Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File:                     vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier:          p3baowQh2h7vWiIcKP3YOWdsApt2lB2q80NNW05S4PA=
Subject key identifier:   BE:AA:64:39:9A:7A:E9:03:CD:86:1B:02:17:84:C8:DF:DD:22:F1:23
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer:       /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial:       018F9495F272F16E6EABDCE053C7E95343CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number:          117B
Signing time:             Mon 20 May 2024 06:00:05 +0000
Manifest this update:     Mon 20 May 2024 06:00:05 +0000
Manifest next update:     Tue 21 May 2024 06:00:05 +0000
Files and hashes:         1: nqafh2irWEtbOE7zbpPQ4a_LMEo.roa (hash: rzIAC4/TdaH5kivSLpJf/HzONWmP58oW0Zce6yUnTrc=)
                          2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: jEZv6ppA8zK9ONtVfmHwr8dRWuW+gh8/4fmSIkBPE8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:95:f2:72:f1:6e:6e:ab:dc:e0:53:c7:e9:53:43:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
        Validity
            Not Before: May 20 06:00:05 2024 GMT
            Not After : May 21 06:00:05 2024 GMT
        Subject: CN=beaa64399a7ae903cd861b021784c8dfdd22f123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:3b:92:14:02:03:ef:0b:32:49:c1:83:3a:
                    cd:c0:d8:8f:36:74:9d:1a:d3:5d:82:52:b8:5b:70:
                    0e:73:2b:1b:13:8d:39:b6:e7:8a:3b:19:84:ed:ac:
                    75:dd:1f:6e:91:9e:ea:7a:95:b4:11:4c:a4:6d:43:
                    42:99:d9:6b:cf:48:0d:1c:3f:63:b6:ed:b6:70:f1:
                    ef:af:80:92:04:ac:99:ad:46:37:c1:92:cb:25:6a:
                    7e:bf:9e:56:20:3f:01:b9:16:76:2f:20:94:be:ba:
                    bc:d2:b3:3e:f3:b0:1a:b3:4a:c8:a7:8c:0f:4b:70:
                    61:45:57:fe:8b:5f:35:22:91:eb:6d:88:01:de:23:
                    a0:bf:c5:c4:f0:23:49:49:48:24:1d:dd:b3:59:e2:
                    29:81:35:8b:f6:e2:83:4d:41:91:97:fb:25:6c:8d:
                    74:7d:bc:0c:b3:7e:c0:b9:b4:19:56:41:27:22:23:
                    a5:08:fe:d1:0f:8a:ad:23:99:0f:2f:d3:76:7c:c6:
                    e2:4f:c8:45:52:d3:8d:d5:7e:90:e8:c1:0d:c6:58:
                    5a:50:ff:cc:6f:11:81:de:32:3d:b1:76:7a:5c:be:
                    b8:c3:af:31:2b:70:e1:01:e9:f2:5e:79:59:f6:88:
                    e3:dc:b8:b2:b8:8b:a8:03:6d:44:9b:82:70:55:b4:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AA:64:39:9A:7A:E9:03:CD:86:1B:02:17:84:C8:DF:DD:22:F1:23
            X509v3 Authority Key Identifier:
                keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:75:51:ad:b2:c6:f6:6c:13:1e:6c:6d:1b:3a:3f:0e:a5:
         0b:0d:79:bb:f8:f0:d7:8f:97:aa:18:9f:e7:d0:eb:77:09:9b:
         9c:bb:13:ff:6e:86:fc:a7:8b:92:2f:61:e0:4f:15:62:3a:4c:
         39:b4:15:06:0e:da:30:78:f8:c1:ef:93:97:eb:d9:e9:b5:5e:
         97:16:77:52:56:36:cc:07:ce:f6:17:75:c1:48:b4:f2:3c:d7:
         3a:af:c0:f7:00:1e:8b:52:e3:e0:7b:38:60:19:0b:76:28:68:
         1e:dd:d4:8f:8c:77:78:cf:13:da:2d:09:a4:d9:68:56:e7:b9:
         d2:7a:f3:60:2e:dc:86:e1:7d:1b:87:8f:09:3f:a8:87:79:6b:
         4f:01:db:9c:10:5c:57:a5:56:dc:6b:6f:48:52:12:d1:c2:92:
         6f:7f:53:98:88:3b:6b:aa:57:fd:f9:d9:05:3c:c9:78:42:25:
         4d:56:76:15:5c:b9:a0:2c:f4:d2:b3:31:3b:e8:b1:d5:f4:0e:
         44:13:4a:1d:ef:d1:6c:d4:76:75:1e:7d:fd:0b:6e:9e:ce:13:
         69:61:fa:6a:5c:df:f6:e8:f4:95:8d:e3:54:e8:d4:2d:77:e8:
         f7:18:58:f8:1c:7b:c4:5b:4a:d7:79:36:d8:64:be:74:04:e1:
         4f:73:76:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 10:06:36 2024 by rpki-client on console-fra.rpki-client.org