Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File:                     afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier:          5YJRjIcLDcR6UkIJAnVxSO9Vjry0IdJSajV/h5Q1ygA=
Subject key identifier:   6F:C8:29:0E:39:D9:57:FB:5C:FF:B9:5C:A8:AE:9F:0D:F1:C1:24:85
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer:       /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial:       018F9495F036491B0E49CA76710D08B3CD04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number:          050C
Signing time:             Mon 20 May 2024 06:00:05 +0000
Manifest this update:     Mon 20 May 2024 06:00:05 +0000
Manifest next update:     Tue 21 May 2024 06:00:05 +0000
Files and hashes:         1: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: 5f/jx0l/rA7dGdALWMFHe0mrS4QQaWMHkzQ4aWeLqcI=)
                          2: vWH70oIlCnt8vRyNDdgiKFTZzVQ.roa (hash: nMHI595NYdWq3JwMGJWblF1heQ1F5dc3hyZV2B2Wj6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:95:f0:36:49:1b:0e:49:ca:76:71:0d:08:b3:cd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
        Validity
            Not Before: May 20 06:00:05 2024 GMT
            Not After : May 21 06:00:05 2024 GMT
        Subject: CN=6fc8290e39d957fb5cffb95ca8ae9f0df1c12485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e2:f5:4a:1d:c3:f9:5b:ca:d9:b5:c8:04:7e:
                    4b:ad:a4:09:77:81:be:ec:03:ac:d1:1e:30:22:38:
                    f9:fa:78:be:ad:f7:15:1a:33:22:2c:76:db:0e:30:
                    4d:2b:b0:5b:b0:8a:e4:fd:25:82:a3:fd:8c:56:d0:
                    a5:9f:83:23:6b:c4:3f:72:06:22:f4:9a:6f:5c:86:
                    ca:f1:4b:c6:7c:58:86:2c:aa:8d:d7:22:cc:1a:7d:
                    fb:af:41:db:24:45:4d:3f:ec:79:60:14:d4:ec:90:
                    dc:8a:c8:4a:f9:83:40:19:5b:d2:12:d3:22:ce:f3:
                    8d:8e:48:a8:e7:30:3b:67:a5:3f:46:c3:5e:68:49:
                    b9:0e:df:9b:fc:2a:2e:bd:a5:f8:c1:69:53:19:64:
                    28:28:f9:95:a2:e3:83:6f:e7:10:f8:31:26:7d:f0:
                    b4:3a:5d:21:42:a9:55:c0:87:a2:a8:55:ca:f1:b1:
                    fb:d7:33:03:ad:db:a4:22:88:d4:3a:2f:98:c3:eb:
                    d5:32:e6:01:1a:b0:d5:f2:71:ce:2c:a0:c8:f6:aa:
                    14:c4:fe:2a:42:d9:7f:b9:3c:5b:eb:16:17:c3:f7:
                    89:34:c8:20:43:e9:54:34:60:bd:75:b3:1e:f9:38:
                    b8:49:50:06:8f:25:e8:eb:77:e4:99:a6:5f:e5:76:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C8:29:0E:39:D9:57:FB:5C:FF:B9:5C:A8:AE:9F:0D:F1:C1:24:85
            X509v3 Authority Key Identifier:
                keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:be:86:97:b4:ce:77:3d:e5:6d:8a:cb:17:20:08:85:a7:ff:
         a2:d4:00:2d:5a:3c:ce:1e:d9:2d:1f:58:25:9c:a0:27:96:b7:
         85:16:f2:a1:04:80:6a:6e:25:e6:d0:e3:40:16:ab:31:08:7a:
         f6:bb:97:41:3e:d9:11:9e:5b:f1:0e:ce:a4:77:35:b4:eb:d7:
         89:5d:42:c8:22:6c:b9:93:42:88:82:e9:ee:c4:69:b4:b1:9c:
         cf:5b:8d:26:e4:b9:66:22:ac:9c:27:d1:fd:bf:f6:13:6b:b6:
         74:e2:ea:39:81:f1:61:3f:c0:cb:b5:97:b3:89:19:4f:af:53:
         cd:73:87:b5:59:9d:d1:be:00:a8:d4:a1:d5:59:d0:75:33:23:
         55:6b:2a:17:32:48:d3:50:2b:a7:b5:2b:45:61:f5:08:f6:22:
         e9:d9:f4:ea:96:55:c2:d9:f6:57:66:7a:7a:dc:6a:ed:d1:be:
         96:bf:2a:3f:0c:5d:76:51:68:6f:65:24:f1:7c:e3:a4:4a:36:
         8a:83:ff:5f:76:f8:61:02:31:0e:f0:07:1f:55:94:af:46:77:
         90:87:3a:02:0a:e9:df:d5:22:c8:67:5f:f7:35:2d:e3:a2:fe:
         22:c7:fc:b4:34:6d:9a:3e:48:f0:33:7e:c6:38:53:30:5c:8b:
         40:0b:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:40:18 2024 by rpki-client on console-fra.rpki-client.org