Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft
File:                     VzEE_zVoy5m39QJOc_8q6gVjzmo.mft (raw, json)
Hash identifier:          pczqEyVUR72Yg1eHJROXXDKqrSARrvfE3ukymZFuLKY=
Subject key identifier:   E1:40:05:13:84:DD:9E:04:DD:2B:41:8B:EE:36:DD:C6:FD:E5:EA:4C
Authority key identifier: 57:31:04:FF:35:68:CB:99:B7:F5:02:4E:73:FF:2A:EA:05:63:CE:6A
Certificate issuer:       /CN=573104ff3568cb99b7f5024e73ff2aea0563ce6a
Certificate serial:       018F87493C0F431A03AAE5BA3A36BA0F8FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft
Manifest number:          0C5A
Signing time:             Fri 17 May 2024 16:01:14 +0000
Manifest this update:     Fri 17 May 2024 16:01:14 +0000
Manifest next update:     Sat 18 May 2024 16:01:14 +0000
Files and hashes:         1: 9aC19TAOh2CTAAdkz-p0dSjkIds.roa (hash: RmZ0n+bUJf1UhUvzsGj5/WV2+lgzoaapqFHAfewhdkY=)
                          2: VzEE_zVoy5m39QJOc_8q6gVjzmo.crl (hash: 7ts4lVDtpAnrLAr7eNHqs3HbNRMJHPOvxpoXI1PGuZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3c:0f:43:1a:03:aa:e5:ba:3a:36:ba:0f:8f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573104ff3568cb99b7f5024e73ff2aea0563ce6a
        Validity
            Not Before: May 17 16:01:14 2024 GMT
            Not After : May 18 16:01:14 2024 GMT
        Subject: CN=e140051384dd9e04dd2b418bee36ddc6fde5ea4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:72:62:b4:49:b2:55:2f:b6:89:f2:df:a3:a0:
                    a1:a6:9c:b8:03:df:f9:e0:f2:8d:8e:ab:17:a4:81:
                    61:98:c7:31:bc:af:f0:8a:5b:93:90:52:66:36:2e:
                    71:45:85:fe:6c:bd:2b:4d:5c:de:66:53:b7:28:3d:
                    bd:17:37:04:ff:5d:06:16:c3:60:8a:77:84:de:f3:
                    e1:f2:a3:78:e4:43:f0:06:40:c3:25:b4:25:92:3b:
                    53:7d:3f:5b:93:a8:d8:3c:b1:92:95:60:23:1c:51:
                    bb:0a:f0:a9:5b:99:1f:c6:55:e6:90:92:4c:4c:92:
                    25:0a:c6:89:c2:88:e7:7e:9e:da:29:ab:05:73:51:
                    71:18:6a:87:47:27:32:30:95:b3:27:3d:f0:b9:34:
                    37:c1:c8:4f:e2:a9:00:ec:a3:5c:64:2c:58:e6:6c:
                    fa:f2:ad:f1:34:82:d8:96:f5:6e:e0:cf:89:3c:5c:
                    61:94:99:a3:ac:23:3c:bb:54:c9:83:65:fc:c8:df:
                    c7:a0:a4:4e:95:f9:6c:b9:34:e7:61:3e:2a:3a:5e:
                    ab:77:fb:a9:af:4b:7e:1c:de:3f:00:4c:ae:33:1c:
                    84:ec:87:ec:83:e3:39:2d:b5:67:7e:fb:e0:0a:fe:
                    b3:7b:44:89:71:b7:23:a5:c2:75:61:d7:71:dd:46:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:40:05:13:84:DD:9E:04:DD:2B:41:8B:EE:36:DD:C6:FD:E5:EA:4C
            X509v3 Authority Key Identifier:
                keyid:57:31:04:FF:35:68:CB:99:B7:F5:02:4E:73:FF:2A:EA:05:63:CE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:29:39:6d:a1:2f:27:c1:0d:e4:8a:17:0c:18:42:0f:a1:25:
         d1:e6:66:bb:2f:4b:d3:b4:08:64:f7:25:bb:00:f1:5a:8f:c8:
         0e:86:ec:ca:81:58:af:a7:a8:d8:42:60:19:af:da:39:ff:c2:
         9c:91:4e:86:0f:aa:bc:9a:ef:08:68:41:72:8c:69:4e:6f:36:
         cb:45:63:92:5f:bf:e6:a5:10:b2:a3:a2:a6:83:2d:11:4f:d3:
         65:0c:0f:4a:0f:74:24:e6:99:d0:9a:3f:bf:5a:e7:a4:d1:99:
         75:5e:c8:d0:27:de:6b:09:a7:50:c4:00:eb:3e:fb:d1:64:c1:
         64:33:81:5e:f1:8b:07:1c:de:64:b6:80:c1:e6:87:06:72:b7:
         bc:19:d8:a3:15:72:fa:fc:9c:57:ba:ab:9b:df:88:b4:82:65:
         c7:f6:d9:37:db:cd:62:ef:77:11:b2:04:07:5e:74:53:87:b7:
         99:70:e9:77:74:fc:0e:48:0b:cd:a8:6e:7e:07:21:70:35:23:
         57:3d:0f:20:1c:c3:17:07:3c:98:76:10:30:cf:d1:e8:4f:75:
         50:03:3d:8d:e5:f0:95:5a:6f:5c:08:3f:cb:0b:2d:80:fd:13:
         22:e1:5d:ad:33:ab:eb:74:8f:c2:3e:7a:60:b0:59:1d:1e:2f:
         c9:12:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:11 2024 by rpki-client on console-fra.rpki-client.org