Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File:                     vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier:          jkwIyp7Py+IUSbxI/u916krxgfnGx5LFZGo3xxT3i9w=
Subject key identifier:   83:1F:66:44:20:51:B4:B8:DD:BF:43:46:E7:0B:91:C9:92:08:96:12
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer:       /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial:       018F88923D5EE0A5B2FB87A6F08BA26F322B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 22:00:36 +0000
Manifest this update:     Fri 17 May 2024 22:00:36 +0000
Manifest next update:     Sat 18 May 2024 22:00:36 +0000
Files and hashes:         1: ByYqgeOnQVy35uePtgD4RRkbG_g.roa (hash: soNRfiktb4idTu6vUcTstHZl9iEWFNY687fFTRfkVBg=)
                          2: fgNf6A7ImjWDab3mzu4P7WN4Ubk.roa (hash: 7NyURISWK3j9kZPXYw9gqCZhvXCwGcdPH97cZ5KS3kc=)
                          3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: ZrbSb+FMLFuf3kxXQQPwRkjnCjuq1dh3s1w3ibeD0cM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:3d:5e:e0:a5:b2:fb:87:a6:f0:8b:a2:6f:32:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
        Validity
            Not Before: May 17 22:00:36 2024 GMT
            Not After : May 18 22:00:36 2024 GMT
        Subject: CN=831f66442051b4b8ddbf4346e70b91c992089612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:26:5c:b8:e5:96:a5:19:98:c6:46:eb:32:
                    1f:0a:b3:1f:02:4b:5b:27:26:fd:94:52:17:8a:03:
                    cb:1a:8a:89:cb:c0:f2:1f:31:90:10:3e:35:49:ec:
                    be:96:8c:4c:bd:7c:7d:07:a9:7b:32:32:d2:1e:f2:
                    ad:7f:d7:cb:f5:ea:40:62:cb:3d:42:62:0f:e8:fc:
                    e3:7e:48:c2:6a:9c:8f:13:1c:b0:84:ee:0d:dc:a2:
                    41:bc:2b:34:11:df:fd:8d:ea:95:25:10:8a:47:9b:
                    bb:22:c0:eb:92:dc:e5:64:fc:6e:0f:03:56:54:01:
                    e5:ae:a3:49:b3:33:23:eb:84:56:04:df:f4:4f:77:
                    78:0f:b8:d1:4a:42:75:63:b6:1e:6f:bd:8a:55:1f:
                    2f:74:58:19:d6:35:c9:13:3f:64:f2:36:0a:b9:d7:
                    1b:d9:97:fe:6f:5c:ed:8d:2a:e6:70:38:a8:3a:bc:
                    a2:85:31:25:9d:c4:bf:79:ba:94:c7:02:d0:7f:69:
                    94:82:6b:7e:04:3b:06:4f:1f:dd:4e:5b:6b:57:12:
                    3f:a8:43:24:a3:92:9f:0b:cc:a7:a8:69:c0:e3:ef:
                    1f:d5:71:d5:b0:f5:bf:29:d1:2d:39:33:4a:12:3f:
                    7c:1f:13:31:25:e5:8d:8e:3c:76:c3:fd:2b:1b:77:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1F:66:44:20:51:B4:B8:DD:BF:43:46:E7:0B:91:C9:92:08:96:12
            X509v3 Authority Key Identifier:
                keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9e:07:8e:fd:b2:14:c2:c4:46:1e:12:5c:91:d3:83:1a:ab:
         e4:30:91:a9:b5:78:db:9f:23:55:79:8e:8f:b9:66:e6:75:4a:
         4a:9e:ca:77:28:9b:e5:ee:62:04:12:bf:11:5c:a5:a1:1c:99:
         39:a7:01:b9:1e:24:a7:76:db:c9:9b:30:65:16:d4:e8:c8:86:
         7a:b7:6a:91:35:7a:42:e0:82:48:5b:8b:7f:7c:c1:c5:72:2c:
         75:a8:56:7f:b8:f1:ef:bf:ea:77:c7:98:2e:c5:b7:92:94:31:
         57:17:db:b4:f5:02:12:22:f3:e9:e4:1d:f6:05:7b:a1:ae:f7:
         8e:75:f9:ef:e5:14:bd:73:56:32:43:9c:92:2e:b4:19:b3:af:
         f3:dc:2e:0b:59:bf:58:74:ce:2b:70:9b:30:97:4c:4b:ef:6a:
         1f:9c:6f:7c:18:f0:39:ae:9a:93:9d:22:08:7b:d2:4a:e8:10:
         0f:50:32:73:e5:9f:94:83:ad:9a:6e:f8:b9:42:6b:34:a7:68:
         ec:fd:f2:18:51:e5:1d:54:63:f3:5d:5e:1e:c4:c1:16:12:7d:
         44:4f:24:64:53:9d:74:11:00:6d:ae:39:95:11:2c:81:ea:1b:
         8b:fc:a2:c0:54:a7:61:f0:ce:ad:2b:2a:e4:9c:73:9a:92:5d:
         54:d2:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:52:03 2024 by rpki-client on console-ams.rpki-client.org