Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft
File:                     VSna2lwfQ2ejPLx11M6akAF4MpQ.mft (raw, json)
Hash identifier:          n0WfSUmj++QWw+ZrkaUphG4DmyD5HinLwmeuY99YBp8=
Subject key identifier:   38:D7:54:1C:85:34:B3:3C:2A:B6:57:B2:24:88:DB:93:80:3F:A7:33
Authority key identifier: 55:29:DA:DA:5C:1F:43:67:A3:3C:BC:75:D4:CE:9A:90:01:78:32:94
Certificate issuer:       /CN=5529dada5c1f4367a33cbc75d4ce9a9001783294
Certificate serial:       018F885B153F84799E909488DE00680520C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft
Manifest number:          011D
Signing time:             Fri 17 May 2024 21:00:21 +0000
Manifest this update:     Fri 17 May 2024 21:00:21 +0000
Manifest next update:     Sat 18 May 2024 21:00:21 +0000
Files and hashes:         1: ANM-v9-I63cEw8UYmAlep2Pbk70.roa (hash: U4kwAhVQkG03CjYTrLkiTa8Bs9RnjuessfCM72NjLh0=)
                          2: VSna2lwfQ2ejPLx11M6akAF4MpQ.crl (hash: YpzB0YCjcVZxem9WhMR/x7MXfY4jeGHuhpEdu9OCPcM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:15:3f:84:79:9e:90:94:88:de:00:68:05:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5529dada5c1f4367a33cbc75d4ce9a9001783294
        Validity
            Not Before: May 17 21:00:21 2024 GMT
            Not After : May 18 21:00:21 2024 GMT
        Subject: CN=38d7541c8534b33c2ab657b22488db93803fa733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:02:e1:98:9f:04:95:77:84:82:5b:71:c9:
                    36:a1:a0:9a:dc:aa:6d:d8:2b:ef:fe:b3:51:5d:d5:
                    aa:40:1b:9e:2a:64:45:b5:74:5f:78:e0:cc:4d:93:
                    6a:64:a4:5d:e1:96:20:55:71:0b:cd:8d:f6:05:e0:
                    f0:ec:5d:ce:71:f4:36:dc:37:37:ea:3b:58:76:eb:
                    a1:c3:2c:f1:07:b2:ce:17:27:c0:06:c5:75:7a:4b:
                    d7:58:9a:08:df:13:a6:bd:5d:08:b4:c6:0e:f7:18:
                    33:99:2e:54:81:d5:ca:9b:c3:4b:98:9e:9e:1b:e9:
                    28:96:f2:51:9e:99:28:b1:77:b4:5a:53:8d:32:f0:
                    8a:c8:d6:9e:f3:0c:48:76:f6:2f:83:25:74:57:ed:
                    09:dd:f9:a5:09:9a:f3:15:bb:fb:33:23:b2:53:54:
                    e6:46:62:4a:c5:35:2b:7a:95:a2:18:c4:15:ec:08:
                    96:1c:3a:33:b0:24:7e:45:b7:e6:a6:f4:77:40:d8:
                    3e:29:86:90:23:92:46:75:16:be:33:6e:a6:2b:ba:
                    cd:42:d0:ff:6b:c5:09:8d:f4:97:73:5e:70:b8:22:
                    1e:a9:16:70:80:ef:d7:9b:e2:ad:01:5d:65:a9:b1:
                    30:2f:92:8f:24:b3:64:3b:f6:35:d9:71:86:77:91:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D7:54:1C:85:34:B3:3C:2A:B6:57:B2:24:88:DB:93:80:3F:A7:33
            X509v3 Authority Key Identifier:
                keyid:55:29:DA:DA:5C:1F:43:67:A3:3C:BC:75:D4:CE:9A:90:01:78:32:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:aa:cd:5b:f1:94:b6:98:e9:40:9b:20:ff:dd:87:37:84:
         08:f2:5c:c5:85:db:c5:e4:d6:34:71:90:53:d3:1d:e9:97:66:
         54:86:f4:cc:61:9e:03:6f:23:0c:f5:ee:3a:0d:e3:f0:25:51:
         12:25:c4:64:13:d9:7c:e4:59:78:02:04:70:3b:6f:82:fe:b1:
         3d:7f:11:10:7f:3a:ab:14:3b:68:41:12:1e:2b:7c:a2:21:bd:
         a8:86:a0:a9:33:01:6b:94:a0:fa:ea:93:78:75:5e:48:bb:83:
         e1:75:b4:42:70:cb:ee:b3:d1:8a:06:21:b3:d4:10:54:ea:fc:
         1d:bb:8f:8d:a0:22:c4:3c:90:37:29:80:7e:cb:29:ac:f3:50:
         6a:ec:e7:64:79:c1:41:30:a4:46:57:48:e5:15:d3:c6:8e:08:
         69:fa:5d:53:04:8b:93:13:f7:34:3e:3f:16:45:93:05:43:46:
         b7:07:c6:7a:7f:cd:f8:da:f0:ad:ef:88:7c:0b:15:e2:01:3c:
         ad:4f:41:b6:f2:eb:cc:9e:ef:df:1c:d7:11:6f:c1:31:10:7e:
         9f:42:e8:de:14:01:a3:38:7e:8e:88:52:0e:eb:23:e1:bb:72:
         22:24:c3:24:2f:22:7c:97:17:13:c0:b0:cc:ec:2d:71:98:e0:
         3d:2b:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:08 2024 by rpki-client on console-fra.rpki-client.org