Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File:                     RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier:          h7fw+ZNuM8m5/lIUxATowToQJF97q8YSUHre3wtAeDY=
Subject key identifier:   E0:E2:E6:99:F9:00:B0:EF:44:50:7C:A1:B4:7F:36:7D:77:98:B9:F9
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer:       /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial:       018F882443C6ED68B2FFE2D24E3F67F1EE6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number:          025F
Signing time:             Fri 17 May 2024 20:00:28 +0000
Manifest this update:     Fri 17 May 2024 20:00:28 +0000
Manifest next update:     Sat 18 May 2024 20:00:28 +0000
Files and hashes:         1: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: svUJjoRRcr0GNWOJR2JSB0K+NF//q2na/uLxD8jG7Nw=)
                          2: heyDeOe_dlplpAZ5OB-3vRJYruI.roa (hash: BCgKidjJhVeIFl1h1ZYfHWnBXYcWEEGEdLTUZOOA6SI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:43:c6:ed:68:b2:ff:e2:d2:4e:3f:67:f1:ee:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
        Validity
            Not Before: May 17 20:00:28 2024 GMT
            Not After : May 18 20:00:28 2024 GMT
        Subject: CN=e0e2e699f900b0ef44507ca1b47f367d7798b9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1d:65:0a:97:86:1c:95:2e:90:a4:73:5e:7a:
                    75:9b:04:77:03:c7:99:b7:6f:73:2b:bc:d5:72:b2:
                    6a:27:91:d6:11:06:fd:f7:18:39:d8:68:62:f8:77:
                    d7:28:d1:3d:28:25:30:e2:ab:e8:23:09:f8:01:2a:
                    d5:c1:67:e2:1c:ea:04:6c:53:71:2b:99:59:7b:85:
                    b0:2f:44:4d:2b:b6:b5:93:68:5c:8d:a0:ed:a6:34:
                    e4:45:f4:c5:eb:59:ec:01:16:50:f9:98:44:63:ad:
                    58:6f:ec:82:27:59:38:df:7d:d7:50:96:30:e7:af:
                    ec:5e:4a:da:ff:03:c6:fc:cc:4b:02:cc:64:c5:32:
                    f9:bf:30:f1:d6:56:ae:e2:1d:36:7d:6d:d6:b5:21:
                    43:d5:e5:c1:95:3e:3c:ef:29:0e:4f:8d:fe:ac:31:
                    c6:8f:6a:d3:9d:78:c3:c3:0d:b6:71:9b:26:81:86:
                    51:55:86:0a:8c:16:51:61:b9:c0:f1:f8:eb:5e:df:
                    a2:89:b6:09:75:1c:70:2d:04:ef:59:25:e2:f3:19:
                    c7:92:9b:06:52:f3:49:2b:73:96:95:ad:9e:ba:c9:
                    f8:6d:d6:23:fc:1f:0b:f0:1a:32:05:24:70:33:43:
                    c7:55:00:27:5a:bf:31:6a:ce:0c:de:e8:46:45:8e:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E2:E6:99:F9:00:B0:EF:44:50:7C:A1:B4:7F:36:7D:77:98:B9:F9
            X509v3 Authority Key Identifier:
                keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:50:62:a1:48:e5:01:9a:73:a5:f2:97:5d:b9:9a:02:b6:a8:
         33:ac:c4:8e:d3:87:3e:f9:38:9f:cf:fc:7e:ff:7d:1b:55:d4:
         7d:2f:cf:3f:e2:5b:d3:15:a0:50:a3:6b:d5:fd:e6:b5:5d:a5:
         80:a5:90:e8:3b:78:23:73:1d:5b:c0:6c:01:6b:d4:25:c3:c3:
         94:28:7d:66:9c:db:3a:94:c0:0f:4a:ec:1b:e2:03:20:62:49:
         10:2a:d4:8c:ff:21:f0:79:9c:2b:5c:77:9b:e8:00:ea:7b:8a:
         5d:f3:6a:9d:ff:98:d0:f8:98:9e:f2:c0:bd:a5:13:5c:a5:54:
         c1:9f:92:b9:9c:45:19:12:b2:93:fa:41:90:8b:ec:46:23:54:
         87:7b:75:8c:9c:4c:f8:d3:80:26:4c:e6:fd:a6:c1:ef:c1:5e:
         3c:ec:35:24:1f:ed:e6:82:4c:6f:0d:a1:6c:2c:fe:5f:16:e2:
         0c:b4:e0:52:b6:90:34:73:e2:93:ef:22:4e:b4:f8:62:9b:b4:
         94:91:40:9a:54:3e:7f:34:bd:a9:11:a9:8b:04:77:36:cf:b5:
         6e:35:f5:01:ce:96:dc:b4:be:4d:20:f9:14:2f:3b:a0:88:8e:
         7c:bb:9a:ad:80:a3:63:8a:45:87:8a:13:58:8a:e2:86:72:06:
         dd:c4:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:10:06 2024 by rpki-client on console-ams.rpki-client.org