Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File:                     vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier:          lJNpt4VXhP4Vir/B0KrIyKqUy1Neu7XhLvs+TRyRit0=
Subject key identifier:   3A:3D:AA:DB:A9:A4:7F:67:A9:6B:CA:B2:0C:D2:D0:59:00:FD:8C:96
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer:       /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial:       018F874AEE2469157F01BF8986A7A2F51610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number:          0B59
Signing time:             Fri 17 May 2024 16:03:05 +0000
Manifest this update:     Fri 17 May 2024 16:03:05 +0000
Manifest next update:     Sat 18 May 2024 16:03:05 +0000
Files and hashes:         1: PPflRXZ8mkj_8EtRVp6GdPtJFHg.roa (hash: +x1QWPjspcayRXZi2SgM8yO1k9yLVMTnHUCDNXs+xlg=)
                          2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: blpjgZOdniqvyVM1HCHk77hoPsOgyVaoenzUoKzqgcY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ee:24:69:15:7f:01:bf:89:86:a7:a2:f5:16:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
        Validity
            Not Before: May 17 16:03:05 2024 GMT
            Not After : May 18 16:03:05 2024 GMT
        Subject: CN=3a3daadba9a47f67a96bcab20cd2d05900fd8c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2b:68:f8:81:38:ee:ca:65:cf:a0:d2:12:4a:
                    e3:f0:b4:d9:02:7c:9a:94:cc:b4:de:7a:8b:5a:4a:
                    e3:da:47:72:02:4b:6c:7b:fd:8a:8d:ea:14:34:fb:
                    38:09:f5:9c:bf:5f:45:8e:c8:39:8c:10:8c:e0:ae:
                    73:e1:07:bb:2b:d8:c3:51:c8:09:d9:1e:cf:d4:de:
                    ce:2b:70:ac:f2:fa:e4:d5:6b:9f:38:07:8d:34:a6:
                    a7:06:9c:3b:e9:d9:8b:a7:d7:f8:6d:d6:2e:7a:8f:
                    37:0c:34:c7:a5:e3:78:c2:b0:4c:0d:cd:1c:e0:90:
                    cd:25:98:9f:10:8a:65:e4:9b:6b:ca:9f:90:a3:fe:
                    61:bd:b4:9c:9a:01:56:b4:5f:18:d1:93:43:b5:79:
                    dc:99:54:98:f5:14:99:de:45:38:de:83:36:fd:bf:
                    4d:ac:9c:8f:ef:9d:d2:36:fe:1c:9a:77:ab:a2:80:
                    01:4a:c8:20:e5:20:6d:cd:47:61:47:0a:62:6f:5f:
                    0c:c7:8f:02:6e:52:04:df:72:63:78:a1:6a:ed:15:
                    bd:31:bf:c0:96:bc:e9:2f:10:dc:a2:2e:a5:80:e9:
                    2d:f3:d6:bb:56:eb:e0:2a:68:24:68:f9:32:d5:f7:
                    fd:fe:51:62:08:04:45:b4:bc:70:f9:b8:93:73:51:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3D:AA:DB:A9:A4:7F:67:A9:6B:CA:B2:0C:D2:D0:59:00:FD:8C:96
            X509v3 Authority Key Identifier:
                keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:ce:76:6b:79:49:e8:dd:fe:cc:66:2c:3d:ab:ae:ed:a8:
         e0:b2:a3:45:b1:bb:5b:de:7b:4d:b1:6f:dd:6a:40:d4:f1:ea:
         13:25:38:fd:5a:87:d1:18:76:e7:56:96:88:8f:4b:ae:f3:2b:
         7b:2f:8c:21:db:7c:d6:cb:3c:77:13:00:d5:92:e5:cd:30:cf:
         9e:d4:73:8a:98:bc:03:8a:ba:93:64:82:2a:31:6e:7f:94:c7:
         8b:35:c4:da:ed:d3:1c:92:14:85:44:c6:84:a5:86:99:fc:f1:
         00:6f:16:d8:aa:14:a9:df:11:10:55:13:33:4b:ac:10:38:12:
         aa:a9:23:15:6b:bc:f9:9c:e6:39:29:ea:2b:6e:27:f6:e2:06:
         61:f9:ca:ff:ee:a7:f8:8c:28:5b:8c:bb:f3:08:5b:81:42:03:
         b3:88:83:62:e1:66:b4:bf:08:25:be:90:a2:58:6a:ac:84:44:
         ff:ba:bc:4d:5e:bd:9a:85:92:b0:53:70:de:ad:82:d4:db:eb:
         57:9e:1c:81:dc:d7:9a:c0:58:d0:80:20:2b:88:65:40:10:ac:
         ce:da:90:ad:59:77:54:a3:91:a3:43:70:64:b6:d9:bb:ae:84:
         77:b9:9c:56:ef:14:89:f0:b4:ae:1e:fe:2d:11:96:17:e3:e8:
         c9:f3:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:16 2024 by rpki-client on console-ams.rpki-client.org