Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File:                     V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier:          vHuRb48CRqJ1Ls91cu4jneIevqvZ3z6JbCvJjcKf/gw=
Subject key identifier:   F3:64:FE:91:FB:AE:9A:0B:1A:86:FD:95:CD:E8:AE:AE:15:4F:27:D7
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer:       /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial:       018F87B659B8AA671D04CE6FD41B027B101C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 18:00:25 +0000
Manifest this update:     Fri 17 May 2024 18:00:25 +0000
Manifest next update:     Sat 18 May 2024 18:00:25 +0000
Files and hashes:         1: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: 28g7wZrz3WPXqnbUFLfcajhfwRkB75zkWm6oK4yDdEc=)
                          2: WhyhvAQNwozjvNZPDRvWn0LV-Gw.roa (hash: pgE1DOBMUKdrkpM2RsJrngGC7l0zEQnloilpWJUckOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:59:b8:aa:67:1d:04:ce:6f:d4:1b:02:7b:10:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
        Validity
            Not Before: May 17 18:00:25 2024 GMT
            Not After : May 18 18:00:25 2024 GMT
        Subject: CN=f364fe91fbae9a0b1a86fd95cde8aeae154f27d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:e7:4b:77:df:e1:bf:dd:37:11:92:91:b9:
                    1f:4a:99:8c:b3:c2:d6:69:5c:1a:d1:e7:ef:00:c0:
                    14:0d:fd:4b:96:c7:bb:ef:97:4c:a0:36:d6:84:da:
                    98:a1:26:b8:a5:80:92:39:77:7c:97:e8:c6:61:8a:
                    d2:d7:f3:69:be:a1:5b:89:fc:ab:4e:1e:86:eb:02:
                    ce:61:42:42:4b:cb:d8:04:0a:d4:5c:23:47:93:99:
                    62:7b:19:cf:e9:21:b3:32:d4:82:00:61:c6:49:4f:
                    51:97:55:7e:c1:82:05:88:fe:34:fe:5d:15:20:ae:
                    2f:83:b0:0a:07:56:80:8c:9f:0b:5f:e9:9c:2c:85:
                    af:b3:5d:f8:a8:e7:25:7b:a0:b4:b7:28:c8:b4:a0:
                    a7:61:ee:cf:48:e7:2e:5c:39:ca:1e:6e:a2:38:ad:
                    08:af:ed:37:00:ff:2b:f3:63:5f:f9:17:07:1a:39:
                    23:31:90:44:68:ce:4c:65:2e:8e:d1:72:b1:ce:e8:
                    66:dd:47:3f:09:a8:9e:ba:18:7c:c0:cd:c5:8a:74:
                    26:dd:80:56:94:56:0f:fb:a1:27:d0:5f:5f:15:64:
                    13:c4:85:eb:15:b0:23:42:ae:57:d6:dd:25:3a:b9:
                    a7:b8:a9:e0:23:c5:d0:12:70:cb:af:b0:17:d7:b7:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:64:FE:91:FB:AE:9A:0B:1A:86:FD:95:CD:E8:AE:AE:15:4F:27:D7
            X509v3 Authority Key Identifier:
                keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:74:a1:fe:47:6a:cb:43:0b:0b:bb:52:da:51:e2:83:d6:
         4d:2b:86:89:18:34:d3:ec:fd:8c:0c:03:36:08:d5:6a:c0:68:
         63:1a:d9:07:20:ba:8c:db:0d:e7:95:0e:b3:4d:c7:af:23:70:
         30:4a:f1:ab:5f:e8:bd:1b:5d:3e:ab:28:56:8a:67:00:1c:41:
         b6:79:a6:c2:ff:fe:dc:ac:b7:6e:81:59:8f:bb:f5:4f:ad:5e:
         e1:8e:5c:e2:fa:c1:28:4c:82:92:54:15:4c:f7:1d:e3:4a:03:
         f2:58:8e:37:2e:c5:56:83:7e:0d:bf:80:8c:59:dd:d5:d9:09:
         01:bc:d8:c7:11:4d:7c:b5:43:57:c0:76:3c:e1:65:48:35:5a:
         73:46:77:62:ae:13:b2:e5:7a:c9:d6:cb:12:3f:e2:97:f0:80:
         d0:35:e8:46:58:7b:fc:46:43:43:c7:d8:b2:43:5c:60:37:e7:
         40:e6:13:6e:d2:52:51:ac:c2:2b:75:a6:f6:ed:6f:1b:70:b5:
         64:81:b0:54:2e:3e:60:09:a1:8a:40:5b:72:71:12:43:01:6c:
         5b:59:ae:10:a4:6f:f3:36:5e:21:d7:85:22:80:d8:6b:ab:01:
         75:da:96:59:c9:12:d6:b0:ac:06:5b:22:43:fa:68:27:f9:46:
         90:8f:49:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:36 2024 by rpki-client on console-ams.rpki-client.org