Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File:                     Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier:          wWoxB560gmjPlFclkjPIjHXf6JvA8RJqI93KJNiCOvY=
Subject key identifier:   4D:09:68:71:49:97:A4:E0:DC:46:F3:DE:6F:2D:1C:4A:3E:EF:08:DE
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer:       /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial:       018F381C0A26C295D75D787461C857325224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number:          114C
Signing time:             Thu 02 May 2024 07:01:52 +0000
Manifest this update:     Thu 02 May 2024 07:01:52 +0000
Manifest next update:     Fri 03 May 2024 07:01:52 +0000
Files and hashes:         1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: jdnsUDnoPAjETcUxs+iCQW5+bW6ZgZXorMdiCfF1A6Y=)
                          2: JfNHQDGjYa4rIlbssg_rUP4FKqc.roa (hash: a+SmSUfGEk+31dISGyNw6aOYnN7iv/ACraefjNU92lQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:0a:26:c2:95:d7:5d:78:74:61:c8:57:32:52:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
        Validity
            Not Before: May  2 07:01:52 2024 GMT
            Not After : May  3 07:01:52 2024 GMT
        Subject: CN=4d0968714997a4e0dc46f3de6f2d1c4a3eef08de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:06:b2:6e:c8:9d:f9:c9:a7:74:7b:4f:35:
                    c6:9d:8e:2a:ac:59:5d:7f:bf:cd:2e:18:7e:09:c4:
                    c4:4e:94:18:c1:5d:c1:a7:e8:2d:87:69:ab:e0:e4:
                    a1:80:41:f7:7d:93:1b:57:ce:94:a1:bc:a8:29:81:
                    32:2f:95:5e:94:7a:73:24:e9:f7:25:33:e0:28:80:
                    5d:23:8a:a3:a1:69:1a:b6:4a:bd:05:0a:3d:69:ae:
                    33:32:bd:9d:d7:b9:1b:fe:82:f0:73:4e:75:42:94:
                    e8:86:e3:7a:2c:e1:b9:11:11:21:16:5a:da:95:47:
                    95:03:d6:e4:97:dd:72:00:63:1b:52:9d:51:dc:98:
                    0d:bb:ad:18:b3:12:23:65:8c:96:1f:8e:d2:54:4a:
                    3d:97:4f:1c:49:41:5b:c6:06:5c:5d:5f:f9:85:ea:
                    11:ad:48:dc:80:27:88:1a:7e:2c:07:da:cd:9d:02:
                    1d:59:03:d5:91:39:29:79:b2:21:c7:bc:54:d2:9d:
                    4b:59:54:73:db:12:8e:e1:8b:47:2f:de:9a:aa:57:
                    03:34:ec:2f:e2:9f:ce:5c:f2:b3:0c:c3:73:42:81:
                    d7:73:05:41:fa:d1:e1:99:78:ee:b0:3f:77:a7:8a:
                    c9:92:be:1b:53:f8:e5:07:f7:0e:f5:0a:30:68:64:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:09:68:71:49:97:A4:E0:DC:46:F3:DE:6F:2D:1C:4A:3E:EF:08:DE
            X509v3 Authority Key Identifier:
                keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:d2:b3:32:e0:d3:72:a8:a4:0b:ba:3c:df:17:62:41:93:
         89:57:ed:43:be:14:5d:f6:99:36:3a:35:75:af:fe:d6:9d:af:
         14:08:22:fb:3d:ac:3c:f7:0d:e5:be:54:4a:53:11:7b:b9:03:
         d8:01:2b:40:a1:92:b4:94:d4:12:e2:81:68:f6:6d:57:d2:d2:
         99:02:41:99:28:f6:30:b2:ac:55:6a:6e:6c:f2:e0:2d:16:55:
         84:99:07:8d:dc:00:36:9d:ac:60:38:47:df:60:b8:f2:58:44:
         97:d9:7d:79:2b:c9:4a:da:09:96:f7:a2:08:27:e7:45:87:fa:
         4b:66:16:9e:fd:43:71:72:bd:90:f7:8d:ca:1d:44:1c:74:c0:
         4c:57:30:89:21:ff:fb:61:69:ed:cf:80:6b:b5:fb:ab:85:d6:
         42:d7:1c:45:82:10:17:16:44:3a:73:7a:d2:b8:ea:56:96:2d:
         e8:32:4c:78:0b:d0:4a:5c:e1:96:73:75:8e:86:e4:76:28:40:
         dd:85:03:3b:b6:0c:1e:24:53:6e:e6:ad:40:bc:cb:8b:23:38:
         d9:8b:06:8c:58:4b:bd:35:51:2e:38:d4:4d:05:08:c3:79:fd:
         5d:f4:7e:22:81:c4:ae:26:67:76:f7:0b:85:eb:17:be:6f:c9:
         90:a9:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:06:37 2024 by rpki-client on console-fra.rpki-client.org