Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File:                     zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier:          d5LUBPBurPfNC79OjE13fsnPZejhRTFl6G9F07Qm5rU=
Subject key identifier:   BD:93:E4:42:EE:15:9F:68:A1:2A:9B:16:FE:CE:3F:50:15:1A:A1:C1
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer:       /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial:       018F8936CA714AAB08BCBD56F4BEF6B4ECD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number:          0EB6
Signing time:             Sat 18 May 2024 01:00:20 +0000
Manifest this update:     Sat 18 May 2024 01:00:20 +0000
Manifest next update:     Sun 19 May 2024 01:00:20 +0000
Files and hashes:         1: Rapv8oCkiDRtH_h9Ss1tfbRjUvg.roa (hash: IzBQld8JMnGyI4rxxzrE34KAbJeFjebN0f3ZJWV0VDM=)
                          2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: +a/XbYzu8XsfjW0iHGYi7ZDmU6+RtnfJdkWeSoHtGok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:ca:71:4a:ab:08:bc:bd:56:f4:be:f6:b4:ec:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
        Validity
            Not Before: May 18 01:00:20 2024 GMT
            Not After : May 19 01:00:20 2024 GMT
        Subject: CN=bd93e442ee159f68a12a9b16fece3f50151aa1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:59:3e:e4:42:b5:18:64:f5:a4:7d:a7:bc:a0:
                    92:60:72:b9:39:d8:e9:93:0b:68:95:d0:b0:33:bd:
                    85:1f:03:7c:f8:00:b0:7d:dd:0d:d1:a2:4c:f4:d8:
                    bd:66:67:27:61:7f:ff:bc:d4:80:15:66:9f:2c:30:
                    dc:1c:2b:60:9a:04:11:a1:cd:68:2a:c0:8d:61:1c:
                    5c:01:41:a3:7d:a1:91:8b:eb:04:be:7d:62:68:8d:
                    54:21:89:ab:6b:76:f1:64:5d:bf:7d:5f:8c:2a:68:
                    02:8b:0e:96:2a:22:90:b7:cd:7f:6b:88:9e:cf:e3:
                    be:42:2e:d5:0c:fc:7b:ad:91:8e:e9:86:04:89:8a:
                    e8:b4:66:45:21:01:fb:4f:50:f7:61:9f:55:e5:cf:
                    ff:60:29:3d:df:0c:37:3f:5f:69:1a:5f:12:6d:8f:
                    ab:8f:0d:96:8a:7c:40:4d:d8:7e:6c:d1:63:5f:06:
                    d0:44:50:0d:99:39:ac:d0:55:df:68:8b:aa:4e:c5:
                    23:21:92:8e:29:a9:08:60:ff:77:06:60:96:7d:80:
                    9e:23:67:9d:62:63:03:7a:8d:d6:1b:27:90:cd:db:
                    87:37:57:20:62:9f:ed:71:b0:2e:6a:99:be:ed:bd:
                    50:1b:02:15:26:13:6b:f5:5d:d3:61:1c:89:29:bd:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:93:E4:42:EE:15:9F:68:A1:2A:9B:16:FE:CE:3F:50:15:1A:A1:C1
            X509v3 Authority Key Identifier:
                keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:29:1a:50:75:02:6b:23:a3:08:d0:5b:16:45:19:c3:7b:
         c2:b3:0f:26:46:4a:5a:df:ee:c3:6c:cb:7c:44:90:60:44:d4:
         91:d8:0a:a2:dd:ba:01:9c:34:0f:07:61:a7:44:75:c5:3f:e0:
         76:7d:39:2f:c9:ea:d4:55:5a:ec:00:5d:2c:d2:64:a6:75:08:
         56:fe:31:e1:07:f0:94:9f:56:be:e2:a9:95:83:46:e8:26:67:
         08:e1:9b:e0:f9:94:a3:e3:54:2f:a5:5e:7b:ad:eb:b5:f6:cf:
         d4:6f:ae:b2:fa:d1:8c:8b:7c:cf:93:75:23:38:61:f7:ec:53:
         82:15:2a:94:be:ee:57:d9:c6:31:c0:36:0e:ad:7e:4e:fd:cc:
         9f:80:7f:0c:c8:d6:51:46:8b:2e:20:ae:95:86:fa:c5:c0:2b:
         eb:06:1f:7c:c6:ee:eb:41:2e:30:07:d4:42:02:66:7a:89:08:
         a2:c9:ef:af:56:2a:ee:e6:7c:57:15:08:15:33:df:2f:f6:80:
         bf:ba:70:78:12:25:1f:77:60:44:17:d2:ca:05:8d:2b:a7:b5:
         bd:91:e6:1f:44:a4:12:4a:86:a9:fe:83:8a:36:38:6e:49:50:
         71:fd:29:65:5d:d4:d2:6c:53:e7:56:7d:10:5f:69:c3:f7:8d:
         93:f8:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:12:09 2024 by rpki-client on console-fra.rpki-client.org