Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          l8bLYqR5NjYqfsuXSzqA/Yb7ZjW5DQu4bCrfSmH66ik=
Subject key identifier:   BC:72:E7:7F:68:77:72:63:7C:8E:F7:00:40:60:87:AF:27:8E:96:1A
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       018F4DC7BD966042948C3BA10EF3B03DB538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 12:01:26 +0000
Manifest this update:     Mon 06 May 2024 12:01:26 +0000
Manifest next update:     Tue 07 May 2024 12:01:26 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: w1qxyTFA7IEkD9J2n1RLM5nznHgLY5K3hBQhuKuByO4=)
                          2: s2nzfnzgQuoLkcnSSIJdInXY4z0.roa (hash: 3eorkR4sDB/dWHtKanLlpwM74DGGs4x0T+rtg5eQb9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:bd:96:60:42:94:8c:3b:a1:0e:f3:b0:3d:b5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: May  6 12:01:26 2024 GMT
            Not After : May  7 12:01:26 2024 GMT
        Subject: CN=bc72e77f687772637c8ef700406087af278e961a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:ce:7c:bb:73:96:15:9e:7d:45:29:2f:8c:
                    db:6d:90:0b:e0:9d:54:12:9a:1d:b2:bf:8a:23:15:
                    9d:28:fe:94:cd:a8:fc:c8:3a:de:5b:1f:6b:c3:bf:
                    be:aa:b3:ac:2a:94:6b:d4:b0:03:56:ae:ff:27:5f:
                    06:ed:0f:e6:71:7a:ea:90:78:1c:8d:22:66:5b:e9:
                    77:38:89:a0:06:69:27:78:60:72:e0:3a:d9:67:99:
                    cf:0f:97:47:2d:f4:fc:5c:a0:3c:95:bb:95:80:dd:
                    74:07:73:f1:87:8e:49:f4:be:e2:ba:0b:b4:39:9d:
                    a0:07:a4:2c:e3:e6:6d:bf:60:15:4d:79:a7:72:59:
                    f3:00:fb:0e:a2:98:ae:3c:be:c3:8f:49:7b:f2:f9:
                    98:ea:10:b4:f1:da:d4:ad:40:c0:26:45:de:06:14:
                    c4:91:6d:ef:c3:78:b8:ec:07:eb:c0:6f:3b:81:56:
                    fa:fb:fd:34:b5:56:f1:d9:4b:6d:a8:1d:c3:2d:48:
                    ab:e5:79:9e:ed:ab:5d:6e:67:07:85:8c:89:65:67:
                    4e:e4:44:7c:c2:e5:cc:c9:dc:dc:e1:02:8b:0c:42:
                    65:50:a4:e5:32:5c:f5:f3:9b:a5:f4:1a:f6:4c:93:
                    fb:7d:c6:e1:fa:18:2e:d3:16:58:62:06:69:64:c7:
                    36:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:72:E7:7F:68:77:72:63:7C:8E:F7:00:40:60:87:AF:27:8E:96:1A
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:52:17:67:d0:3b:cb:f7:3c:ec:92:16:e2:22:f1:9a:2c:9b:
         59:86:24:d7:a7:67:6c:b2:e0:df:2c:5c:28:33:2a:21:65:a3:
         36:ac:58:e8:50:a4:28:d7:f7:9a:eb:48:32:dd:4b:6d:b6:b0:
         d9:2e:39:d8:4c:2f:66:77:ec:bc:0e:c7:20:de:49:85:46:a8:
         26:2b:41:be:84:42:a5:16:1d:06:64:b4:a4:75:5a:98:9f:d9:
         99:ca:2b:fa:0f:7b:81:8b:d1:2a:02:70:bb:e1:bf:3b:d9:27:
         dc:87:94:22:38:2a:05:b0:c4:b6:95:ec:28:0e:b8:05:10:b8:
         84:8b:01:b4:0f:7c:1f:35:17:33:b7:15:35:50:ea:82:ed:f5:
         96:ae:09:85:de:70:36:88:1e:83:38:1c:e0:f2:f7:cb:0c:be:
         c3:5e:50:56:29:fb:5a:e7:8b:c1:37:d1:47:85:63:35:d2:09:
         2e:e4:53:09:98:31:8d:1c:a2:4f:77:47:b5:56:24:43:e3:90:
         a3:da:5b:02:08:33:54:fd:c7:ac:09:6b:2f:4c:a2:06:f6:8a:
         22:33:2a:18:8d:ef:b3:45:1a:e8:92:31:b1:9e:54:10:42:b0:
         bd:e8:66:2e:6a:65:af:0e:27:65:c9:66:ce:2e:53:f5:94:86:
         67:c7:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:44:16 2024 by rpki-client on console-fra.rpki-client.org