Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File:                     vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier:          h6+sDt98i9c5aSPmpmumztdWZeFOhXQ9cnPvsZwktLE=
Subject key identifier:   02:AD:38:DA:5B:D1:CB:68:30:8E:0B:65:92:01:28:F6:89:87:39:52
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       018F603B81533E682A8C3C1101A65C30A38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number:          0E8E
Signing time:             Fri 10 May 2024 02:01:03 +0000
Manifest this update:     Fri 10 May 2024 02:01:03 +0000
Manifest next update:     Sat 11 May 2024 02:01:03 +0000
Files and hashes:         1: 1bHl9aLfGvTwPFGUoriNVyob_wk.roa (hash: KnnPPixxkATGqNZFkXtqFHW1MYvaWyMBEvfw5hOBlEE=)
                          2: 5SncsLDV_mLK11zjn-ua56NzNOA.roa (hash: zuLC6yIPYmfUepLkU++s8Cwpuo2cOA9zrLrgs/OIPYw=)
                          3: Kxr691sYGr-aILtc-GoufYPj06M.roa (hash: Ux/qlKH2CzqDmhbFFlMydfqjK+a8XwUm22WhhI3iiyA=)
                          4: UFNUYByppkWKqISnCSdGrerzpqQ.roa (hash: zee1PBdYS22IpyOBlmtwZo7lvxDow3yCYRKsMvl/xEA=)
                          5: _Yh4WFwPTuILTqkIrEhfTKfs6bw.roa (hash: HR6DZn4vP6AEDBE7s/s5YwjUNxydsvcIBrGNhZz2ceg=)
                          6: c92eF-Wr5zJHdI0bKQjtNzHP4YU.roa (hash: x2+EkrubW8DDqxaWsy9DUwLYTFGTOGYsJh6hC/biOw4=)
                          7: gibppeWkb6BcMnYYfYpspwaMuYM.roa (hash: LciJpsRZ8YWZUY6sBz6Y+XqWdD5HGkLo1waPJ+t14bY=)
                          8: plMn_BiRPB5a11adCB7VuiDteJ0.roa (hash: g8oYI6SXvyqxUxcKu6WnqMrzFEVZkpWTXtn3qE0IwcY=)
                          9: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: 2FO5NVL7nJeeonvmRrvGNqU8KywRLQdl2aYGKc0XBrk=)
                          10: ytqFrdyeVtRFdnclgM3-Ojm7xEg.roa (hash: ABr+n+S+i405NL9EQxg9xjey0046BoUIRD0eNlOAh8A=)
                          11: zYO5HjSCWZ_EtL3-vPtKh48ruAo.roa (hash: 9aecmcepCR6VpiDLgj/DT3Ft8HXzWOmTivV64HpEeTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:60:3b:81:53:3e:68:2a:8c:3c:11:01:a6:5c:30:a3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: May 10 02:01:03 2024 GMT
            Not After : May 11 02:01:03 2024 GMT
        Subject: CN=02ad38da5bd1cb68308e0b65920128f689873952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:19:47:cd:52:a5:16:1b:ed:72:6d:68:fb:62:
                    de:04:29:8b:0e:8e:b1:c9:7a:2c:1b:b6:2c:d8:68:
                    eb:d2:76:9c:e8:44:01:59:06:13:be:f0:33:d7:1c:
                    72:a6:87:51:59:23:0c:16:88:e1:03:eb:d5:73:96:
                    b0:b4:d7:11:6b:68:18:21:6d:09:ae:59:a4:48:04:
                    fa:01:cd:8f:e8:1c:5a:09:ea:eb:a4:94:59:ed:5e:
                    08:c0:de:7d:ea:9d:c0:05:d5:a0:89:2e:eb:4b:5e:
                    ba:62:88:17:e6:51:87:cd:62:d9:3a:bc:da:2a:2f:
                    d6:6e:6a:a9:3c:6d:3f:58:4e:ac:72:c6:e0:c0:84:
                    1b:40:09:92:ad:eb:31:f2:95:c5:43:9c:83:8d:3f:
                    dc:41:7c:b9:41:35:06:5a:2a:1b:15:e6:15:57:ab:
                    d3:2b:e0:5d:ff:20:9a:a5:1e:2e:a1:88:6a:7e:84:
                    3a:2a:82:c0:3b:2d:ee:77:bd:ec:de:5a:df:d0:9d:
                    79:bd:70:b6:23:4b:33:d9:e6:cc:a6:69:4a:90:8c:
                    8a:60:16:25:45:e4:84:05:ca:fc:d7:cd:bc:a6:66:
                    7e:8f:65:ad:5d:54:37:d1:6d:c6:fd:f9:5f:15:66:
                    cf:9a:54:93:d0:b3:50:d2:32:34:d8:60:e9:ae:fa:
                    34:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AD:38:DA:5B:D1:CB:68:30:8E:0B:65:92:01:28:F6:89:87:39:52
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:17:e5:44:1f:b8:bb:13:a4:48:4a:d0:2e:78:33:a4:8d:
         b4:87:8b:b4:5b:ed:c5:85:ee:dd:b2:53:8c:be:44:f9:13:49:
         af:5c:98:88:42:84:90:6a:a7:3a:cb:ca:2b:7c:9e:42:11:00:
         01:e4:7d:a1:2c:16:9d:86:43:e1:5c:7d:a0:ee:96:64:5b:86:
         0d:08:e8:10:11:c2:42:22:1f:a2:58:bb:08:54:9e:78:3f:7c:
         9d:23:1b:db:58:17:17:98:3f:a3:29:05:2c:ba:ca:60:cd:a1:
         95:2d:5e:3c:b8:d2:dd:b7:d0:87:14:1e:5b:83:d1:5a:fa:c2:
         54:51:22:67:f2:89:92:96:97:9b:5f:27:d3:f7:05:4c:98:43:
         d9:9a:30:a3:7c:8d:d9:b2:3d:54:29:54:57:b1:99:b7:c8:0e:
         9a:57:74:08:48:ef:38:8c:ee:77:94:41:91:cd:bc:a3:e1:a1:
         49:23:a4:cd:79:fc:ca:57:48:9f:41:e0:3d:df:1d:2b:22:d4:
         cb:82:1c:7d:35:78:f8:35:04:11:e7:68:73:ca:9b:3a:68:7f:
         86:55:82:69:85:cf:4c:6a:b9:e5:c7:b7:7c:18:5f:76:fa:06:
         d5:cb:0d:2f:aa:94:7b:91:ba:2a:1d:5c:21:c2:10:18:eb:6f:
         a0:58:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:18:24 2024 by rpki-client on console-fra.rpki-client.org