Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File:                     zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier:          IgnnROTgkS6BjuTV6K2pSiWGX0Rskdi536f+1gOFrJM=
Subject key identifier:   5F:BB:3E:9F:B1:DE:FB:00:C5:FF:B7:7B:39:63:CE:0E:60:83:F6:9E
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer:       /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial:       018F87497FCE4D95670849D843ED277D8328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number:          038B
Signing time:             Fri 17 May 2024 16:01:31 +0000
Manifest this update:     Fri 17 May 2024 16:01:31 +0000
Manifest next update:     Sat 18 May 2024 16:01:31 +0000
Files and hashes:         1: hMgrGlhLILq6xHXR7JVWLOXL9SM.roa (hash: 5qbTTqaAgM7vwvJEHdjX+Vr0VXQvWbzJ8/7OC0XG4xc=)
                          2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: 3lnfZQxN/qunYylO/2rzXO/oXx8flJ+cuMIFBnYEmE0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:7f:ce:4d:95:67:08:49:d8:43:ed:27:7d:83:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
        Validity
            Not Before: May 17 16:01:31 2024 GMT
            Not After : May 18 16:01:31 2024 GMT
        Subject: CN=5fbb3e9fb1defb00c5ffb77b3963ce0e6083f69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:f2:c1:0b:e7:f9:ca:21:43:7b:43:1c:ed:
                    61:08:81:e8:cc:19:2b:4c:68:b8:d1:04:bc:f2:04:
                    22:08:7d:13:64:9e:7f:1a:94:d3:6f:44:80:87:41:
                    f4:1f:3b:57:10:f4:e8:b8:80:d8:42:bc:f4:83:09:
                    e0:13:f3:72:56:8a:62:d5:99:ae:5f:3b:e7:4b:b3:
                    6c:a0:81:ad:4b:13:cd:2b:64:d8:31:55:bb:b6:46:
                    c4:90:d7:94:5d:c5:4e:c6:78:df:66:23:68:35:cc:
                    e3:41:24:b5:fc:5d:04:d4:07:f1:c2:d1:2a:f1:49:
                    5c:12:68:79:dd:91:12:75:38:55:9d:84:5c:b5:62:
                    01:fb:40:cc:1e:ff:1d:21:1a:ef:b0:c0:24:ba:cc:
                    c2:51:9f:06:8f:8c:ea:bd:f4:2e:24:08:56:38:c6:
                    dd:67:ed:e2:1b:01:5a:e1:74:e9:dc:c2:dc:e2:ce:
                    7f:5e:56:87:94:8e:01:e8:35:8e:f3:1e:bf:d8:ae:
                    03:a4:0e:dc:b0:09:d9:ed:a0:d7:5a:96:0d:8e:3d:
                    03:40:92:65:8b:8a:29:57:e4:cb:fd:bc:df:48:24:
                    3d:e7:a9:ea:84:b1:71:18:33:c1:ca:e4:cc:6a:05:
                    97:3f:e5:78:d6:52:56:8f:7c:67:46:60:9d:d7:8d:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:3E:9F:B1:DE:FB:00:C5:FF:B7:7B:39:63:CE:0E:60:83:F6:9E
            X509v3 Authority Key Identifier:
                keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f9:bc:e2:3d:7c:6a:3e:a6:79:fb:b9:fa:19:4c:38:eb:e6:
         29:d0:9a:d9:35:af:33:3a:cc:19:cc:f6:d0:75:17:c9:19:9a:
         32:b4:24:49:1c:48:fc:ab:ce:22:b0:88:33:39:04:fa:f9:19:
         2c:c2:f9:48:b8:cf:74:48:59:5b:f5:58:ab:2c:ac:aa:0b:73:
         6d:bc:3e:f9:95:c6:04:3d:3c:c1:89:26:78:63:95:de:8d:88:
         06:0d:d0:9c:81:df:20:b7:8f:2f:d5:49:e5:48:9a:65:1c:ac:
         a5:5e:f3:38:34:f8:9c:90:16:79:b6:55:31:b6:69:66:e6:d1:
         9e:1f:43:74:d3:7d:e7:2e:c3:2a:69:fd:3f:0c:21:cc:c1:56:
         c2:5d:b6:37:5c:45:a4:7b:32:74:2e:e5:1b:30:f7:8b:96:80:
         38:9a:92:15:80:d0:6c:84:29:b6:83:4b:18:72:7f:95:8c:52:
         d4:b3:56:df:4c:15:34:fa:eb:22:49:d3:73:54:ac:bb:70:d5:
         57:a9:a7:49:50:df:91:fd:aa:a4:b0:f0:89:a0:ab:e5:fb:6c:
         fa:fc:c4:bc:64:bc:f3:37:77:13:7c:38:e3:3e:01:97:d0:9a:
         d1:dd:10:c8:e7:33:36:ff:83:fd:6e:55:47:53:32:80:cb:a0:
         1f:6f:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:04 2024 by rpki-client on console-fra.rpki-client.org