Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File:                     VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier:          AtZMHst5VBXnaUTEVCEh15KEXHL4+OdK3R+L32l94GQ=
Subject key identifier:   71:6D:31:01:EF:EE:36:4C:2E:98:15:05:B8:3E:50:C8:39:CD:CD:98
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer:       /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial:       018F885B3D3180FBE667BA8F3AAC8D28D333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number:          118C
Signing time:             Fri 17 May 2024 21:00:31 +0000
Manifest this update:     Fri 17 May 2024 21:00:31 +0000
Manifest next update:     Sat 18 May 2024 21:00:31 +0000
Files and hashes:         1: 0kARTh58Qq5hDk9XQ3d85SaVGJk.roa (hash: Wk6grWmY51jsbHu20ColtIULpqgAfTeG7L7CPctuxjs=)
                          2: PR5-ed7Ihz1_qgMvZI4SyskCg_k.roa (hash: iVmTPiiNhAZm59PVus1BaC1QgGw+QooBUMfbnB14b/Q=)
                          3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: 4V4eCBaH4A4Q3Sg3LE+aC1+3HSQSmyWs91gpzamBV98=)
                          4: YpZRclXp1TgnHUqsbvs99TZsRCk.roa (hash: Q+vYIt1OwhGOUtQ2tMT2GJfddEq8WWKxmv0yzW9afpc=)
                          5: at5BGCLJ_seHcykZ0LNvYjks3qE.roa (hash: 4/P+gRwO+eMM7RlWB6sgTDpH6DNcPGiEG/5zSS++YJ4=)
                          6: o9ZjOXIUACYF6g_l8gylk2YKn9A.roa (hash: 9hgtZa8GcdbhVtt6R55xdCEd9BONRRY4FqD/yS4GMVU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:3d:31:80:fb:e6:67:ba:8f:3a:ac:8d:28:d3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
        Validity
            Not Before: May 17 21:00:31 2024 GMT
            Not After : May 18 21:00:31 2024 GMT
        Subject: CN=716d3101efee364c2e981505b83e50c839cdcd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:bc:78:c7:b4:9b:d7:6a:c1:51:02:6b:21:
                    ef:8a:6c:93:25:e3:2f:d7:c0:43:8d:05:ba:12:8e:
                    a8:4d:65:a3:3d:73:77:29:85:47:b7:c2:d1:8b:53:
                    02:62:4a:11:41:7f:13:3c:76:1f:22:d7:4e:17:d3:
                    23:22:2a:4f:19:22:53:41:41:36:03:ac:bf:19:39:
                    48:5f:1b:78:7d:6f:9c:b3:5c:43:bc:16:80:88:49:
                    7f:2d:07:93:66:f1:ff:12:ca:87:37:19:5a:c3:8f:
                    69:ca:a8:7c:54:6e:95:39:b6:c3:ec:db:98:0a:a2:
                    eb:a1:45:1d:2f:9e:b3:03:f2:da:79:da:ff:4a:31:
                    ce:cd:d6:1b:20:c7:79:01:52:6c:8a:77:09:b4:79:
                    42:23:a3:58:2b:e9:c2:05:d3:d2:33:7c:28:df:d4:
                    4e:a1:d2:15:d2:f4:be:8b:d2:af:d3:f8:d8:08:2e:
                    ef:9e:08:c4:90:da:40:7f:10:29:ad:6b:c2:3d:cd:
                    fc:2e:03:12:88:9c:5a:9a:79:31:04:63:9a:72:f9:
                    78:29:c3:12:08:17:12:bb:74:21:32:49:33:f4:b7:
                    74:74:70:06:db:7b:6c:ba:69:8c:47:d0:ac:83:b2:
                    aa:b7:47:8f:3b:04:00:5f:07:2f:be:e9:00:f9:0a:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:31:01:EF:EE:36:4C:2E:98:15:05:B8:3E:50:C8:39:CD:CD:98
            X509v3 Authority Key Identifier:
                keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:23:b1:1b:5f:07:aa:a9:0f:c9:52:05:c8:4a:b4:d6:62:0e:
         5e:60:6a:06:a9:0f:4c:7d:c4:f0:62:86:f6:fd:7e:44:da:73:
         f0:78:7f:bb:ed:57:34:89:d1:4f:fe:b3:52:ea:d0:54:da:b5:
         be:f2:ff:99:86:cd:66:96:50:f1:b6:c2:24:e5:0b:89:cb:e0:
         32:05:95:0f:72:c7:dd:ae:80:0d:a7:a9:f4:55:a3:be:a5:42:
         8b:7e:ad:a9:cd:57:ce:7f:59:88:c5:b4:f0:7c:fe:28:9c:90:
         4e:00:36:13:9c:5d:7b:f7:da:a8:5c:5d:c5:3e:6e:f0:66:7b:
         47:b2:8a:03:16:1c:a7:b4:2a:46:cd:22:7a:78:3e:ee:7c:e5:
         b9:c0:a9:f3:92:68:8e:c5:2f:11:42:d1:26:2a:42:1e:4c:d2:
         a1:80:f5:cb:db:4f:ed:4d:83:0f:02:88:9c:18:76:97:8c:bf:
         8e:06:84:8a:1f:cc:2b:2c:94:07:ef:bf:37:b4:0c:53:31:a4:
         01:0c:70:38:43:a3:de:c8:ee:42:9f:1b:b1:0f:ae:30:af:e9:
         57:d1:dc:a2:26:76:60:64:e6:9f:7d:4a:1b:22:b0:68:3c:1a:
         2e:a7:c9:29:35:0a:3f:27:5b:21:7a:07:63:bb:c4:0e:50:dd:
         4f:6f:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:59 2024 by rpki-client on console-ams.rpki-client.org