Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          SIVtr1vc5TZBuIKeeec+46bsIlhbq8s2qiBdEOSC0wY=
Subject key identifier:   4C:48:DC:6E:53:D8:84:51:9B:D3:D3:3C:57:F0:0F:0D:62:78:B7:9B
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       018F8892143C072947D15A702C159F5CD3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          0FBE
Signing time:             Fri 17 May 2024 22:00:25 +0000
Manifest this update:     Fri 17 May 2024 22:00:25 +0000
Manifest next update:     Sat 18 May 2024 22:00:25 +0000
Files and hashes:         1: fjQ1gSdB1yktmlzrNbrLSF6TuHg.roa (hash: S4krMJOnJajjz145CLTVUg2eYvzcAyJ8fJaCUZYrkvE=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: lOsdDLrYseomNzsFILrcKrz257pHDK5YZp/Xp3wyAWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:14:3c:07:29:47:d1:5a:70:2c:15:9f:5c:d3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: May 17 22:00:25 2024 GMT
            Not After : May 18 22:00:25 2024 GMT
        Subject: CN=4c48dc6e53d884519bd3d33c57f00f0d6278b79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:5e:05:59:43:ef:ec:4a:9d:b3:1b:92:92:
                    a3:cb:ab:b0:60:a9:59:ab:71:0d:57:ca:51:fc:f1:
                    2f:42:89:4a:f0:6c:03:d3:1d:ac:ca:c1:7c:d8:63:
                    50:1a:0f:bc:0f:b1:67:b8:55:ea:9c:3a:89:02:38:
                    b2:7b:0b:77:0e:9e:92:80:b4:00:6a:c8:7c:02:da:
                    53:be:ec:55:98:da:86:b5:8b:bc:07:9f:fe:ab:c4:
                    9c:ce:2e:d4:79:7f:54:c0:8c:a6:76:59:de:26:21:
                    78:21:32:13:22:96:8c:9f:2e:1c:2a:d5:ac:e4:4c:
                    1c:c7:11:f2:64:93:d7:98:e1:00:de:7a:d1:d6:85:
                    cc:f3:c8:14:f1:4b:07:99:da:dc:3e:c2:1c:4c:34:
                    85:36:f7:03:a8:92:66:f7:8a:c9:ec:2d:f1:ec:81:
                    97:5f:cc:79:6c:ce:59:f2:93:8b:eb:79:6a:98:56:
                    ac:53:2c:5d:66:0d:da:81:5b:79:4b:fb:2b:dd:2c:
                    9b:70:1f:95:f0:4d:80:4d:75:16:3b:05:56:fc:d4:
                    f8:29:62:0b:71:12:94:c8:32:62:95:b1:fb:1d:f3:
                    d0:d8:65:d4:9f:a7:1c:d0:7a:05:d0:68:77:0b:54:
                    69:8d:c6:fb:2b:dd:9f:16:21:3e:6f:54:cb:a2:18:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:48:DC:6E:53:D8:84:51:9B:D3:D3:3C:57:F0:0F:0D:62:78:B7:9B
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:96:68:19:de:86:b5:32:e0:63:b6:04:2d:21:d8:aa:60:ff:
         44:77:4f:27:c0:ca:41:06:06:67:b2:ee:d4:5d:7a:c6:14:db:
         b9:0c:8c:3a:5e:9e:a1:68:09:34:3c:7d:6b:a1:9e:f1:6c:fe:
         ce:42:37:71:49:80:75:74:8c:76:4b:14:ed:bf:26:14:5b:60:
         28:23:ba:66:4c:39:7f:7f:d4:8d:a2:fa:bd:05:78:d3:66:53:
         7d:d0:58:4e:ab:b3:c3:b4:fa:ee:73:99:3c:b6:3c:8a:f6:22:
         7e:81:4d:03:79:3c:94:32:c7:95:43:5d:ab:19:10:e3:2e:3e:
         cd:a4:9e:47:85:a9:99:41:a3:51:90:46:65:27:86:2c:98:19:
         51:5f:d2:ea:d9:ee:87:de:f6:aa:8f:f9:98:8b:a1:ef:b1:50:
         2d:03:80:3a:cc:68:90:4e:d0:c2:60:fb:08:cd:bf:b2:5b:db:
         a0:06:bb:8a:21:74:55:3d:8e:98:2c:69:bd:21:fd:bf:7e:43:
         e7:5b:be:f6:9b:4f:06:5f:65:c7:6c:ea:94:4e:15:b3:53:97:
         2b:05:bf:d6:e7:90:39:25:f8:7d:aa:ff:47:b1:1f:06:f9:75:
         80:87:55:d2:37:c0:37:89:6a:dc:a5:c6:63:72:da:26:90:6e:
         a7:71:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:57:31 2024 by rpki-client on console-fra.rpki-client.org