Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File:                     VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier:          ksHwOTOSw7bpDGj9UiySGY2Ye6+zxZjR4SIP2WWk+aM=
Subject key identifier:   13:45:E5:3A:A1:37:BA:72:36:21:5C:62:B1:68:4A:CD:3A:7B:31:C0
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer:       /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial:       018F87ED896CA80A0923A037BAF14D1FA576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number:          0499
Signing time:             Fri 17 May 2024 19:00:42 +0000
Manifest this update:     Fri 17 May 2024 19:00:42 +0000
Manifest next update:     Sat 18 May 2024 19:00:42 +0000
Files and hashes:         1: 8QnX23Z3yjD9sXUlb-E9NU7UmxU.roa (hash: 2YdSH9JL55Ekn5S4m/uetxwS0326rArVHani1LjSFxA=)
                          2: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: zfSFaGK/O5C68dlZNypMBCOfJpxi282s2oY0d8wZi3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:89:6c:a8:0a:09:23:a0:37:ba:f1:4d:1f:a5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
        Validity
            Not Before: May 17 19:00:42 2024 GMT
            Not After : May 18 19:00:42 2024 GMT
        Subject: CN=1345e53aa137ba7236215c62b1684acd3a7b31c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:16:bc:fa:ad:a8:2f:c6:50:8f:fe:f5:c3:
                    4e:76:92:6f:ff:de:fd:a4:3d:6e:a8:4c:c3:4c:93:
                    39:e8:1b:2a:78:8c:7a:45:f0:72:b3:94:b8:a3:da:
                    1e:d9:d4:5e:27:73:8c:bd:c5:cd:1b:54:fb:0d:00:
                    12:0c:3a:ce:d2:79:02:60:7d:59:fb:31:ff:18:ba:
                    d2:65:bb:a5:92:7d:b2:54:65:18:71:be:01:89:27:
                    b4:70:37:96:92:b1:f8:7a:90:a5:b6:86:55:f0:99:
                    2a:58:14:47:8e:b6:ad:a0:c6:1b:9a:41:0f:ec:13:
                    cd:46:d3:e4:a8:41:45:f9:f2:fb:21:31:6a:28:84:
                    c4:57:62:a6:23:f3:e3:d6:f1:88:ac:4c:99:07:6b:
                    1b:2e:4a:1e:44:48:e9:a4:fe:65:ab:82:bc:38:30:
                    23:7c:22:ab:ff:d0:0c:9b:76:98:f5:cf:89:f7:8d:
                    99:a3:18:c3:c7:c5:c2:1b:49:6a:fc:06:fc:63:89:
                    bb:86:f5:8a:e3:7b:76:d1:58:a8:5b:03:5c:ff:b5:
                    58:f5:63:e5:11:67:13:fe:94:40:1e:bb:f4:c9:f8:
                    64:ae:65:64:6e:e4:6a:0c:48:54:d5:a7:63:67:51:
                    31:e2:28:eb:7e:6c:54:49:76:d2:da:e0:41:32:07:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:45:E5:3A:A1:37:BA:72:36:21:5C:62:B1:68:4A:CD:3A:7B:31:C0
            X509v3 Authority Key Identifier:
                keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ed:93:fb:e1:3a:42:70:ce:ca:0d:44:86:96:35:11:78:bd:
         ca:f9:6e:fa:13:73:75:eb:dc:87:ef:cb:95:f0:90:d4:65:8b:
         09:38:12:33:54:ae:84:44:08:79:95:c3:8a:87:63:8a:4f:09:
         1e:7d:82:89:ac:ee:8c:2b:d5:83:5a:b2:61:32:8f:e5:97:81:
         2d:ff:1d:c9:a7:ef:4e:3b:a5:4a:6c:29:de:0c:7a:77:05:2b:
         b3:c4:3c:d3:14:2b:f8:0f:bd:ce:4a:a4:ad:66:51:e2:a2:fe:
         0b:af:d4:73:2e:f0:f1:b5:55:55:e8:45:f9:e9:3b:07:9f:c3:
         4f:25:3d:db:14:44:aa:bc:0d:05:d7:d8:13:c6:06:52:9f:2d:
         cc:bf:06:6f:0d:e0:48:44:ba:f2:59:4a:c9:9b:cc:f1:2d:33:
         16:c8:73:ea:57:41:6b:a2:0d:da:89:92:62:3b:46:51:42:67:
         73:9e:fa:4a:03:a8:c5:90:42:eb:7e:ac:0c:89:2a:38:fa:a0:
         8b:89:d5:e7:b8:ce:2c:76:1e:b2:13:5b:1f:c4:c2:ae:04:c1:
         25:32:32:32:da:04:1c:89:19:08:ef:2a:12:4e:ba:bf:f9:af:
         58:b2:78:b8:fd:90:8f:45:68:72:06:7e:dc:a0:ef:0b:23:47:
         a1:e8:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:23 2024 by rpki-client on console-ams.rpki-client.org