Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File:                     vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier:          mI6yQKzk9WlQuz7uibNtE2C7rFPYvT+l6yz25ci1UrA=
Subject key identifier:   8F:EB:20:04:02:1E:A7:DE:C5:30:3C:EC:7A:23:2B:47:4F:03:E2:C1
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer:       /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial:       018F8748E4F05E8FB5A13812798BCDD64529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number:          1188
Signing time:             Fri 17 May 2024 16:00:52 +0000
Manifest this update:     Fri 17 May 2024 16:00:52 +0000
Manifest next update:     Sat 18 May 2024 16:00:52 +0000
Files and hashes:         1: 0JM7ZRPFENYHNyUfB_kARAJiFDU.roa (hash: N0Oc9eg5OfmKyJFdK2RgKV84ZOI2r2ymX9+Opv0Vo9Y=)
                          2: 8qnM6oDScuKa0yJY76jSR9KGkvE.roa (hash: UTebyup8PDSG0pqHpKEj6wfRKf7jOH1g1s2tuIMdRWA=)
                          3: ABb9jMV83msi0-lqg0njsser9Jw.roa (hash: Qwu9wrN6uK9Doxbn4MK6Fg4BrAEUIPbwn0JGoWFbYro=)
                          4: ATEVAD9TkTPbnIDh60QoFXD3Z2E.roa (hash: Tg5ycWVV63qWB/wuF+RMIcjeafIGxuXJiD7K+SO0VsA=)
                          5: Ajvp5HWiCQJYWimllCC1kNyIb7Y.roa (hash: Ckhg0CxxN8O8h83V/dYUMgjHeF5fcvLdfvWBoLP+uTE=)
                          6: djBCY1YJTgS3hYmJg5SoEksMGZw.roa (hash: qSP6GGpUDhVSEcP58D8nEYkabPvoRYE59QfU94TiARM=)
                          7: emJMx8rkHWZvKxtNGqz4lj_BqUY.roa (hash: TOpsXt3ZJJB8Izk1CdvVKcejIwC9F2zgFZ1j0c1A8HQ=)
                          8: f7BZ5lyATdJEIT8QQujdsNaaU-w.roa (hash: y0NjCds7ODXV5R1UiqKeym3cZYHBEMlt70W7/rxDOB4=)
                          9: h1jGQBuZ1Wyt07E1-Vc0TpLTDPw.roa (hash: eTRZ4IR7YwD0ebplF3DI+4WQAE3pGS1PP/t8jUkGr2A=)
                          10: p2BFHxvSsQB0Uos-CEtrAOXs_Bw.roa (hash: 3ogaDE1eNICwpPw2HkDkoSXp1dcfqPsN1bg6bS5m2Vk=)
                          11: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: 47D7Bh3u0rdnltqn5sh9hiD8Tqx09kodqnYPm6sxrVE=)
                          12: yZ_zNoLgOjo5xBW6UNKYyURI2IA.roa (hash: C0nZ43bS2y64hmOcXeEg6Kk/gcQiDHMnmEtGVK456nA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e4:f0:5e:8f:b5:a1:38:12:79:8b:cd:d6:45:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
        Validity
            Not Before: May 17 16:00:52 2024 GMT
            Not After : May 18 16:00:52 2024 GMT
        Subject: CN=8feb2004021ea7dec5303cec7a232b474f03e2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:0e:80:c5:95:4b:9a:27:02:55:93:08:7c:
                    13:67:5b:7a:11:09:a1:50:2a:31:3e:9a:ec:76:21:
                    5b:e9:99:9f:ac:20:4e:66:da:1c:fb:ec:46:f0:26:
                    9d:39:a3:f2:a7:79:6f:c0:46:d3:88:ac:9c:60:b5:
                    e9:75:22:a6:96:e9:1b:3d:1b:db:9e:76:92:48:8c:
                    58:9b:4b:7b:97:66:66:f1:bc:ee:18:08:a4:5d:b2:
                    57:87:ae:e5:0a:5e:27:d7:4c:d6:30:14:59:84:3f:
                    bc:d2:65:18:67:03:bd:71:1d:59:6b:d9:30:c4:61:
                    87:64:bd:85:fb:73:ee:48:59:39:99:93:fc:24:7a:
                    e4:fd:4c:c8:aa:aa:ec:da:6b:a3:a8:d4:c8:95:e3:
                    d8:94:a4:46:74:11:d5:d1:74:ec:9e:87:49:71:c3:
                    65:1f:27:4d:08:7c:f7:24:43:7f:f4:1b:d0:0a:fa:
                    31:80:c5:ab:94:97:ca:e9:f5:89:4f:36:b2:63:7f:
                    b8:18:9d:2f:c2:20:f2:ab:5a:a2:35:02:1d:ff:94:
                    4e:99:83:8e:3d:e9:3e:a3:dc:82:9d:04:4d:30:10:
                    90:44:5a:f1:20:52:03:b5:ca:da:70:09:64:a9:09:
                    fd:e6:1f:d2:20:41:46:89:49:19:0a:57:50:12:40:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:20:04:02:1E:A7:DE:C5:30:3C:EC:7A:23:2B:47:4F:03:E2:C1
            X509v3 Authority Key Identifier:
                keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cf:9b:45:7b:d7:7a:42:c1:9c:fd:04:b2:95:f2:f5:8a:5b:
         66:37:30:10:38:d4:6a:fb:c5:e7:64:2a:ad:20:85:1f:3a:f1:
         83:66:0b:de:6b:38:87:3f:9c:f2:92:0d:ab:81:9e:9a:8d:66:
         ec:97:73:0b:b1:d8:11:6f:d5:08:74:24:cc:2b:5f:00:84:fa:
         18:50:14:f8:5d:db:4e:11:05:40:13:fe:39:d8:d1:91:97:d2:
         93:06:e5:46:00:2b:54:a4:44:7d:47:31:71:23:4f:ac:7a:00:
         ea:f8:af:18:d3:86:4f:08:95:61:83:8d:37:2f:6e:70:e3:5a:
         b9:92:b8:ca:dd:c5:c4:01:3e:7e:75:f8:51:92:23:46:cf:90:
         d8:38:99:a4:32:db:61:ad:6f:24:c7:e1:94:54:ed:00:ae:7f:
         f4:49:50:07:a9:d1:5f:15:8c:e3:50:88:d3:b5:79:4f:21:e8:
         d4:56:41:55:13:43:4b:e1:3c:8e:0e:d9:ee:59:66:28:de:80:
         34:7a:28:61:08:5e:48:39:cc:46:12:a2:d5:35:b4:6d:42:09:
         aa:05:7e:ee:cf:bb:00:bb:08:5b:c6:61:c3:1b:a7:aa:84:d6:
         64:be:55:72:ce:32:e4:7d:62:a1:cc:93:41:32:eb:3f:3a:44:
         5a:64:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:19 2024 by rpki-client on console-ams.rpki-client.org