Before: May 17 16:00:51 2024 GMT
            Not After : May 18 16:00:51 2024 GMT
        Subject: CN=e58628436d92b252f45a4406c30bb5183bf7f9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ba:8d:0b:88:a3:d0:58:0a:cd:f9:b9:2f:71:
                    b5:7a:e5:f1:2a:9f:4e:91:4b:4c:3b:c9:6c:0d:dc:
                    74:46:08:32:0a:44:3c:08:90:98:60:68:e1:a8:e3:
                    25:1d:df:31:77:88:f4:6a:8d:58:38:9f:3e:64:1f:
                    87:96:27:06:16:bb:3e:a9:d1:98:80:08:3f:2a:51:
                    b1:da:2e:93:8b:99:8d:c5:dd:22:68:69:ba:19:40:
                    90:43:fc:f9:6d:e4:62:4c:4b:eb:6c:4d:4d:e1:e9:
                    48:1c:cb:e1:be:62:24:16:35:eb:95:f4:06:04:d0:
                    60:99:53:8f:41:8e:ee:c4:98:9d:1a:65:96:d0:48:
                    69:a4:90:98:3a:91:c2:17:c0:c8:76:b8:f2:ab:74:
                    79:1b:c5:cc:32:01:30:55:c0:3b:9d:54:be:82:2f:
                    c9:a4:1c:49:76:2d:9f:0b:84:71:4d:43:c4:42:32:
                    fb:8d:b1:cf:17:02:c7:4e:54:33:62:4d:22:71:12:
                    ab:32:b7:ba:f9:2a:34:a5:8d:c3:d8:e2:4f:f5:62:
                    2d:5e:ac:a1:e2:f7:28:82:8b:ab:1d:94:71:51:41:
                    ef:27:fb:00:80:21:21:19:94:c1:da:f6:7a:97:9c:
                    5f:4c:04:06:3d:be:06:58:db:b5:51:21:9e:6c:ba:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:86:28:43:6D:92:B2:52:F4:5A:44:06:C3:0B:B5:18:3B:F7:F9:D5
            X509v3 Authority Key Identifier:
                keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6a:c2:4b:69:4c:79:7e:67:57:d7:1c:a6:5d:11:8a:7f:36:
         b6:f6:87:84:33:fe:cd:ee:97:e9:94:32:c2:16:ac:3f:72:41:
         ab:ed:31:18:1d:ce:0a:f3:3c:91:12:94:1e:6c:ab:43:bd:f6:
         67:d4:36:b5:96:33:02:1b:65:19:00:00:77:19:43:b8:76:bc:
         19:84:d9:11:4c:40:c8:b3:1a:96:9b:8b:41:f5:36:22:4c:47:
         0b:ea:1b:8d:b4:40:b5:53:e0:d8:da:1b:df:e4:33:e8:86:79:
         31:13:32:e6:49:3f:c5:fc:dd:ca:e2:ca:b6:4e:4b:60:06:24:
         fc:2a:28:e3:33:b4:c5:49:f9:f0:a2:1e:d0:43:da:ca:1c:3a:
         02:16:ae:8e:a8:a4:cd:b2:c2:33:5a:62:ed:b7:ab:c3:f0:fa:
         7e:e0:c8:7f:7e:bf:d3:19:5f:d8:eb:25:75:6f:7d:5b:71:d6:
         d7:8f:b7:a5:6a:4e:b4:f8:b2:52:9f:04:e9:5a:7c:9d:e4:1d:
         17:1a:6c:18:88:23:f6:66:3b:7b:cb:b3:95:ba:d1:c5:72:8d:
         00:25:80:75:04:63:2b:44:36:97:c0:9e:70:0f:00:73:0c:45:
         a2:1c:98:63:30:8a:90:25:52:14:46:d1:fe:17:f0:5b:68:09:
         dd:de:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:40 2024 by rpki-client on console-fra.rpki-client.org