Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File:                     mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier:          B7i3DOKan018FwkDcQfXJrLK1EonYUcKMYjb8bPDiD4=
Subject key identifier:   A4:A7:ED:6B:98:D3:0A:96:9C:F3:89:0B:BE:61:6F:DD:E0:4A:CC:0C
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer:       /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial:       018F97299B8CC702CA2EFCBAF5255FB5CDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number:          1114
Signing time:             Mon 20 May 2024 18:00:37 +0000
Manifest this update:     Mon 20 May 2024 18:00:37 +0000
Manifest next update:     Tue 21 May 2024 18:00:37 +0000
Files and hashes:         1: lnnH4X1ZrGwPNnvTUd0ZYBX8J0w.roa (hash: VWDtmHEQQ1Hc5ciMRNbCJPVttQLT8LvyNT8hbDDW2VM=)
                          2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: tslEdtGaRF/8aabsty6zgK4d2d4ZzjIRjPb/igzEEzU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:9b:8c:c7:02:ca:2e:fc:ba:f5:25:5f:b5:cd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
        Validity
            Not Before: May 20 18:00:37 2024 GMT
            Not After : May 21 18:00:37 2024 GMT
        Subject: CN=a4a7ed6b98d30a969cf3890bbe616fdde04acc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:59:ab:d7:2c:33:00:e3:72:59:49:4d:66:
                    85:1c:d8:df:dd:2a:9d:4d:4c:d7:a1:d5:19:69:37:
                    d6:07:5c:8b:dc:80:8b:9d:1a:1a:14:60:61:45:0f:
                    62:0a:bf:9d:38:13:c3:f6:d9:ba:c0:5d:66:30:a2:
                    5b:d3:4f:3c:b7:49:3b:ee:32:63:1d:cd:27:b5:1d:
                    33:6f:16:7a:f7:6b:0b:f7:f9:69:f0:96:37:04:85:
                    f4:fb:c9:6e:ab:c2:95:8e:48:c0:e1:e5:0b:8c:3e:
                    85:71:1c:ca:a9:67:08:4c:44:9b:31:f2:db:c4:fc:
                    92:73:5d:20:f0:db:85:3d:98:37:c9:47:54:c3:6c:
                    16:3e:34:86:57:1f:8e:83:a6:38:a2:d5:db:ae:05:
                    91:e1:4c:66:23:9d:dc:ba:2a:db:dd:b8:42:7d:8d:
                    23:46:f4:bf:fc:cc:13:1a:7a:b0:4a:92:08:44:eb:
                    de:07:38:71:ae:16:b2:ec:c8:1f:5f:bc:0f:5c:1a:
                    ba:de:d9:2e:d3:4f:76:1e:d8:f0:95:dc:cd:0a:c1:
                    9c:0d:ce:1e:27:f8:56:2c:26:79:dd:a0:f5:5f:be:
                    bf:45:c1:8f:50:0d:bf:17:d2:d6:e8:8a:14:9c:eb:
                    2c:2e:69:9d:d0:41:c8:82:8b:37:63:48:47:7a:12:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:ED:6B:98:D3:0A:96:9C:F3:89:0B:BE:61:6F:DD:E0:4A:CC:0C
            X509v3 Authority Key Identifier:
                keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7c:aa:33:5b:14:5d:06:a8:38:a0:ed:33:3d:9f:83:b1:24:
         07:18:c5:e2:18:c1:9b:80:ad:60:e2:8c:81:cc:a5:0c:19:88:
         ae:02:57:50:c0:49:b4:c8:52:34:17:bd:56:02:24:73:88:26:
         ec:04:c4:f4:c4:82:79:f3:a9:e5:93:4d:92:1a:65:67:3c:c5:
         fa:6b:56:e2:f5:18:be:dc:36:da:5d:a0:2c:b6:d4:96:f1:2e:
         b2:30:55:a8:09:72:36:73:1b:84:cb:40:8b:c0:26:0f:0e:f4:
         33:a8:44:e6:65:69:83:55:db:8b:ae:47:5c:94:be:0a:d1:9b:
         f8:79:a6:73:54:d0:f9:ce:3c:67:e7:04:d3:c6:5a:f5:c9:84:
         29:70:53:d5:21:71:36:de:9b:59:6e:53:ad:30:0f:e3:d4:96:
         c7:72:cf:5f:28:41:23:33:b8:90:37:44:9e:10:87:24:52:68:
         7f:03:0c:17:e4:3a:9b:69:f0:16:63:6f:1a:ee:a5:52:30:7f:
         e9:59:c3:53:d0:62:bd:8a:a0:2d:49:53:13:09:9e:8a:da:94:
         4e:e0:98:a6:b6:fd:f8:9e:fe:7b:85:08:42:b7:95:c8:2f:a3:
         84:c9:97:a1:98:54:1c:7f:c2:ab:bf:36:a3:8d:ec:40:88:e3:
         2c:45:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 23:53:17 2024 by rpki-client on console-fra.rpki-client.org