Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
File:                     Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft (raw, json)
Hash identifier:          EponTqbA+zz9R8KoxCjZJw0UBNNu4wBLUQA00MSTYsM=
Subject key identifier:   F5:B3:01:4A:3C:E5:BB:2A:01:3D:45:98:F1:9D:25:AC:EB:24:C6:BE
Authority key identifier: 56:AF:20:A6:0A:EF:AC:F3:9F:D5:6A:74:3D:1A:99:53:4C:48:50:BC
Certificate issuer:       /CN=56af20a60aefacf39fd56a743d1a99534c4850bc
Certificate serial:       018F8823F505BF2DCD72B254DE01FC2EC987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
Manifest number:          0FAC
Signing time:             Fri 17 May 2024 20:00:08 +0000
Manifest this update:     Fri 17 May 2024 20:00:08 +0000
Manifest next update:     Sat 18 May 2024 20:00:08 +0000
Files and hashes:         1: 50mgL_DE2avMT4OACaL8yK-M0DI.roa (hash: dNvZf7DhG9XzQ5f79bRAkZ0AANoA3CAg/4TdgXMcjh8=)
                          2: Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl (hash: bYuXHSU03hj60W4ge8jUOcbdWNtY9FAYmX/SzZqFJIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f5:05:bf:2d:cd:72:b2:54:de:01:fc:2e:c9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56af20a60aefacf39fd56a743d1a99534c4850bc
        Validity
            Not Before: May 17 20:00:08 2024 GMT
            Not After : May 18 20:00:08 2024 GMT
        Subject: CN=f5b3014a3ce5bb2a013d4598f19d25aceb24c6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:cf:28:54:90:b2:d9:d3:c9:31:0e:21:a0:
                    a1:87:ae:98:bb:c3:2f:d6:37:45:4a:79:59:5c:d9:
                    75:f4:bf:ce:30:f1:10:ad:21:76:49:5d:ca:f4:cc:
                    33:9a:77:f2:b7:37:44:3c:37:5c:55:f5:98:7d:11:
                    bd:01:ea:3d:85:49:ef:dc:03:ca:df:73:6b:dd:14:
                    9d:9f:85:be:0a:54:31:de:99:7e:42:7b:b5:92:cd:
                    01:80:62:ea:28:69:4d:11:67:02:9f:ce:e6:60:03:
                    23:4b:09:44:ce:3b:2f:c5:ec:c6:21:ff:0f:4e:61:
                    4f:ca:8c:0a:e9:dd:fb:2e:bd:87:19:27:4f:b0:94:
                    af:6d:0f:cc:fc:c0:83:24:71:a4:89:1d:15:21:aa:
                    8c:08:91:d8:ca:68:0c:3a:03:bf:8f:4f:14:90:bd:
                    dc:df:e7:16:37:db:ff:a8:e2:e7:06:e9:5d:a6:e0:
                    73:a5:47:6b:22:fe:d3:c2:3f:f0:79:06:a0:12:89:
                    2d:21:48:26:d2:a0:f1:1b:29:e4:41:15:2b:04:f7:
                    ce:82:42:33:b6:fd:27:46:bd:81:ff:55:7c:c5:90:
                    6e:19:df:ef:00:5d:d3:51:4c:d3:cd:29:c2:4e:57:
                    c2:4d:c7:bb:cd:98:94:b3:22:51:8e:4b:c1:d5:76:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B3:01:4A:3C:E5:BB:2A:01:3D:45:98:F1:9D:25:AC:EB:24:C6:BE
            X509v3 Authority Key Identifier:
                keyid:56:AF:20:A6:0A:EF:AC:F3:9F:D5:6A:74:3D:1A:99:53:4C:48:50:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d7c5d1-6c1c-4f2c-b123-93e2ac9593dc/1/Vq8gpgrvrPOf1Wp0PRqZU0xIULw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4d:e2:be:d4:d8:0f:2d:88:a6:f7:c1:1c:76:0c:42:53:4f:
         18:f1:8a:86:db:04:3e:73:09:8e:8c:14:9e:b0:88:8a:2c:1e:
         b8:ca:ff:81:ad:71:26:19:eb:66:04:17:bc:f8:72:aa:eb:f8:
         97:47:45:4d:29:1b:1e:14:cb:e6:5c:a4:80:9e:09:04:2a:ee:
         8c:b7:99:1d:df:0c:ba:cd:b4:92:b1:51:da:39:04:4f:31:5a:
         95:e5:4d:c2:90:0c:9c:b0:1f:a5:92:6a:e4:ed:58:80:4f:a6:
         25:84:70:f2:d5:34:31:91:7b:6d:e9:47:50:aa:56:bd:37:24:
         00:cb:0b:d3:1f:c9:b2:86:47:32:9c:de:ec:98:ff:ff:8a:ab:
         d6:4b:46:5e:8c:79:e6:da:0a:fe:4b:51:e2:88:d8:6a:82:3d:
         64:d3:56:e1:47:18:3f:9c:b2:66:5c:6b:4a:fe:3b:21:f4:a7:
         48:18:91:15:c8:26:4a:30:59:c4:48:e6:5c:f7:2d:5d:cb:1b:
         bf:0e:73:38:a4:8f:21:8e:0d:4e:d9:61:90:d8:12:90:37:ba:
         74:8e:c6:f1:2f:4b:57:b3:75:b8:b6:99:72:c3:d9:ce:cf:d7:
         20:4a:f6:24:1d:7a:4d:61:88:e8:26:27:52:12:4b:f7:0a:40:
         26:e9:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:39 2024 by rpki-client on console-ams.rpki-client.org