Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
File:                     V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json)
Hash identifier:          P22LiRWwXozAplWr903/jA62K2bi+vhIAbycv+F6EAs=
Subject key identifier:   49:D0:F4:04:20:B6:02:64:5A:40:15:38:AA:40:52:53:A9:0A:3F:DF
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Certificate issuer:       /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial:       018F8749B216E75ECD14FA4CF9C16BC377D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
Manifest number:          0125
Signing time:             Fri 17 May 2024 16:01:44 +0000
Manifest this update:     Fri 17 May 2024 16:01:44 +0000
Manifest next update:     Sat 18 May 2024 16:01:44 +0000
Files and hashes:         1: 1-JicHkla4fAqiiOwE3dWyC4Z3lk.roa (hash: KuHOhNHAr3dRLTs0tW3Ngx4aFNx/GlS23fHqNdyazuA=)
                          2: 4MGeNRsXSLXRH6z-35FzP1kY7Cw.roa (hash: uSe0/RG9A96YBgpx4b32gN1IK3jY8sJavFup0Ysa0QI=)
                          3: 9ZgLqRnMDYlRNRYAo4O5xCT6df4.roa (hash: FuFTK4+mL2YK8YzzewZOwsyiu565j2syY2Vd4IjzhT4=)
                          4: IMig3FVephyRMZLB3jOvSsoGRUo.roa (hash: hjPKSMHrPsMdbWHbUjZ8dlnNGoHyLSelGmWZJNi3mUM=)
                          5: Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa (hash: /p6IJaozloNZP2YBP7B1KSmwJR3RoJJR7OSkj5Cu+9Y=)
                          6: TN33zl_9MCFTSIYGFyxnpxzp5Bo.roa (hash: nkM2kif1SGgvHNfgUgjjrwGBBe3B6bpjCCIKFIHQXPE=)
                          7: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: L54OZ6sPNJLSmJ09eoanPQThb6WqP2BJ3kDP/0jO49c=)
                          8: X37TwGH5fbJzQzBKuCmw6OeyX7c.roa (hash: s8v8/RjTjw0yGf+sAryIWemgypZC/5M4WFBAg17az2o=)
                          9: Z3PKI6uowBd9a8R3TsVc8TvnToQ.roa (hash: frZJ5IL/Q/Mi93pMmupOWdGQA4dsQQQWBC9wvWqavVs=)
                          10: ekMl0J6199YGwLhPM4Fh6M94isM.roa (hash: XXfvcnef83fgsedI0rc6iiPnU3sJlatjLbFEqpCzx/o=)
                          11: i-6Ljh-c4sY5QpI0UzDTC9K1eb8.roa (hash: IVldRN4j5DpV003wSOplJYa8hZ/+tEqs2yZF3HfsbNI=)
                          12: kblCjQryeNb9MdaQH4TDBolxEWM.roa (hash: BK/kDJMb1idXXISwvfJYKyohL88vbHB2H8g3d0FLwJY=)
                          13: mP6V_NJQIvFz__0HJiXIbC5O9cc.roa (hash: yAyd0ZZ6mcdLOMPkYoGKgAiTNnVldd+ZNoRJp6W5r6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b2:16:e7:5e:cd:14:fa:4c:f9:c1:6b:c3:77:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
        Validity
            Not Before: May 17 16:01:44 2024 GMT
            Not After : May 18 16:01:44 2024 GMT
        Subject: CN=49d0f40420b602645a401538aa405253a90a3fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:1c:ab:0a:a4:69:f0:06:e3:89:9d:2d:90:
                    af:5f:67:66:38:4c:26:38:3b:dd:c6:38:d6:38:01:
                    95:81:7a:1b:f5:9f:29:6f:ff:96:b4:4b:6f:7f:9b:
                    a8:ec:cf:5c:90:55:8e:24:bc:cb:9e:ea:00:25:77:
                    f1:aa:64:b9:23:d5:20:d0:53:26:0d:06:e4:9a:bc:
                    80:7b:ff:da:63:02:ff:0a:49:b1:db:54:e0:6e:bd:
                    36:36:80:52:bf:dc:7d:50:4e:3c:3f:4d:fe:b1:e3:
                    c1:93:9f:27:8d:b4:79:b0:14:b8:2f:94:a1:d2:1b:
                    50:17:30:60:ab:8c:d6:36:76:95:4e:e4:a4:f4:d8:
                    b8:de:5b:5b:eb:fd:37:44:e4:23:39:6d:fd:e1:85:
                    52:d6:e5:85:05:85:e9:fd:fb:8b:71:d0:fb:05:ee:
                    6d:fe:25:e6:ee:55:5e:90:cd:5b:6c:20:7c:83:7f:
                    f2:8e:21:7b:0c:4d:21:68:c1:f9:64:b5:7b:a4:e8:
                    bb:58:90:59:c5:2f:bc:cc:8a:76:91:46:af:a3:57:
                    69:6e:c6:4c:66:bc:39:8d:18:30:0f:ad:97:e8:b4:
                    b7:2b:61:fc:22:98:3f:86:9e:5b:c5:97:8b:16:58:
                    52:1f:6e:1a:97:e3:fe:67:6e:64:5e:b6:5f:65:11:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D0:F4:04:20:B6:02:64:5A:40:15:38:AA:40:52:53:A9:0A:3F:DF
            X509v3 Authority Key Identifier:
                keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:11:09:ab:c9:4a:de:fe:ee:ac:c6:41:18:45:9a:90:79:
         47:56:77:c3:45:e6:1a:0f:61:88:38:34:51:1b:92:1b:78:51:
         f0:94:b0:24:54:4e:b6:b6:9c:1f:46:ff:05:54:69:a3:b7:4e:
         96:64:99:c9:a9:fe:d1:0d:36:81:3e:34:b4:1b:35:d7:6b:7c:
         ee:9f:a1:e5:ff:11:d1:22:04:74:9d:d0:9c:4e:6c:7d:95:2d:
         06:cf:a9:9d:a7:7b:8f:f4:4c:52:9e:d9:84:6d:bf:67:93:85:
         c6:bb:e5:a1:37:38:5b:74:54:44:28:5f:e1:6c:61:44:e8:85:
         f2:19:81:a6:be:81:17:00:2a:31:05:6f:fd:81:dd:0f:49:e0:
         21:8e:56:df:e9:74:e9:fa:bb:46:92:76:3b:d7:e0:d0:08:67:
         4a:19:a6:27:29:13:19:30:ed:e3:82:b7:16:d4:22:5b:c4:88:
         b6:1b:a2:ce:cb:8d:78:2e:89:a6:45:8f:d7:60:65:72:fb:12:
         c6:4a:ed:08:09:6a:f6:b7:16:42:95:0e:50:f5:7e:9e:f4:fe:
         f4:96:57:22:0a:09:7b:b0:63:0f:59:99:8a:3a:39:5a:b5:3d:
         70:6f:a6:6b:47:e9:57:a6:7b:98:83:df:cf:83:fd:47:a2:73:
         07:24:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:40 2024 by rpki-client on console-fra.rpki-client.org