Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File:                     Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier:          MxV5IS8RZG3aJ1sgIi8IC4ph3Bx7lX+iY4yBYcxjrKY=
Subject key identifier:   53:A9:2E:09:AC:6F:3F:DE:B7:8D:AB:B7:D7:90:02:8E:1E:A0:30:93
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer:       /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial:       018F92A79857C2E07065ED1C2614B6213C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number:          0638
Signing time:             Sun 19 May 2024 21:00:08 +0000
Manifest this update:     Sun 19 May 2024 21:00:08 +0000
Manifest next update:     Mon 20 May 2024 21:00:08 +0000
Files and hashes:         1: 1-72TCVw0hhCECmszjRldanTZVK8.roa (hash: jc0Klewd3hZMGXXLfIKUeROkPr8UVCMvKo2lhSSO678=)
                          2: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: UNFKKHI+9NwPOu9VdP8QMbfdbZp6XuBA5EkmSxVyPik=)
                          3: hBkSvW9Y_aLH9_tZCNEVbGPK-0E.roa (hash: amtRpCStggKmuZHo2y83AHGALSi6RI9+cyBlsxqVc38=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:a7:98:57:c2:e0:70:65:ed:1c:26:14:b6:21:3c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
        Validity
            Not Before: May 19 21:00:08 2024 GMT
            Not After : May 20 21:00:08 2024 GMT
        Subject: CN=53a92e09ac6f3fdeb78dabb7d790028e1ea03093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:1d:7b:4c:95:81:86:c6:99:f0:8d:5c:16:
                    b9:36:3a:ff:be:b5:06:fa:1d:07:ed:2c:bd:a1:ab:
                    7b:7b:ef:a4:e2:e6:be:54:c8:c4:37:51:a5:0a:be:
                    00:36:34:56:c3:12:81:ca:d9:13:98:27:ae:1b:84:
                    c5:ff:29:1b:89:56:cb:ec:6f:05:07:41:f2:7d:15:
                    78:5b:5d:64:18:c9:7c:d4:f7:d6:84:04:8f:10:a9:
                    71:37:fc:f4:9b:3e:5e:e1:85:d8:48:c1:52:0a:65:
                    1e:9b:0f:23:f2:27:fc:4f:b8:1c:d6:ef:4c:1b:dc:
                    2f:2d:85:7c:67:b8:db:3a:ec:ae:c4:cd:ba:ea:02:
                    9b:f1:c3:f7:de:f1:92:2b:48:ed:f6:b9:bc:b5:b9:
                    82:62:ed:88:15:4b:c9:03:68:0d:51:ee:17:b2:d3:
                    eb:ec:43:55:e0:37:68:1f:59:09:ac:62:4a:09:fa:
                    9b:ee:a9:79:2f:de:41:fb:5d:5d:21:8d:e0:71:25:
                    5b:b6:a1:a4:2d:1f:c0:e3:af:72:dc:e8:94:84:01:
                    be:97:8c:90:21:3c:c3:84:2c:49:e9:6b:2f:9b:3a:
                    d3:a4:99:aa:95:fd:9f:4b:9d:f5:87:eb:26:20:1f:
                    51:1c:0a:0c:f0:dd:4b:70:2e:fc:04:c5:45:76:8f:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A9:2E:09:AC:6F:3F:DE:B7:8D:AB:B7:D7:90:02:8E:1E:A0:30:93
            X509v3 Authority Key Identifier:
                keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:89:76:39:57:03:a3:ae:ec:fa:a4:55:c9:9e:47:e1:7d:03:
         e6:5f:3f:d6:bd:ac:af:cd:36:e5:b1:8f:d9:14:f5:45:b8:d0:
         89:88:2f:19:31:ec:75:2d:a0:51:bc:23:76:f0:b0:a8:2b:e6:
         51:30:51:b4:60:f0:0f:e7:d1:a9:26:c8:49:e7:aa:ac:3d:fb:
         11:94:6c:be:d4:24:c7:3c:34:b2:ed:17:a5:9b:fd:c1:a3:00:
         b5:81:d3:e7:54:9d:18:ce:6c:84:fb:b2:5f:ba:79:8d:3d:e4:
         3f:d4:5f:89:91:3e:1b:f5:c2:61:a8:87:5b:b0:90:ed:02:d1:
         49:5d:07:49:c4:9b:0f:be:d1:e6:ab:1c:57:79:93:06:ce:65:
         be:ce:03:2f:33:45:e9:51:5f:b4:ac:b7:58:f4:36:70:35:56:
         00:1d:27:3d:42:eb:67:31:cb:20:7b:c1:87:68:04:fb:d7:8f:
         a5:41:ef:0a:5d:48:d8:21:33:1b:b6:e5:07:66:5e:b9:17:00:
         68:da:d7:43:7b:a9:01:c5:58:2d:49:0c:c3:3f:e9:b9:33:25:
         4c:6a:f5:0b:2c:b4:b2:0a:0a:62:7a:8f:13:91:3b:ba:39:85:
         46:72:06:cc:34:31:f8:75:d1:fd:0e:f6:ff:c4:bf:31:c6:f6:
         42:1e:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:15:26 2024 by rpki-client on console-fra.rpki-client.org