Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File:                     zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier:          CPjgBNXgFzyrWTIx8+97yWCnmyQovWnfzkYAQIgdP88=
Subject key identifier:   61:3A:0E:BA:A2:F8:4A:E1:8D:F7:C8:9C:6E:81:91:C2:73:20:8A:F8
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer:       /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial:       018F8FA69A131AE33F928275F1D645E93311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number:          110F
Signing time:             Sun 19 May 2024 07:00:11 +0000
Manifest this update:     Sun 19 May 2024 07:00:11 +0000
Manifest next update:     Mon 20 May 2024 07:00:11 +0000
Files and hashes:         1: NwDpJBiano0opNHdd8QhR9293KY.roa (hash: vniuADuE3EZrEK72TUAYwh6JQ4lV3zKYMIWY0nffXt0=)
                          2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: h3uubJvRB7iYabubuI3Rn70reHWsv3USxRwHbShWd9I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:a6:9a:13:1a:e3:3f:92:82:75:f1:d6:45:e9:33:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
        Validity
            Not Before: May 19 07:00:11 2024 GMT
            Not After : May 20 07:00:11 2024 GMT
        Subject: CN=613a0ebaa2f84ae18df7c89c6e8191c273208af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:87:df:02:0c:92:92:77:80:85:ff:b6:b1:
                    85:3d:2a:79:f1:55:d4:63:9a:58:87:b0:b1:8d:96:
                    0c:f9:3a:fc:5a:3f:34:be:0d:a0:8b:bc:6d:60:66:
                    de:d0:a7:91:0f:4c:6a:0a:02:a8:39:98:0c:ae:8a:
                    15:e9:65:98:7f:47:85:3f:eb:60:04:45:49:d4:ef:
                    73:77:cb:ea:d4:8f:a0:e9:f5:7a:8d:63:ff:da:47:
                    61:59:ed:77:a9:bf:dd:14:51:9d:4b:a7:e3:a6:c4:
                    dd:9f:61:69:ee:df:b7:19:ad:e7:53:7e:e7:d9:51:
                    00:85:cb:44:a7:a2:28:6c:02:91:40:3f:1b:8c:56:
                    2b:74:b1:c5:f4:be:9a:f8:68:7c:e7:27:c5:28:22:
                    4d:2f:af:12:c3:ed:05:b5:d2:dc:d9:11:d3:82:1b:
                    8f:a3:1a:0e:f3:e6:d1:53:c2:6c:41:ec:37:99:6e:
                    90:40:77:96:28:61:06:ea:35:00:b0:b0:a9:23:4f:
                    cb:f5:54:d4:c5:5f:a4:66:9b:a7:66:1b:69:d5:34:
                    b7:38:07:91:58:da:8b:24:6f:7c:8a:93:7b:40:5f:
                    18:6b:7c:fa:9e:51:64:b9:27:fe:ef:55:fd:44:a1:
                    e1:c1:36:f8:0d:00:4e:d1:4c:8f:b4:b7:5b:57:b1:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3A:0E:BA:A2:F8:4A:E1:8D:F7:C8:9C:6E:81:91:C2:73:20:8A:F8
            X509v3 Authority Key Identifier:
                keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b3:d0:85:a3:1a:7c:3b:9f:37:25:22:ea:60:b8:27:b1:b9:
         96:9e:a5:91:a5:b0:a9:42:bc:04:2b:db:e2:ca:0b:33:ee:c2:
         f2:8b:26:99:3e:b3:9c:69:44:c5:b4:81:f4:6f:b0:d7:da:f4:
         e0:95:a1:37:10:ea:f8:c6:b1:19:0e:75:43:84:d5:7d:ef:ae:
         63:19:90:a0:3f:8f:6f:41:db:f7:b9:7d:cb:2c:57:42:6a:4b:
         be:d3:18:36:75:66:7e:2b:1c:ae:a4:1d:4b:57:16:20:e0:bb:
         cb:25:9c:4c:19:12:8a:ae:b5:58:d8:ea:c2:c3:80:dc:6a:84:
         26:2c:06:88:8f:38:dc:1a:78:6b:d9:cf:f9:45:31:5d:eb:73:
         ef:95:4c:05:2e:04:80:80:60:f8:1e:78:aa:01:05:50:a2:0a:
         8a:8a:f7:8d:3b:18:d0:c9:7a:e1:99:f3:79:6e:3e:d7:1e:e7:
         ed:de:59:a5:fa:40:86:9d:85:de:62:91:01:49:3f:1f:3d:10:
         84:95:b6:9d:b2:f1:2e:8d:4d:d0:27:c7:b2:27:c7:10:96:00:
         91:98:2d:a9:df:06:44:0c:00:c0:95:6e:f9:45:77:2a:91:e1:
         91:63:f2:76:fe:94:69:bb:18:fc:38:92:b5:ef:55:a1:53:86:
         e2:2b:fe:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:42:47 2024 by rpki-client on console-ams.rpki-client.org