Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File:                     152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier:          vCeQarPPRt6/veT/A2KPOQnmKDggnIPAAQFzRt4DZ/Q=
Subject key identifier:   8A:00:3C:B0:B0:00:B9:F6:B8:D2:B3:B6:33:CF:77:1B:93:56:51:21
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer:       /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial:       018F89DBEDA00691F84523D16376C50B5D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number:          117D
Signing time:             Sat 18 May 2024 04:00:42 +0000
Manifest this update:     Sat 18 May 2024 04:00:42 +0000
Manifest next update:     Sun 19 May 2024 04:00:42 +0000
Files and hashes:         1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: bRQPiHmR5vouE5egKE9OdiQ0XLHfDTGlAnksZpBoziQ=)
                          2: GEXB8i0Vrc5wHJWZz2T8QfFQMHQ.roa (hash: wGfvUO9jbbR531mZBPHBySAU0Iqbx/dtikWVIHhyhx4=)
                          3: g5gob-GT4Scoc9jXH4CLk2xcBig.roa (hash: Y38G95r9ReVTpQMPh3dZTCJje64crraX1WflluZVSyg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:db:ed:a0:06:91:f8:45:23:d1:63:76:c5:0b:5d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
        Validity
            Not Before: May 18 04:00:42 2024 GMT
            Not After : May 19 04:00:42 2024 GMT
        Subject: CN=8a003cb0b000b9f6b8d2b3b633cf771b93565121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:c0:87:45:63:c7:fd:27:67:7e:8b:59:e3:
                    9f:4a:db:e6:46:70:a0:a3:79:cc:4f:35:fb:55:4d:
                    df:e4:ca:93:51:45:13:c2:dc:b8:15:48:47:54:4a:
                    fc:f2:83:73:cb:64:4a:e0:c3:26:12:40:8b:8c:14:
                    b1:14:a4:30:79:10:b9:7d:30:54:2f:cf:51:5e:3e:
                    f0:fd:34:e1:cb:48:84:1d:1d:26:6a:91:2d:2d:43:
                    1a:ef:3f:b7:b0:c4:05:c0:31:8c:06:ba:bd:55:fe:
                    0f:21:23:db:b4:9d:9f:37:68:dc:f3:35:38:e9:e4:
                    68:60:75:af:ab:8e:80:cb:d6:53:b0:f2:67:59:66:
                    36:a3:c0:f3:8a:22:c1:c4:aa:0a:c7:bb:49:3e:3f:
                    59:9d:d7:80:c7:79:42:4d:ef:15:18:74:76:2a:71:
                    1c:f9:38:22:79:b0:f8:75:7f:60:eb:64:6d:a1:84:
                    9b:23:b2:1f:b0:7f:41:b9:a3:35:eb:b1:7b:71:15:
                    ea:66:34:e1:1f:75:01:98:ec:d2:7a:21:48:56:e1:
                    8e:63:f8:bd:a5:0f:32:b3:d8:3d:d3:40:ba:0b:d0:
                    bd:07:dd:5a:85:e4:ed:fc:01:26:d8:34:e6:9e:8d:
                    36:d6:2e:7a:f0:66:0f:20:f6:45:38:c5:e6:27:23:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:00:3C:B0:B0:00:B9:F6:B8:D2:B3:B6:33:CF:77:1B:93:56:51:21
            X509v3 Authority Key Identifier:
                keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:e2:cc:fd:d0:ba:c2:5c:ef:d1:40:cb:d3:c0:da:01:34:
         9e:54:5f:c6:b6:c8:3f:5e:7f:91:40:a2:bd:c7:28:4b:db:c8:
         30:b2:eb:48:00:05:4a:7c:a5:ee:86:db:1a:ef:46:f5:68:a1:
         1d:ef:b6:8b:ea:06:19:78:01:2b:96:6b:a2:5e:07:39:9a:2a:
         33:0a:f5:da:3b:95:10:65:74:39:ff:91:0b:b4:b5:10:8e:b9:
         f8:01:55:83:9f:fb:af:b5:84:ee:da:bb:69:3e:73:20:fd:f3:
         74:16:e3:77:61:97:a1:d0:95:74:4a:4b:b3:78:5e:d8:79:74:
         3a:e5:c9:b9:c0:a0:79:31:1c:e1:2b:32:bf:4e:bd:43:c1:e7:
         e4:5e:bb:b8:4d:c0:d6:9a:e3:a6:cb:bf:fc:36:8a:b6:bf:ba:
         b9:b8:35:36:ec:3b:6f:7d:2d:c2:35:3e:0b:08:2d:65:29:ed:
         cd:5c:65:c3:26:32:f7:69:75:9c:ee:26:8e:54:59:67:f6:0e:
         2c:0c:2e:01:0c:73:3a:77:17:ae:5c:cc:f8:8a:0c:c7:19:a6:
         00:5e:2d:32:cb:ca:fd:ca:40:f6:5f:4b:23:dc:91:3c:13:d9:
         e1:ed:04:f9:01:3b:db:b1:a5:2f:84:3d:f7:f8:8a:f4:af:84:
         0c:45:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:20:24 2024 by rpki-client on console-fra.rpki-client.org