Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
File:                     VggFtzAYcRab0JuIZWnR9p3Bm1c.mft (raw, json)
Hash identifier:          tJkEzu5kdAVUe6tlZqhf1E9kqjU0OaQqSBqdDHxF5IA=
Subject key identifier:   3B:7B:E4:15:C3:32:33:E7:12:CE:00:E9:4D:2E:5F:A5:27:65:53:C3
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Certificate issuer:       /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial:       018F8939991EF3A6A8A2AB39625BE8AED3DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 01:03:24 +0000
Manifest this update:     Sat 18 May 2024 01:03:24 +0000
Manifest next update:     Sun 19 May 2024 01:03:24 +0000
Files and hashes:         1: IiFOsA2-R5aEbUJNVJlZ5z_3rE4.roa (hash: MlZBPwkaNircIcDNcD8e2s2yi/ZAfpxT7ikG71iXhZA=)
                          2: VggFtzAYcRab0JuIZWnR9p3Bm1c.crl (hash: Nn+kL6th3g/uSZSKz7K/aVWa33xxh5VTbmk07Wtr05c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:99:1e:f3:a6:a8:a2:ab:39:62:5b:e8:ae:d3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
        Validity
            Not Before: May 18 01:03:24 2024 GMT
            Not After : May 19 01:03:24 2024 GMT
        Subject: CN=3b7be415c33233e712ce00e94d2e5fa5276553c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:66:2e:95:ec:a0:72:fe:bc:39:9d:57:29:
                    c9:a6:94:85:7d:ab:02:44:52:23:2c:e3:02:3a:e9:
                    43:d0:af:ed:f2:22:cd:f6:77:de:59:36:2a:fc:c2:
                    6f:cb:20:66:92:11:fe:c2:b0:8e:13:51:f8:38:d6:
                    b7:9b:6b:18:9c:41:b4:6c:ee:a0:57:dd:09:b2:82:
                    cb:be:39:b9:08:1e:92:3b:1f:f0:17:13:57:f3:3f:
                    41:14:f5:58:f2:43:b8:4e:86:76:52:d4:f0:23:f6:
                    1e:4c:36:4f:e2:c4:e4:68:ac:1e:23:af:29:e9:cc:
                    50:82:d3:b6:1f:e4:3b:2d:76:2a:c6:92:99:7e:f7:
                    26:28:77:ba:b9:03:fa:a5:0e:18:40:dd:33:31:ec:
                    80:1d:22:d9:ea:a5:66:4c:8c:15:24:c9:9f:e4:30:
                    da:cd:ee:a9:9d:bf:c8:1e:97:bc:54:89:58:e3:e8:
                    57:63:3a:03:a1:76:ea:27:da:c0:f4:17:7c:d7:9d:
                    24:0a:21:34:74:0b:0f:1f:ba:a9:e5:df:c1:f6:12:
                    b5:16:ef:18:d5:8b:7d:96:ed:5a:da:ab:e5:0b:0d:
                    9b:2a:9a:08:b8:bf:bc:ff:e5:ae:b8:43:1c:a2:66:
                    5e:de:33:e4:9c:82:17:7e:30:0b:13:9f:af:fc:7a:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:E4:15:C3:32:33:E7:12:CE:00:E9:4D:2E:5F:A5:27:65:53:C3
            X509v3 Authority Key Identifier:
                keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ce:0d:d6:37:3e:d2:25:7d:3c:12:44:a0:05:c7:fe:23:68:
         9d:d3:3f:fb:af:06:98:e1:bf:09:16:7d:09:9e:a3:65:b3:64:
         57:d3:c7:24:78:bf:f9:79:ea:9c:0b:33:b5:f4:bd:8c:bc:fe:
         b4:1a:de:2c:be:26:57:92:18:c7:af:b2:6e:f5:43:02:d2:c0:
         d2:c4:b5:c9:2c:5c:b5:34:e4:1e:29:52:06:e3:2e:31:02:76:
         55:52:85:82:52:b1:aa:31:b0:89:58:a0:97:a3:92:cc:dd:3b:
         05:a2:d2:fb:97:dd:db:37:15:07:de:04:67:d0:eb:a6:64:e2:
         7e:c3:00:48:dd:2e:ae:d3:ab:ca:3a:f7:09:7d:7c:d1:54:0f:
         a6:ae:07:c9:d0:02:32:88:68:27:4e:67:c0:bf:e8:07:38:e6:
         69:48:e1:0c:d1:48:b6:d2:05:8c:86:18:ef:8a:74:78:c9:96:
         09:dc:5c:01:34:8f:69:2f:a0:46:a7:dd:bf:05:91:6e:fc:99:
         64:d0:f5:18:6d:0d:46:30:0c:59:48:bc:ce:04:b3:36:0e:22:
         2a:97:95:b3:8a:c7:7d:f3:18:14:9a:ec:65:c0:91:bc:ee:69:
         4f:3f:e0:58:65:8a:84:b6:48:0e:89:c0:00:b2:6c:9c:3e:52:
         e3:22:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:59:01 2024 by rpki-client on console-ams.rpki-client.org