Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File:                     vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier:          BLcQD48SPi23pyAFST5JKnkSzXcjJKXBpwdFs4TDsq0=
Subject key identifier:   25:72:89:B1:19:91:33:85:E9:70:AC:99:20:32:23:A7:DD:E5:0D:81
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer:       /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial:       018F87B674DEFDDC135DC596B7A218D84655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 18:00:32 +0000
Manifest this update:     Fri 17 May 2024 18:00:32 +0000
Manifest next update:     Sat 18 May 2024 18:00:32 +0000
Files and hashes:         1: 2zsDhKFLs8ev_OdwrKqrwqPCqTQ.roa (hash: kzUE5N5EK/7O2Aj4X1C2CaQOBgn7QjRhwW0GclteEn4=)
                          2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: pjLBbAez+iFbG36C5gODnl0hIpqZziRiwqNrWgozVig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:74:de:fd:dc:13:5d:c5:96:b7:a2:18:d8:46:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
        Validity
            Not Before: May 17 18:00:32 2024 GMT
            Not After : May 18 18:00:32 2024 GMT
        Subject: CN=257289b119913385e970ac99203223a7dde50d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:de:17:4d:cd:22:3c:44:19:26:16:7e:e3:
                    69:61:cc:c0:36:bf:59:e3:35:d6:3f:a3:d7:6b:70:
                    31:be:c0:eb:8a:91:9c:05:98:99:3d:b2:75:05:6a:
                    f4:86:07:cc:5a:4f:52:0d:a3:42:13:6f:8b:7f:2b:
                    73:e8:c7:e6:70:ec:df:89:8a:d3:5c:e0:16:c7:34:
                    bb:c4:98:83:1e:93:63:ed:b0:a1:c0:9c:08:82:a6:
                    9d:a7:07:7d:2c:85:53:4b:84:0a:09:f9:b7:f5:9b:
                    01:e8:84:ea:40:35:7e:4e:c7:af:15:ab:26:8b:69:
                    d5:4d:28:c0:17:90:f2:72:18:7f:36:94:3a:eb:d6:
                    e9:cd:b7:36:a5:90:3c:42:95:ad:b0:d8:c5:ab:ab:
                    f8:77:57:a6:9f:a5:b6:42:49:d9:52:d8:2f:e8:02:
                    9d:9e:9d:f5:80:3f:58:66:b9:5e:19:cd:5f:9f:35:
                    92:54:90:78:32:6a:d2:fe:6b:9f:78:6d:27:90:64:
                    a9:8d:35:37:92:f6:fd:04:99:29:f0:3e:22:a3:a6:
                    8d:4a:22:0d:55:fe:f7:75:8d:9b:df:a9:69:06:c9:
                    76:fb:96:40:3d:69:f1:d2:ce:a7:5d:9a:5c:01:c4:
                    50:24:99:59:72:f4:c4:56:9e:ea:d4:8e:ce:90:e7:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:72:89:B1:19:91:33:85:E9:70:AC:99:20:32:23:A7:DD:E5:0D:81
            X509v3 Authority Key Identifier:
                keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ab:3a:c1:42:6b:39:10:bb:bb:68:8b:ea:f4:cc:0c:93:c6:
         ab:73:8c:39:ea:50:6f:06:22:af:b2:b4:d2:01:d1:cb:13:e4:
         44:a0:09:a1:cc:6d:28:c6:0a:13:73:76:f1:a6:82:c3:4d:a8:
         a7:12:ed:74:cf:c2:82:63:d0:38:38:1e:73:08:dd:01:e9:cc:
         46:21:6f:d8:5d:8b:7c:9e:c1:4a:8d:1c:0b:ea:d4:0b:f4:46:
         45:04:35:8a:d9:64:60:94:21:b5:b6:75:31:9a:8e:24:9c:aa:
         c6:1c:b4:69:f4:08:5b:81:67:dd:0a:3a:81:a5:ab:af:70:06:
         8a:21:32:95:92:73:14:99:2c:2a:27:7e:4c:df:61:f4:7e:f7:
         5e:df:86:d0:ba:09:33:af:95:f5:a2:7b:75:8b:a1:83:c1:4e:
         05:e7:20:13:f6:87:56:b8:71:0a:a9:87:52:39:29:ee:66:9c:
         dc:65:3d:91:78:a7:4d:0b:03:3c:a3:ca:a9:83:e7:7b:df:06:
         79:26:93:52:06:a1:d8:b0:75:8d:06:e1:d4:da:d6:b2:b6:5d:
         6b:32:cc:6b:bd:e3:b4:84:3f:94:1a:7d:6a:99:27:e5:1e:13:
         eb:9a:4a:7b:8b:d4:a9:76:a4:89:41:03:e3:0e:a4:89:a2:bd:
         c0:39:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:20 2024 by rpki-client on console-ams.rpki-client.org