Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File:                     vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier:          KzZE1n8/HU968huF4r6N1iw8Jz/cCsK872gd5ZgZ+YY=
Subject key identifier:   F9:41:73:4C:1F:7F:23:A3:EB:A2:CF:12:BA:62:F8:5F:97:13:96:2C
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer:       /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial:       018F874B7902048D117F8578726EF8C8CC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:03:41 +0000
Manifest this update:     Fri 17 May 2024 16:03:41 +0000
Manifest next update:     Sat 18 May 2024 16:03:41 +0000
Files and hashes:         1: jQpNU0aHJZfPBtWmRx6lmX7H1ms.roa (hash: oBShq/otjz2CXrG1GqoY8ab09ZxZWZR8xiqYTSuC9RM=)
                          2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: RV661s83MTKVZwC2sO4PA+b33Waq1jrJrIMJX1yJKPc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:79:02:04:8d:11:7f:85:78:72:6e:f8:c8:cc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
        Validity
            Not Before: May 17 16:03:41 2024 GMT
            Not After : May 18 16:03:41 2024 GMT
        Subject: CN=f941734c1f7f23a3eba2cf12ba62f85f9713962c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:6c:d6:bd:ad:7d:e6:81:2b:f4:40:69:22:
                    2c:d4:29:d9:e0:c1:94:59:95:cb:9d:e9:00:82:46:
                    88:ab:ff:08:7e:9a:f7:7d:25:c4:44:02:6f:4c:a0:
                    2c:15:86:97:57:98:14:e9:65:96:4c:55:1a:1d:6c:
                    bc:bf:e7:18:2f:0f:9e:dd:28:71:ce:95:b4:c5:17:
                    c8:f7:60:7f:9c:62:6d:bc:ad:86:a1:18:73:ad:eb:
                    89:04:ba:11:be:cc:52:22:10:67:95:5d:8c:4b:46:
                    b2:a7:33:d7:9f:a6:a3:ac:8a:99:3d:e6:ac:e4:83:
                    43:30:dd:52:4a:68:17:c3:b6:91:26:af:da:b4:cc:
                    6a:63:5f:8f:a5:57:fa:b6:95:b8:5b:f3:f1:61:cf:
                    ce:7a:f6:95:48:c4:55:d8:a0:0c:2e:8f:f9:2a:df:
                    20:df:19:23:01:c7:12:3a:35:bf:58:13:fc:b4:f4:
                    b1:4e:4b:c5:c7:be:bc:91:52:b6:93:b6:f7:b9:df:
                    10:a0:7f:8c:84:aa:0d:4e:58:95:85:c3:9f:6a:18:
                    5d:19:37:94:c4:b3:42:48:63:5c:98:13:d9:43:91:
                    31:f2:14:fb:df:75:7a:74:e5:66:07:2e:21:14:0f:
                    1e:2f:ec:cc:05:e4:88:72:dc:ed:37:05:e5:7c:10:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:73:4C:1F:7F:23:A3:EB:A2:CF:12:BA:62:F8:5F:97:13:96:2C
            X509v3 Authority Key Identifier:
                keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:8f:ad:6a:23:2f:d2:08:52:66:0a:66:86:85:c4:0d:52:ae:
         3b:0a:c2:65:50:dd:a7:6a:ca:4b:a2:45:e8:c3:ec:07:35:9c:
         86:3c:09:a8:9e:cd:e6:96:32:c2:e4:c2:e0:d5:02:03:32:a5:
         b8:dd:ae:13:e4:c6:2e:a7:5f:4e:e7:7c:f4:e1:30:f4:67:a4:
         aa:5e:c2:da:a3:95:8c:ef:0a:8b:94:e4:60:38:af:45:47:54:
         5e:4f:38:a0:c2:91:42:06:15:78:b4:62:0e:ca:ab:8e:c4:d1:
         15:f4:22:a4:d1:4e:37:10:8c:e1:36:c1:bf:59:13:e2:ed:be:
         b3:49:e8:5d:d6:6f:1b:0d:b9:93:b5:c1:a7:2a:b9:7a:bd:17:
         81:16:75:3e:bd:28:64:9a:d2:1c:8f:f8:33:45:a8:63:a7:fc:
         c1:95:58:f2:67:dd:7d:19:1b:00:7d:ed:8f:e1:6a:b2:a2:f5:
         e4:8a:5d:9b:45:b1:ee:c9:bc:ec:7d:d1:79:00:67:7d:7d:de:
         c9:64:f2:cd:42:a0:45:da:0c:75:87:69:f3:a8:66:f2:df:36:
         3e:11:86:42:97:41:62:16:6f:36:c8:7e:f9:79:8b:5f:d2:13:
         71:e0:af:e4:61:5b:7c:86:6b:48:1f:1c:c6:f4:7a:3b:96:70:
         dc:00:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:07 2024 by rpki-client on console-fra.rpki-client.org