Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          pjtRMebzWvLjdANhdL4cuIMd/9Iu4G8CdSTQPPzpKO4=
Subject key identifier:   1E:70:57:C2:7A:45:20:7B:60:4C:64:26:DC:97:21:68:F2:82:75:F8
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       018F874A93C770E20398BE63D0C61E11EE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          0C5D
Signing time:             Fri 17 May 2024 16:02:42 +0000
Manifest this update:     Fri 17 May 2024 16:02:42 +0000
Manifest next update:     Sat 18 May 2024 16:02:42 +0000
Files and hashes:         1: NLW01DZVFyztsd7cwNdeP8d6ct0.roa (hash: j/R2Lr63WXHx+MUqbKy/50ME+RSpa71cOXWo0ULL9Lk=)
                          2: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: 75j7qhyno1TNq/IWZSAC7XgF/8J82rgOKjJwHJHSlW8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:93:c7:70:e2:03:98:be:63:d0:c6:1e:11:ee:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: May 17 16:02:42 2024 GMT
            Not After : May 18 16:02:42 2024 GMT
        Subject: CN=1e7057c27a45207b604c6426dc972168f28275f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:4b:14:9f:7a:88:44:cb:e9:83:93:ca:4c:
                    bd:e1:08:90:be:4b:7a:84:4b:5f:5d:6d:5e:48:12:
                    8c:be:02:59:11:a0:cf:a9:19:38:6e:13:53:f7:77:
                    b7:a7:14:8e:44:cd:a1:17:ac:ad:cd:ab:2d:5b:5c:
                    e6:98:96:82:df:93:e6:50:17:1b:46:9a:28:a3:3d:
                    59:b7:13:25:55:de:83:a8:f3:77:02:6e:95:d7:d7:
                    32:f6:86:eb:27:70:36:3b:25:d3:7a:78:23:34:6e:
                    24:eb:27:e8:32:02:9f:1d:09:00:df:94:05:4d:54:
                    bd:6d:14:c3:4f:44:7d:12:bc:99:bf:f3:3a:de:e3:
                    c2:76:08:99:ab:96:af:7f:ff:74:73:06:b5:ad:e5:
                    d2:b1:84:c3:5b:91:eb:97:5f:5f:71:13:73:3b:63:
                    d2:1e:38:43:b5:d9:02:b5:7b:1e:bf:b0:5a:ab:82:
                    24:2e:38:90:62:03:86:18:75:14:5c:02:bc:e2:38:
                    9e:81:36:da:b1:34:47:a0:17:da:04:59:c9:e2:29:
                    9d:db:09:cf:ec:96:3a:94:a9:1c:5c:3c:a9:54:60:
                    0a:22:d1:8d:09:ca:f0:ff:20:39:bf:3b:5f:14:ca:
                    7c:41:89:d8:5d:9e:38:9b:b3:2b:8a:6f:9c:6c:24:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:57:C2:7A:45:20:7B:60:4C:64:26:DC:97:21:68:F2:82:75:F8
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:eb:8c:dd:eb:41:bb:c6:02:91:88:1e:5d:73:66:ba:6c:
         92:56:b8:07:5c:1e:41:77:49:d9:17:63:5c:7b:b4:48:68:3e:
         23:1c:cd:0a:cb:e8:b3:09:1a:fc:7b:ff:cb:5c:36:19:57:54:
         24:bb:90:c1:00:95:cc:29:f7:dc:96:7c:ae:0d:68:86:16:94:
         c2:93:b3:a0:96:d2:23:92:17:72:48:9f:7a:7c:9f:9b:a1:0e:
         78:c9:4f:6d:9c:24:0e:d3:22:27:0d:56:d2:20:d5:f9:a7:3f:
         28:5b:b2:46:71:02:57:ad:e7:77:bb:2d:b3:fb:01:f3:b7:b9:
         e7:0e:40:d7:0e:87:99:ff:e5:08:fb:6e:64:42:68:3a:e2:75:
         f1:68:8a:89:6e:04:bf:63:db:a2:a9:dd:ce:df:77:a5:a7:d0:
         f8:88:79:4e:65:99:1c:a3:f3:53:d1:9a:64:21:fa:d1:56:3f:
         9a:13:27:b3:d7:8d:08:a6:3f:79:08:c1:4c:5d:53:e7:11:6e:
         22:66:3d:25:4a:50:fa:01:b2:7f:76:78:87:3b:46:2d:f1:de:
         23:2d:ba:4b:56:94:76:1c:ff:1d:8c:63:77:b2:2c:9f:a7:f9:
         6c:ca:42:7f:ad:17:df:53:99:d9:58:84:9f:4f:a4:13:e4:e7:
         db:67:bc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:13 2024 by rpki-client on console-ams.rpki-client.org