Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/vS6sAgDeYI7JZ6rReOQA_eeIBzc.mft
File:                     vS6sAgDeYI7JZ6rReOQA_eeIBzc.mft (raw, json)
Hash identifier:          Dp1Ot+sovw0gibI6Pr1Uz6RBhzPe1GO1azyFvmbarYc=
Subject key identifier:   1F:64:C8:FA:AC:E0:11:81:30:60:1E:FC:64:72:B9:AF:53:B0:36:05
Authority key identifier: BD:2E:AC:02:00:DE:60:8E:C9:67:AA:D1:78:E4:00:FD:E7:88:07:37
Certificate issuer:       /CN=bd2eac0200de608ec967aad178e400fde7880737
Certificate serial:       018F8823F35143435B022AD3DF932D84D89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vS6sAgDeYI7JZ6rReOQA_eeIBzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/vS6sAgDeYI7JZ6rReOQA_eeIBzc.mft
Manifest number:          063E
Signing time:             Fri 17 May 2024 20:00:08 +0000
Manifest this update:     Fri 17 May 2024 20:00:08 +0000
Manifest next update:     Sat 18 May 2024 20:00:08 +0000
Files and hashes:         1: dAUitWhIjlLuOzcsBftzsgtq_Rk.roa (hash: NcX7SyH9Oh859zITs7ZhfQ2Ceg170UfAnYLHZWxQTy8=)
                          2: vS6sAgDeYI7JZ6rReOQA_eeIBzc.crl (hash: DsfXOay6XChUhpBVKW7sBUhAIAdqVb0wfVqJiCPilEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/vS6sAgDeYI7JZ6rReOQA_eeIBzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/vS6sAgDeYI7JZ6rReOQA_eeIBzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vS6sAgDeYI7JZ6rReOQA_eeIBzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f3:51:43:43:5b:02:2a:d3:df:93:2d:84:d8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd2eac0200de608ec967aad178e400fde7880737
        Validity
            Not Before: May 17 20:00:08 2024 GMT
            Not After : May 18 20:00:08 2024 GMT
        Subject: CN=1f64c8faace0118130601efc6472b9af53b03605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:1b:d2:98:4f:d1:81:b1:d3:00:00:f7:be:
                    3a:ed:c3:c5:1f:82:62:af:54:02:70:56:8c:be:d5:
                    93:96:68:c7:40:6e:30:e0:a7:bb:e0:6c:17:2e:7b:
                    13:6a:61:3b:8d:28:36:86:4c:8e:8d:3d:6f:03:84:
                    85:95:5b:ae:a6:82:d5:5e:c2:1c:ce:85:0f:4b:3c:
                    57:2b:6d:e1:08:00:8a:91:ff:1f:84:d7:01:d3:66:
                    9e:5a:ee:06:cb:59:e9:3d:ac:8b:3f:38:96:22:33:
                    bd:a0:7f:4e:20:d9:4d:ae:90:e8:bd:d5:fd:e0:33:
                    95:f9:53:78:11:31:e9:f0:ec:6c:96:42:da:75:3b:
                    81:2d:ff:23:3a:7e:c0:d1:b9:af:e3:98:88:e3:9d:
                    96:ab:40:0f:6b:c9:d7:ec:04:d8:9b:c8:7a:b0:de:
                    31:a3:23:27:b9:7c:18:60:66:fa:e6:6f:52:39:64:
                    d6:c2:bb:30:e1:14:34:c3:e6:d7:44:d7:b5:15:5b:
                    26:08:78:c3:68:06:63:92:c3:9f:0f:e4:97:2c:08:
                    4b:6c:c9:9c:ea:31:69:d0:f8:67:29:19:fd:ab:b2:
                    42:97:55:46:d9:88:fa:15:b8:01:54:50:41:ad:c6:
                    9e:f9:8a:8e:76:59:f6:68:ad:fd:5f:86:a6:fd:1c:
                    d2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:64:C8:FA:AC:E0:11:81:30:60:1E:FC:64:72:B9:AF:53:B0:36:05
            X509v3 Authority Key Identifier:
                keyid:BD:2E:AC:02:00:DE:60:8E:C9:67:AA:D1:78:E4:00:FD:E7:88:07:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vS6sAgDeYI7JZ6rReOQA_eeIBzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/vS6sAgDeYI7JZ6rReOQA_eeIBzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/vS6sAgDeYI7JZ6rReOQA_eeIBzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:20:65:f9:18:04:84:c2:d3:94:6c:1d:65:fb:57:b6:f3:48:
         78:a1:bd:3f:7c:7a:78:89:2a:08:ee:19:07:9f:1c:4a:18:e2:
         6b:4e:ef:2f:c7:15:51:46:9e:7e:28:07:10:c0:95:41:0f:dc:
         1a:3f:ba:31:ff:7b:59:54:d7:a2:34:b9:63:55:e5:58:94:ef:
         4b:41:c7:36:09:b6:4a:5b:27:cd:d2:f5:16:f5:81:3a:b5:04:
         8b:27:2d:1e:5f:e3:be:cd:a3:5c:6d:d1:07:01:09:88:53:7b:
         eb:70:53:9c:d9:49:27:64:a2:e7:bd:ca:f4:44:5f:31:d7:41:
         e8:6c:a1:88:1d:1d:14:98:60:e4:76:3e:d7:33:6c:b4:d5:3d:
         56:26:d4:dd:eb:38:8b:c7:6c:25:31:5f:63:3b:68:5d:1b:1f:
         07:5b:c5:3c:2d:66:b0:96:1d:96:48:b5:c8:af:a4:09:73:80:
         e9:dd:45:4f:9d:ac:5d:c9:97:ff:44:9b:cb:7e:af:cd:70:f4:
         b8:9a:32:4f:5a:3f:bd:41:f8:af:72:8b:6e:3d:57:ee:77:f3:
         41:00:83:ad:73:77:e4:89:1a:a6:b6:11:24:3d:9b:26:02:4c:
         c6:b2:e3:df:16:c4:cf:d8:9b:1e:38:2a:4f:fa:5a:7f:4a:e9:
         a0:85:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:33 2024 by rpki-client on console-fra.rpki-client.org