Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File:                     ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier:          IscmQM/sjLHHD8eK5k+9T+TU+v1ZgWjZGaa1PVl0IcA=
Subject key identifier:   20:5C:34:96:6C:A8:99:C3:58:00:12:4A:30:8F:23:6C:9E:3C:75:EC
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer:       /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial:       018F874A0F1A7453B7663364BC49E049D978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number:          0BFF
Signing time:             Fri 17 May 2024 16:02:08 +0000
Manifest this update:     Fri 17 May 2024 16:02:08 +0000
Manifest next update:     Sat 18 May 2024 16:02:08 +0000
Files and hashes:         1: _2FjyCenmqJ6VxvGCILSim-M6SA.roa (hash: yM4IYpclUGiFfXUZp47IEUPA6HVu9/SxpDA/7bs8Kug=)
                          2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: b3REB6R3b5bV4cvtuIMN0W758M63ucxCj2HHpSTDn6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:0f:1a:74:53:b7:66:33:64:bc:49:e0:49:d9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
        Validity
            Not Before: May 17 16:02:08 2024 GMT
            Not After : May 18 16:02:08 2024 GMT
        Subject: CN=205c34966ca899c35800124a308f236c9e3c75ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d4:ea:ca:99:61:bf:53:ae:f8:c5:d1:ab:94:
                    b2:a7:f2:7e:81:dc:77:f9:e5:09:2a:aa:44:7f:8f:
                    b5:97:a3:d8:55:11:4c:40:c6:dc:9d:0a:1c:44:6c:
                    ca:b2:65:53:b3:cb:e4:09:ed:c3:33:88:40:35:8d:
                    95:4f:82:45:ce:35:82:e7:ca:4e:42:89:28:cc:cd:
                    10:15:80:28:27:7a:8d:2e:56:8a:ca:da:93:a8:0b:
                    88:b6:c9:14:64:9e:fa:c8:d5:df:74:da:c0:22:68:
                    11:8d:8c:d5:c5:bd:b5:2d:2f:80:48:a4:14:c1:a1:
                    a6:73:22:f3:6f:7a:29:1d:68:7d:b1:bd:06:2f:38:
                    0b:a3:c2:73:bb:14:c3:62:d1:cc:6d:94:bd:c5:87:
                    27:cc:31:b1:65:b4:46:72:81:36:52:bd:21:16:b8:
                    e2:c9:a7:d0:b9:d5:1e:20:c9:d3:d8:22:dc:f3:b0:
                    c4:f8:8b:6d:7f:fb:4b:be:0b:e9:53:95:a7:2f:94:
                    8d:d0:7b:33:eb:0d:9a:b5:4b:ab:54:bb:07:42:fd:
                    84:82:66:37:87:e0:10:b0:e8:52:ef:db:84:04:52:
                    3e:1a:3a:01:54:c6:7b:7e:db:ce:02:b0:cc:81:be:
                    fe:60:a9:51:36:b6:4e:84:07:d0:cf:98:ae:60:3a:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5C:34:96:6C:A8:99:C3:58:00:12:4A:30:8F:23:6C:9E:3C:75:EC
            X509v3 Authority Key Identifier:
                keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4d:a3:6d:b2:05:de:8d:a3:e7:73:98:35:05:d7:00:4b:6c:
         b6:b8:fe:d5:de:d7:e9:e6:92:83:fa:f3:ab:8e:ee:f5:75:c8:
         f4:1a:74:cc:c5:f9:93:16:ed:2e:81:e1:70:1a:21:45:04:d4:
         69:96:09:a9:9a:40:51:03:e5:60:9e:78:27:41:6d:5b:00:74:
         f6:3d:0e:2d:6a:00:f3:92:e0:7e:ce:26:28:8d:94:ea:26:1d:
         dc:25:d1:a4:90:1e:ab:6a:bc:c1:51:ab:be:25:d4:2f:24:03:
         bd:1f:b2:ef:f1:62:f1:16:cd:40:a5:9d:24:6e:ca:2c:b6:e3:
         89:94:90:95:e2:0b:74:a3:8f:d9:b1:e1:7e:f3:2c:0e:13:89:
         0a:ff:90:75:17:91:61:50:a4:14:56:0f:b5:4d:02:4d:d7:1d:
         f3:80:bf:02:12:c8:2e:41:ac:f2:ad:38:9a:6b:7a:f5:0a:ab:
         b9:5f:8c:6e:e9:c1:c6:a0:24:15:bb:64:40:0b:f0:ba:0e:7b:
         30:dc:54:c7:ac:a6:bf:ea:53:43:0c:72:e3:44:1d:bf:78:0a:
         b9:cf:82:00:1b:93:ec:2f:81:28:44:d3:4f:e9:7d:de:47:2c:
         e5:24:a9:96:14:6c:a9:92:2c:b5:12:59:ef:f1:50:4a:54:81:
         6b:7f:0c:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSg8adFO3ZjNkvEngSdl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZWY4YThhZDAwN2FhNGRjODFkNzczNjE4OWExODJiMDI4
MmJjMTgwHhcNMjQwNTE3MTYwMjA4WhcNMjQwNTE4MTYwMjA4WjAzMTEwLwYDVQQD
EygyMDVjMzQ5NjZjYTg5OWMzNTgwMDEyNGEzMDhmMjM2YzllM2M3NWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNTqyplhv1Ou+MXRq5Syp/J+gdx3
+eUJKqpEf4+1l6PYVRFMQMbcnQocRGzKsmVTs8vkCe3DM4hANY2VT4JFzjWC58pO
QokozM0QFYAoJ3qNLlaKytqTqAuItskUZJ76yNXfdNrAImgRjYzVxb21LS+ASKQU
waGmcyLzb3opHWh9sb0GLzgLo8JzuxTDYtHMbZS9xYcnzDGxZbRGcoE2Ur0hFrji
yafQudUeIMnT2CLc87DE+Ittf/tLvgvpU5WnL5SN0Hsz6w2atUurVLsHQv2EgmY3
h+AQsOhS79uEBFI+GjoBVMZ7ftvOArDMgb7+YKlRNrZOhAfQz5iuYDrWDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBcNJZsqJnDWAASSjCPI2yePHXsMB8GA1UdIwQY
MBaAFL3viorQB6pNyB13NhiaGCsCgrwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQt
MDFiN2UyNjJlZmYxLzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQtMDFiN2UyNjJlZmYx
LzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk2jbbIF
3o2j53OYNQXXAEtstrj+1d7X6eaSg/rzq47u9XXI9Bp0zMX5kxbtLoHhcBohRQTU
aZYJqZpAUQPlYJ54J0FtWwB09j0OLWoA85Lgfs4mKI2U6iYd3CXRpJAeq2q8wVGr
viXULyQDvR+y7/Fi8RbNQKWdJG7KLLbjiZSQleILdKOP2bHhfvMsDhOJCv+QdReR
YVCkFFYPtU0CTdcd84C/AhLILkGs8q04mmt69QqruV+MbunBxqAkFbtkQAvwug57
MNxUx6ymv+pTQwxy40Qdv3gKuc+CABuT7C+BKETTT+l93kcs5SSplhRsqZIstRJZ
7/FQSlSBa38Mag==
-----END CERTIFICATE-----
Generated at Sat May 18 00:38:47 2024 by rpki-client on console-ams.rpki-client.org