Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File:                     vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier:          Mi4pSqplqOcdGQ0Vs5X6cwJY84qws1EzOcyucaKMBMs=
Subject key identifier:   83:9B:E9:54:31:07:3C:4E:53:84:DB:B2:F5:95:51:04:E0:26:AF:BE
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer:       /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial:       018F87B668EC0EF7FF7E75625F356C638FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number:          0E85
Signing time:             Fri 17 May 2024 18:00:29 +0000
Manifest this update:     Fri 17 May 2024 18:00:29 +0000
Manifest next update:     Sat 18 May 2024 18:00:29 +0000
Files and hashes:         1: FZJ5t2rcr5_7B7y7_AAg3aw8UqI.roa (hash: XYDTjYMWOpVOceAmOkPRno0S0CgsNWidjh6PPigrdMQ=)
                          2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: c9nPWqf3gJqR0luzXKpljlzlrm2s709j60rZ1AJtSEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:68:ec:0e:f7:ff:7e:75:62:5f:35:6c:63:8f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
        Validity
            Not Before: May 17 18:00:29 2024 GMT
            Not After : May 18 18:00:29 2024 GMT
        Subject: CN=839be95431073c4e5384dbb2f5955104e026afbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:06:5b:ab:9f:d8:73:0f:c9:71:00:6b:49:
                    fe:b2:99:5f:35:f3:59:cd:50:9a:60:2b:bf:97:ec:
                    3d:da:87:2c:95:ef:ea:59:2e:18:99:2d:2d:9d:c1:
                    4c:0e:b3:32:cb:b9:7f:26:76:6a:99:44:8e:2a:31:
                    fd:f2:3d:12:4d:e4:90:b3:d6:8e:7c:73:00:c4:57:
                    1e:8a:40:1d:4e:fb:e7:69:4c:34:31:e8:9f:b5:df:
                    13:0b:67:9f:74:f1:4f:c4:42:f4:ba:18:f7:ab:2c:
                    c9:38:2c:e6:8f:f3:6e:0a:ae:34:2c:f8:cf:4a:5c:
                    f9:de:6d:b7:e5:07:30:dd:85:ca:11:4e:94:b4:63:
                    13:99:dd:ab:9d:50:cc:59:9e:88:d2:52:84:7d:d1:
                    5b:6b:88:ec:e3:97:1f:99:4a:0a:07:2c:27:e7:23:
                    65:50:b9:1c:6f:b2:3f:6c:00:6a:7e:bb:e8:38:c3:
                    d2:4a:77:39:53:e8:c0:b3:52:de:96:3a:34:87:ac:
                    5f:c2:af:0c:9d:e6:33:10:4f:e3:ec:47:48:73:da:
                    b7:be:52:f5:41:1f:4e:dd:c8:5a:18:e3:35:ac:2e:
                    5b:2c:e7:a0:08:85:9f:07:0e:d8:78:14:93:d5:51:
                    f5:94:34:80:85:e3:08:cd:bb:ce:d4:28:09:30:40:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9B:E9:54:31:07:3C:4E:53:84:DB:B2:F5:95:51:04:E0:26:AF:BE
            X509v3 Authority Key Identifier:
                keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:01:b9:25:27:85:4f:c0:cc:a2:82:c4:8c:70:6e:33:1c:dd:
         31:45:23:96:cd:75:fc:a1:41:ec:d2:7d:d7:99:62:a4:7b:df:
         b7:4b:72:db:5a:52:f5:62:ec:01:6f:b4:1c:a3:b4:fa:62:b8:
         ee:a9:d1:fa:93:fd:9e:66:9b:3b:c4:69:ef:04:06:aa:53:24:
         5d:13:18:a8:3e:ef:9f:ed:84:d6:3d:94:97:34:5f:ac:94:58:
         f0:8a:66:08:a2:e9:db:a2:0e:e7:f9:e7:ea:5c:df:70:0b:94:
         cf:85:ed:ec:4e:18:c8:5e:0c:3d:d6:ac:91:f5:fe:a5:a2:db:
         ba:35:51:5d:b8:9f:06:7e:36:62:ec:38:f5:93:92:0f:37:32:
         ae:49:75:55:e1:01:87:08:75:54:5f:34:18:c2:1c:6e:c2:c6:
         b4:38:4f:ba:d0:b6:1a:6d:72:03:be:58:bf:93:bd:bd:b5:91:
         79:19:dd:06:7f:4c:65:72:ee:f8:01:14:44:a4:a5:5e:6e:7c:
         83:c6:92:cd:d6:80:fc:0e:17:5e:21:e4:db:62:41:6a:fb:ec:
         ac:04:b0:20:0a:e9:ee:e8:2b:df:6a:07:4b:14:0e:0e:16:c7:
         05:99:0a:11:aa:e9:40:82:d0:31:f0:6e:ee:1e:72:8d:00:6f:
         dc:5a:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:45 2024 by rpki-client on console-ams.rpki-client.org