Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
File:                     VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft (raw, json)
Hash identifier:          jfanxGJL5SgyWLqZspuQ0XUwIOWFOSWJvx6Jmi2oXcA=
Subject key identifier:   24:4D:F3:FB:A2:94:9B:44:4E:A1:84:55:AA:24:97:4E:35:37:10:BF
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Certificate issuer:       /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial:       018F871156920E45A2E4298FB5333F8AEF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
Manifest number:          033F
Signing time:             Fri 17 May 2024 15:00:11 +0000
Manifest this update:     Fri 17 May 2024 15:00:11 +0000
Manifest next update:     Sat 18 May 2024 15:00:11 +0000
Files and hashes:         1: 0xL6TyDfROMag54isEDYw0KFAn4.roa (hash: Taqqp+oVWOiohukIRo7yiigD/trHO7UpnU3xGb32Vik=)
                          2: O17RWCi-pLi3YhhIrnMSmouAkuk.roa (hash: 4IHKpjZkQusVR7kpTs0R/laM4axahyWp04AAnseHGr0=)
                          3: VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl (hash: +tln5iWfKDk+1Vg1QC9u4UriHeqg7hcMeHvRsAb3VSc=)
                          4: jHnotDV7V6OxC85rj5hYvFh4VDY.roa (hash: UaQKius45ykOYxEnUFum/AgEHa7oHy9augFMRTvQWmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:56:92:0e:45:a2:e4:29:8f:b5:33:3f:8a:ef:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
        Validity
            Not Before: May 17 15:00:11 2024 GMT
            Not After : May 18 15:00:11 2024 GMT
        Subject: CN=244df3fba2949b444ea18455aa24974e353710bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:61:da:42:d7:48:3f:93:e2:9d:cb:7e:66:
                    07:3a:a8:2d:d3:df:58:de:f1:68:24:31:83:c0:a0:
                    1b:65:6e:ce:f5:99:51:d9:5a:f8:0f:fb:d3:1f:a5:
                    bb:f8:31:38:9c:8e:27:c4:68:8d:2e:c8:65:e5:a8:
                    0e:b2:f1:0c:4a:55:29:1b:03:e7:01:e5:a7:91:63:
                    3e:d4:a8:a9:dc:98:e4:91:e7:d4:6d:6d:c5:81:f1:
                    17:fd:97:93:e9:1c:a0:71:c3:4c:12:37:3a:f7:01:
                    dd:86:e5:de:7a:fa:b8:57:24:35:51:02:5e:41:12:
                    cb:47:92:71:63:ec:8c:b9:8c:03:e4:e8:55:02:88:
                    8d:bd:2a:17:9d:2a:77:48:cf:e1:d4:32:5c:1b:cb:
                    2b:d0:71:ac:f2:43:19:be:f8:3c:8b:b5:87:01:77:
                    cd:e1:3e:a5:f5:99:11:19:10:b4:2a:b5:8c:04:73:
                    05:b0:ae:6c:4d:f2:5b:d4:01:f4:83:9f:37:ef:95:
                    a3:eb:d3:54:ee:b7:eb:11:4a:c0:5c:54:23:66:e4:
                    88:bf:22:1b:51:ba:bc:bf:94:c3:30:ef:54:2f:41:
                    37:e3:3a:40:72:8e:e0:fd:97:e7:d0:9c:91:25:e1:
                    33:1b:55:2e:6e:44:6b:5b:9a:50:27:02:50:5f:34:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4D:F3:FB:A2:94:9B:44:4E:A1:84:55:AA:24:97:4E:35:37:10:BF
            X509v3 Authority Key Identifier:
                keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:70:09:d6:99:51:64:6b:30:2e:51:2a:69:ac:50:9d:60:34:
         26:66:6b:86:8e:76:f9:7f:eb:01:33:35:80:9f:c7:1c:c1:df:
         b5:b2:d3:23:38:f8:6b:98:12:1a:9a:7d:7d:f8:c6:4b:2f:01:
         05:81:80:70:b1:da:97:0c:e9:27:67:64:d2:6f:10:6f:a2:50:
         f6:a4:6f:9f:17:f5:0d:5f:c1:11:c0:e8:51:bc:d8:e7:12:35:
         3f:44:7a:2c:e3:c1:69:47:d2:1a:81:55:cf:a6:1e:86:66:4f:
         3c:63:62:c6:42:46:41:eb:e4:25:3e:97:61:50:ec:02:4a:26:
         76:3c:12:0f:e1:2f:57:04:71:3f:1a:37:79:57:54:5f:45:18:
         70:f8:65:9a:ab:0b:c8:6b:f7:a2:c8:bb:73:db:4d:11:d5:30:
         78:b5:40:bc:6b:db:5f:89:11:35:5c:8f:7a:25:45:b6:30:86:
         dc:a3:18:1f:98:ef:f4:46:7b:07:d0:eb:cf:2e:86:1c:76:8f:
         1b:60:41:6a:cb:eb:a3:d9:4a:c7:43:74:24:dc:d0:12:5d:4c:
         1b:50:85:1e:32:64:12:a1:0b:f6:bf:ee:ce:3b:c6:57:aa:ee:
         6d:25:76:8a:ec:a0:93:2a:ae:11:88:06:f2:26:40:38:68:64:
         e5:bb:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:36 2024 by rpki-client on console-ams.rpki-client.org