Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File:                     hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier:          Hvi8GwJ+nCE/y7NVwJdWkUaga+738VopREtQnf4XgXk=
Subject key identifier:   2E:CA:D4:8D:3E:75:1C:45:AB:29:C2:F0:CE:9E:CE:39:DF:0E:4B:9E
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer:       /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial:       018F874AFD823DCE32D3942B65946BB1D5E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number:          01DE
Signing time:             Fri 17 May 2024 16:03:09 +0000
Manifest this update:     Fri 17 May 2024 16:03:09 +0000
Manifest next update:     Sat 18 May 2024 16:03:09 +0000
Files and hashes:         1: C_-arnkefbvNOXQCjDzbJxo_gyY.roa (hash: i+/+9BUah7eTRvN/IFmxahi2UatdLVp3PN95tPUaD3o=)
                          2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: XFQs3R8sCLqfECgIVnBWvFCNQURQ8y3h9DIarA3E4gc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:fd:82:3d:ce:32:d3:94:2b:65:94:6b:b1:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
        Validity
            Not Before: May 17 16:03:09 2024 GMT
            Not After : May 18 16:03:09 2024 GMT
        Subject: CN=2ecad48d3e751c45ab29c2f0ce9ece39df0e4b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:e2:35:ea:82:c3:54:f2:20:cb:c6:26:a9:
                    16:3c:9b:28:24:39:8e:40:61:bf:a9:72:60:dd:cb:
                    b5:cc:1a:4a:53:ca:15:2f:59:46:37:ff:39:24:27:
                    12:97:4a:0a:98:5d:82:b0:c5:e8:2e:73:56:74:26:
                    95:5c:5e:9e:ab:fc:3a:66:a4:13:16:06:6c:d7:32:
                    97:63:8c:f4:0c:ab:51:41:40:e1:0e:31:74:50:a6:
                    0d:74:fe:f1:f3:8f:23:25:82:ad:d7:f2:6c:9c:a9:
                    35:9f:84:4c:47:a8:ca:17:c2:ed:ee:04:c4:e1:d0:
                    57:18:4b:c1:d7:a8:20:83:e0:37:43:73:84:c7:48:
                    18:49:42:e2:a6:3c:fa:2e:6f:74:61:9e:4a:8c:37:
                    e6:78:67:f0:04:b3:47:4c:7f:8f:1b:a1:a0:97:57:
                    42:9c:17:18:40:37:38:93:d6:29:ec:f3:b0:9a:c8:
                    53:22:32:b7:1c:68:31:f0:00:3d:63:bf:19:9b:02:
                    06:a0:fd:64:86:2e:76:33:49:2e:24:5b:ee:ce:79:
                    50:92:26:d1:00:e0:f2:c7:91:8e:0a:d8:58:8a:f7:
                    f2:a1:36:97:2f:6a:c3:f7:c9:0a:92:5a:79:a4:96:
                    60:d9:b2:a3:86:d7:38:8b:cd:73:b5:7a:8b:15:f4:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CA:D4:8D:3E:75:1C:45:AB:29:C2:F0:CE:9E:CE:39:DF:0E:4B:9E
            X509v3 Authority Key Identifier:
                keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:bf:bf:b8:22:5f:c4:c1:00:1c:9c:ba:34:2a:37:17:c0:
         56:11:10:f3:65:ab:f5:ba:bf:b6:7f:e0:83:5a:8c:c8:9f:e7:
         f7:d8:09:59:30:56:37:38:0f:f2:2d:00:f4:68:36:c5:c4:a2:
         bb:f3:bf:95:a6:19:a3:93:6b:b3:fa:4a:85:58:2a:89:2d:d8:
         0e:46:46:38:d1:dd:ca:86:e3:6c:b7:c9:0d:9b:35:82:25:7a:
         b9:6a:0b:3d:89:df:5f:40:36:d8:2d:0d:15:e6:b1:b1:c5:31:
         41:17:b8:91:9e:9e:d9:03:1b:4f:de:9b:1a:0e:5e:6a:df:91:
         ce:fe:cb:42:e1:76:df:99:96:c6:95:b7:ac:5f:c3:3b:95:26:
         3d:30:30:65:86:ad:59:b7:ed:fe:8b:51:8a:95:4e:64:9d:d2:
         8e:79:41:f7:3f:9d:a9:c5:27:54:49:40:96:79:6c:f1:f9:95:
         b3:66:e7:6d:2f:47:95:71:26:d7:45:ff:17:f5:40:59:47:3f:
         2e:22:e3:21:45:30:c8:89:43:b7:3e:ca:8d:68:30:ec:cd:48:
         88:63:cd:2e:b0:14:f5:3c:cb:c5:d6:28:5e:e3:5e:62:67:92:
         e6:e9:fd:b3:d6:bb:4a:23:49:18:cf:96:36:2a:c7:fc:01:1c:
         ac:07:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:29 2024 by rpki-client on console-ams.rpki-client.org