Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft
File:                     Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft (raw, json)
Hash identifier:          bzRYUHQTAvyYYPlhD9ducTr11zYsGnjjYv1/4h2UQNs=
Subject key identifier:   5C:50:7F:44:85:94:8A:AE:B3:A5:87:04:95:58:F0:44:FF:C9:67:BD
Authority key identifier: 56:BF:B0:CC:B5:D9:BC:B3:97:4A:B9:39:E2:0C:89:5D:21:F4:6C:71
Certificate issuer:       /CN=56bfb0ccb5d9bcb3974ab939e20c895d21f46c71
Certificate serial:       018F87B608D4EF85223F376069A7FA46249A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vr-wzLXZvLOXSrk54gyJXSH0bHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft
Manifest number:          115F
Signing time:             Fri 17 May 2024 18:00:04 +0000
Manifest this update:     Fri 17 May 2024 18:00:04 +0000
Manifest next update:     Sat 18 May 2024 18:00:04 +0000
Files and hashes:         1: 4ghE65CEMKj3xyBF4B_L2zXtIFU.roa (hash: wi4GiSUg1nIXaoJU/tgynxvbumWRtGfZ+plZPVwycU8=)
                          2: Vr-wzLXZvLOXSrk54gyJXSH0bHE.crl (hash: gpF6VJnbeInfMExnfiwmPSfgExs2deC//ix12R6LFyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vr-wzLXZvLOXSrk54gyJXSH0bHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:08:d4:ef:85:22:3f:37:60:69:a7:fa:46:24:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bfb0ccb5d9bcb3974ab939e20c895d21f46c71
        Validity
            Not Before: May 17 18:00:04 2024 GMT
            Not After : May 18 18:00:04 2024 GMT
        Subject: CN=5c507f4485948aaeb3a587049558f044ffc967bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:8a:73:2a:fa:59:5c:f4:4a:5c:85:88:a7:
                    cc:fc:4c:27:93:ac:e8:dc:40:b1:0b:f2:ef:30:5a:
                    9d:7f:0d:00:88:03:ea:b1:61:c0:00:06:ab:0c:b8:
                    f9:15:96:83:92:ba:61:73:b8:27:3c:48:56:1a:dd:
                    29:53:bf:21:76:28:64:09:1e:7e:5d:85:ec:14:ea:
                    77:c2:51:2d:c0:fb:12:3a:68:73:40:57:4f:96:f3:
                    bc:f0:39:52:9c:1b:a3:24:35:05:7c:6e:46:c4:c1:
                    34:be:aa:31:78:29:25:1d:75:83:2f:3d:42:db:24:
                    f3:d6:82:4b:45:bf:f7:64:71:0b:35:5a:8f:ee:ae:
                    48:b0:9a:b5:33:47:fb:de:db:b9:ed:9f:33:ed:18:
                    d9:42:a0:d3:e5:84:7c:e6:64:b6:73:c4:a6:b8:60:
                    80:37:06:58:c1:4b:ab:60:87:df:22:2c:ba:2a:dc:
                    ef:5b:97:57:2b:5c:63:dc:09:60:37:b8:49:8b:4b:
                    7e:f5:06:dd:39:c1:c9:8c:0b:40:93:8e:27:86:62:
                    b7:0d:31:f1:cd:d8:cc:8c:b1:67:c4:2d:6d:eb:73:
                    98:08:e3:f8:b6:e3:a5:00:c1:50:cc:32:1e:b6:4e:
                    d0:b2:b4:03:4a:5c:81:c9:3e:97:58:02:35:c9:35:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:50:7F:44:85:94:8A:AE:B3:A5:87:04:95:58:F0:44:FF:C9:67:BD
            X509v3 Authority Key Identifier:
                keyid:56:BF:B0:CC:B5:D9:BC:B3:97:4A:B9:39:E2:0C:89:5D:21:F4:6C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr-wzLXZvLOXSrk54gyJXSH0bHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:06:cc:86:a6:9b:51:08:fd:55:7d:70:23:3a:d4:b8:70:14:
         f7:df:92:cd:3a:bc:61:ce:76:03:b6:83:c5:98:3b:03:df:95:
         6a:a3:73:55:c8:fe:a5:a2:f9:6b:2e:fe:c2:6b:69:3e:fe:69:
         03:24:c0:58:83:f3:19:2a:af:3d:c2:7e:64:b1:3a:1d:99:8a:
         62:02:e0:3e:9f:c9:ac:86:99:e2:6c:02:af:a7:f2:28:ab:b2:
         56:bb:3c:f6:b1:f5:cc:88:6d:3a:f3:aa:53:ad:ed:c5:8b:be:
         cd:71:fc:c1:11:71:c2:e6:d2:9b:1c:8a:ae:1e:db:5f:63:b7:
         fd:f9:15:8a:89:94:18:58:f9:4b:df:e7:4e:3c:57:65:4d:0e:
         d8:fa:0f:af:8e:8d:05:08:da:f3:79:76:86:3a:b2:37:64:51:
         30:25:05:04:6b:2f:07:e4:98:35:e6:64:7d:3d:d8:26:30:7b:
         63:c0:77:9c:88:0f:d8:83:0d:4e:e7:2b:41:07:d2:8a:e1:fa:
         65:e8:2f:7d:c4:53:e6:cf:d1:98:48:01:8e:6f:82:5e:a2:02:
         88:c9:bc:49:5e:a0:28:e6:f1:3d:c9:5d:14:69:f7:46:3f:a8:
         aa:a4:49:77:4c:db:29:45:d4:16:5c:7f:00:80:fb:5b:65:f0:
         ec:9b:b6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:10 2024 by rpki-client on console-fra.rpki-client.org