Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
File:                     D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft (raw, json)
Hash identifier:          lYXw6I1VGYQASmtmW4A87cpMZBjOMRpLKoShvUtLwm0=
Subject key identifier:   2B:70:2E:2D:C0:40:3E:00:A4:18:B9:A5:13:10:89:E5:52:00:71:C4
Authority key identifier: 0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
Certificate issuer:       /CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Certificate serial:       018F4D59A2663881C3E0643CB35B9B5418BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
Manifest number:          115D
Signing time:             Mon 06 May 2024 10:01:10 +0000
Manifest this update:     Mon 06 May 2024 10:01:10 +0000
Manifest next update:     Tue 07 May 2024 10:01:10 +0000
Files and hashes:         1: 621tlFJD5YksBp3oGB0A5kdHiDU.roa (hash: 3bTM/Q8qlCa+VgmspIcUF/QULFFi7zCCIDBrfnEztWk=)
                          2: D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl (hash: xfQO/ab3rEG0DUDwvTNA5scnbv743DCk8I9kLMYyKu4=)
                          3: HQTg4uoJGUKQKdHNwa7Q1E68q3w.roa (hash: 3ecQPCZhCC6tRdgRX4TR/P6XmU8OfHylSmvLg39phFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:59:a2:66:38:81:c3:e0:64:3c:b3:5b:9b:54:18:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
        Validity
            Not Before: May  6 10:01:10 2024 GMT
            Not After : May  7 10:01:10 2024 GMT
        Subject: CN=2b702e2dc0403e00a418b9a5131089e5520071c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:45:75:69:5f:34:d1:9e:81:0c:e3:e2:46:
                    b5:b5:6b:5a:d6:43:26:4d:fd:26:59:8b:e1:56:7a:
                    ca:78:c0:03:73:e4:fe:61:c4:8c:a3:19:2a:4a:75:
                    8b:bc:b0:19:ae:7a:da:bc:b2:78:25:48:76:64:79:
                    bf:4d:e5:ac:9c:12:cf:0a:b0:73:88:00:94:e5:65:
                    7d:72:26:0a:94:e9:1f:3f:65:78:5a:0e:19:56:3e:
                    cc:cf:bd:d8:ee:79:0a:82:0f:99:dd:d4:9a:8d:99:
                    d8:9b:52:05:9d:fd:66:13:cc:e0:72:8f:e3:23:4f:
                    b5:dc:72:e1:35:4c:63:2e:30:16:5b:8c:b7:c5:b3:
                    ad:da:76:73:ca:3d:35:21:69:33:f1:e7:b9:04:d5:
                    47:04:ec:4e:98:a7:bf:75:59:24:3e:ca:5a:4a:74:
                    ec:a3:d4:f0:a7:70:32:ee:47:9f:6e:31:4f:65:0f:
                    60:36:3a:59:d1:a9:92:41:d5:8c:54:23:57:bd:99:
                    b3:04:8b:c4:fa:0b:3e:03:53:48:60:e3:fc:df:eb:
                    fb:24:a9:69:a3:9b:c0:17:d5:e3:37:7a:19:64:28:
                    21:e2:ca:bd:ec:a6:b1:2f:ea:2e:62:85:57:1d:3c:
                    99:0e:07:4f:1c:72:bd:85:4a:ef:6f:2b:50:aa:be:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:70:2E:2D:C0:40:3E:00:A4:18:B9:A5:13:10:89:E5:52:00:71:C4
            X509v3 Authority Key Identifier:
                keyid:0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:ea:5f:dd:9e:13:6b:7c:40:23:fb:86:58:44:d5:06:82:
         83:e6:e1:75:f2:9d:87:59:76:ba:0b:11:51:b0:9f:69:91:4a:
         5b:9a:ef:cd:d3:27:9c:88:ef:4e:23:40:83:ed:95:a7:25:7a:
         39:7e:91:ce:66:90:07:33:6e:6f:38:50:ea:bd:bd:ff:5e:75:
         5c:78:4d:28:52:e6:67:c3:cc:c7:87:80:9a:fb:66:37:60:89:
         03:42:9a:d4:20:f6:12:bb:e8:e9:55:62:53:c4:bf:63:11:3f:
         94:6c:0c:9d:4a:a0:76:38:a7:c8:90:5e:a0:67:c9:b8:8e:61:
         4c:5b:59:81:cb:e1:f2:4f:8b:fb:d4:a5:a6:0d:6b:e9:a5:49:
         ff:d9:63:18:e1:6e:6e:a4:d2:a8:e2:9a:a5:7b:45:f0:f2:a7:
         d7:06:22:78:54:b2:0a:44:0f:fa:33:b1:d8:92:59:28:b3:b3:
         1c:96:1c:40:4c:10:18:d5:ca:f8:a7:18:9b:fb:d5:9e:4e:a1:
         15:5e:13:2a:2b:1e:e4:e6:56:75:c0:d3:ea:79:8e:31:e5:a6:
         70:d4:7f:63:04:92:6e:3e:7f:c0:60:43:7e:89:c2:82:17:60:
         2d:fe:f1:fc:0a:fb:7f:f4:04:34:ba:45:a5:44:a3:9a:12:79:
         84:34:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:02:52 2024 by rpki-client on console-fra.rpki-client.org