Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File:                     v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier:          ywUuRij/Ww40smZG5Lw2OvPvF++dokjFe1ney99dszE=
Subject key identifier:   AA:F1:46:EB:21:18:85:9F:8C:7F:75:3E:BD:40:A7:D4:4C:49:47:7F
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer:       /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial:       018F8749AE3A947833002CBE41931E69B7C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number:          08EC
Signing time:             Fri 17 May 2024 16:01:43 +0000
Manifest this update:     Fri 17 May 2024 16:01:43 +0000
Manifest next update:     Sat 18 May 2024 16:01:43 +0000
Files and hashes:         1: pRPURAPDB-4qt3RtLSmiH27Dp4I.roa (hash: F6sTRAN2uKHoU9FaPVsIVwxkM/ICvYb0PnxQRiz1BRM=)
                          2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: 3yK5msZTe7Sx2M7UoYEFz/XhkqnMSz2dsaWMo3/6ksE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ae:3a:94:78:33:00:2c:be:41:93:1e:69:b7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
        Validity
            Not Before: May 17 16:01:43 2024 GMT
            Not After : May 18 16:01:43 2024 GMT
        Subject: CN=aaf146eb2118859f8c7f753ebd40a7d44c49477f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c9:f1:40:54:91:13:f1:a3:7e:ae:ee:d5:d1:
                    68:d3:85:05:d7:ed:60:d0:dd:1e:e7:ce:1e:d0:74:
                    e9:dd:37:ee:f3:37:3c:4c:41:8d:76:c9:54:86:61:
                    f2:3b:13:6a:ef:97:24:1f:8c:d5:31:8d:b5:f8:62:
                    1c:7d:2a:d1:b3:b5:63:f1:1a:bf:cc:fe:8f:5c:c8:
                    5b:3c:77:c2:e2:2b:25:e5:87:38:9a:5a:ee:81:f1:
                    10:75:ab:e9:c3:06:a7:cc:e5:43:ed:87:1e:7c:41:
                    f0:ac:f5:4b:f2:04:f5:f8:6b:ef:d1:ae:5e:df:ce:
                    6c:0f:b9:3e:3d:3b:14:7e:70:81:49:52:7b:0d:e2:
                    23:df:a9:c4:f7:75:99:74:a9:ef:4b:bd:2a:35:c2:
                    a6:7a:57:24:29:73:3f:b4:d0:27:b5:fc:fb:dd:99:
                    41:5b:91:62:93:bf:0e:c6:80:b1:bb:83:7a:f6:20:
                    4d:6d:71:e6:bf:a4:ec:3c:14:10:74:e3:b9:6d:79:
                    6c:a2:12:d8:3f:a1:34:41:cf:be:b9:88:16:aa:94:
                    0c:63:18:b0:78:d8:53:0e:f2:f4:ec:dc:e7:56:91:
                    80:ae:53:e0:ca:e1:d4:0b:0a:fb:d4:c2:f5:91:55:
                    a2:d6:f4:14:12:d9:f9:78:0f:57:69:0d:7f:2d:d4:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F1:46:EB:21:18:85:9F:8C:7F:75:3E:BD:40:A7:D4:4C:49:47:7F
            X509v3 Authority Key Identifier:
                keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:bd:79:48:f7:27:8b:59:38:3c:0b:99:0a:a7:36:25:0f:
         15:58:bc:19:67:6f:b7:f9:7c:73:d8:55:41:b7:34:e1:e8:8f:
         02:c5:f3:a6:b5:3f:1f:46:2e:45:c9:88:6e:a2:81:44:11:2c:
         ee:ad:39:e8:7a:d1:49:dd:55:d2:95:47:0a:5d:eb:bc:21:5e:
         41:05:19:b1:5c:78:04:c2:0e:85:9e:32:0c:4c:b1:b6:2a:8a:
         1b:5b:e6:15:3f:24:04:1d:b5:77:70:44:77:b0:79:f9:cd:99:
         a4:5c:5e:87:05:f0:9f:c7:3e:a6:21:d7:31:36:80:01:bd:eb:
         b5:2b:5a:27:5b:43:63:b5:7b:cc:64:f4:01:3d:f1:29:0c:48:
         85:7a:a6:29:b8:30:6f:fc:90:d5:dc:b9:ef:5a:39:26:06:dd:
         69:9a:b0:e5:56:e1:77:52:a9:f8:f5:8f:92:6e:99:89:fc:d3:
         c2:e2:31:8a:e6:86:b4:b9:4f:9c:78:74:5c:8d:33:14:c6:05:
         f6:42:f0:48:de:7b:b4:d8:28:0d:83:97:33:39:77:29:63:68:
         2a:46:94:11:e6:b5:13:7e:dc:00:bd:40:02:40:dd:3b:2c:68:
         c7:95:bc:69:c8:17:1b:1e:b6:ae:26:22:97:8d:00:d8:8b:ca:
         fb:b2:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:51:10 2024 by rpki-client on console-fra.rpki-client.org