Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          sTCb2URT9kRG791AepcGrNKIjowKXHawycW2x4ElrUw=
Subject key identifier:   83:C8:19:DD:9A:91:36:B5:C6:85:87:1A:BA:11:03:54:BC:C2:FD:2B
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       018F4C1000F6DE04D0A1F56957DB60095054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          115B
Signing time:             Mon 06 May 2024 04:01:07 +0000
Manifest this update:     Mon 06 May 2024 04:01:07 +0000
Manifest next update:     Tue 07 May 2024 04:01:07 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: iDgW6ZBJMR+NNnarvf2Mq0XSL90azPi7C81gbmojZw4=)
                          2: Qpgj6dBPSxcgU9Sgx_I7D5AQ6_8.roa (hash: 9ZRPhHzWCjteg7Rfts1ZTX0oFYEm/FizkiyyptlUGeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:00:f6:de:04:d0:a1:f5:69:57:db:60:09:50:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: May  6 04:01:07 2024 GMT
            Not After : May  7 04:01:07 2024 GMT
        Subject: CN=83c819dd9a9136b5c685871aba110354bcc2fd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:a3:c7:9b:47:14:24:e0:7e:50:32:da:82:
                    13:75:56:87:62:c1:ed:e5:23:75:6d:7e:f1:9e:f8:
                    0d:2c:21:08:80:e8:88:f3:72:cf:f6:71:53:6a:58:
                    2b:6e:86:09:e8:5d:4f:67:d5:81:02:e5:f2:f0:6b:
                    bc:59:6d:54:a2:e4:2c:66:f6:07:96:e1:fd:e3:91:
                    5e:48:7d:8a:38:c3:c3:68:e6:8e:ea:02:5e:0d:bf:
                    7a:3f:d7:d8:3e:a6:ba:9e:f9:23:67:ed:de:62:77:
                    9a:ae:89:7f:a3:60:f2:c6:69:7c:9e:f7:e2:c0:48:
                    45:3b:73:4e:9e:18:db:df:f6:1f:3a:d5:26:cf:6f:
                    74:bc:00:78:4c:f6:35:97:26:0a:02:c4:ab:61:96:
                    fc:c4:1b:11:ff:c1:ae:31:c3:06:96:3e:c0:34:4f:
                    32:27:08:46:d5:b4:cf:97:5e:79:7d:8d:63:40:e4:
                    0f:cc:8b:ab:ac:e5:bc:96:1e:c9:dc:b1:77:4b:a2:
                    43:e9:61:f8:9d:13:dd:1d:76:19:d2:6d:6c:ca:82:
                    32:e2:bc:ca:1b:1a:40:a0:62:cb:bb:0e:16:e4:7a:
                    a1:17:a7:ab:79:1f:ae:b6:f8:e6:d4:6a:fd:3c:0b:
                    3c:5a:26:c7:8c:66:d4:dc:37:6e:8a:5a:ae:a6:c3:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C8:19:DD:9A:91:36:B5:C6:85:87:1A:BA:11:03:54:BC:C2:FD:2B
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:7c:5f:81:ad:26:fe:3f:23:7b:05:59:20:ba:41:3c:39:
         75:94:91:8b:48:50:e7:6d:f9:3c:0a:9d:43:ab:f2:64:17:45:
         39:58:d0:13:19:ef:a7:2f:59:49:9f:b4:cf:c5:24:fc:3b:f0:
         11:0a:ab:3b:38:d5:fb:02:d7:aa:e5:66:96:c4:f4:5b:42:ab:
         ab:35:5a:30:03:0d:bc:af:9d:ec:5c:17:31:3f:a6:db:32:52:
         33:1f:8a:e6:94:44:95:87:e1:55:33:d0:5b:77:ee:6b:ef:c5:
         41:d1:58:36:52:f3:a4:28:1d:52:a0:ad:ba:47:99:ad:f2:a7:
         f7:00:91:4b:77:5c:37:0b:1c:12:3d:26:13:c1:5d:ea:fc:57:
         e2:cd:fa:0d:9d:57:73:6e:e1:5e:61:60:8e:1a:94:73:be:db:
         1f:04:a8:ab:fe:f0:d1:d0:fb:ea:7c:42:d7:fb:e2:51:ed:2e:
         83:20:d7:f8:7b:09:46:00:2b:7b:b7:3f:bc:57:c8:01:65:15:
         78:93:86:4d:27:b0:3d:63:2e:ee:ee:95:15:d5:42:78:ad:a2:
         9e:c3:a1:32:44:cc:5a:9f:b2:2f:6e:84:ca:86:9e:d4:5d:ed:
         0f:8a:ad:d0:26:49:5d:96:30:33:b7:1b:e1:ed:2b:49:fc:d5:
         1b:4e:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:14:05 2024 by rpki-client on console-ams.rpki-client.org