Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/I9iVEVvYYP5hODToK-QlywQiaHg.mft
File:                     I9iVEVvYYP5hODToK-QlywQiaHg.mft (raw, json)
Hash identifier:          T5lpihOBHJ7JaaNjdZmCI+qBwqjIjQUhNoNlnIt2AOM=
Subject key identifier:   49:D2:6C:CF:7F:FF:A4:D1:33:FF:70:1D:8D:79:CE:F1:07:E8:5E:16
Authority key identifier: 23:D8:95:11:5B:D8:60:FE:61:38:34:E8:2B:E4:25:CB:04:22:68:78
Certificate issuer:       /CN=23d895115bd860fe613834e82be425cb04226878
Certificate serial:       018F362E072A5F0408B435FE5996A788D7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9iVEVvYYP5hODToK-QlywQiaHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/I9iVEVvYYP5hODToK-QlywQiaHg.mft
Manifest number:          114D
Signing time:             Wed 01 May 2024 22:02:17 +0000
Manifest this update:     Wed 01 May 2024 22:02:17 +0000
Manifest next update:     Thu 02 May 2024 22:02:17 +0000
Files and hashes:         1: I9iVEVvYYP5hODToK-QlywQiaHg.crl (hash: XJ+xNfawfXpnYjoAGUM1Ik0crcQHyQvyJGu/SR4fDSU=)
                          2: W5ePCuNVHGRZf3RBM-zfApfD1kw.roa (hash: F2bxKmc0++DlG0SLnKGVmuFIvTXpjvGl6YDHmE3/G60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/I9iVEVvYYP5hODToK-QlywQiaHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/I9iVEVvYYP5hODToK-QlywQiaHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9iVEVvYYP5hODToK-QlywQiaHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:07:2a:5f:04:08:b4:35:fe:59:96:a7:88:d7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d895115bd860fe613834e82be425cb04226878
        Validity
            Not Before: May  1 22:02:17 2024 GMT
            Not After : May  2 22:02:17 2024 GMT
        Subject: CN=49d26ccf7fffa4d133ff701d8d79cef107e85e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:73:88:f4:3d:57:6e:e1:29:4f:66:38:e4:
                    ed:3f:02:43:c6:5f:4f:cc:b6:49:b6:07:6b:8a:b1:
                    fb:aa:ac:61:ef:71:be:95:b2:6c:d5:a8:d3:dc:60:
                    dc:5c:37:2e:b8:ad:27:aa:26:f0:89:6b:8e:80:64:
                    76:08:83:83:d1:45:cb:ac:f9:3c:4d:fe:3e:89:d4:
                    30:5a:86:f0:4b:fe:b2:88:4a:e2:52:f1:8d:10:e5:
                    6e:fe:09:9e:55:77:29:9b:25:ee:3e:25:7b:d3:74:
                    a1:c5:43:7e:6d:b6:89:db:02:1b:72:c2:b5:19:cb:
                    1e:c2:e6:40:c5:5e:3e:1f:4f:df:ee:f9:4c:49:c8:
                    c6:0a:f1:1b:66:63:f1:10:e1:8b:81:95:f2:f2:c6:
                    05:64:51:58:0a:3f:f1:f0:dc:2d:c0:52:91:39:90:
                    7b:81:7e:d9:cb:71:d7:00:15:62:08:03:63:e1:41:
                    cf:41:ab:36:4e:63:b4:82:46:ce:e0:9b:0a:dd:e0:
                    80:72:d2:2a:8d:58:e8:5a:08:35:c9:01:58:a1:a6:
                    3c:78:83:be:8c:87:2d:a5:5b:1f:a7:7f:2c:4b:fc:
                    5c:15:6f:4a:c1:fb:0f:c7:14:dd:9c:df:0e:50:14:
                    c4:7f:f0:d0:3b:7d:02:2c:6c:1a:5a:a8:fd:a4:fd:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D2:6C:CF:7F:FF:A4:D1:33:FF:70:1D:8D:79:CE:F1:07:E8:5E:16
            X509v3 Authority Key Identifier:
                keyid:23:D8:95:11:5B:D8:60:FE:61:38:34:E8:2B:E4:25:CB:04:22:68:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9iVEVvYYP5hODToK-QlywQiaHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/I9iVEVvYYP5hODToK-QlywQiaHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f9c92d-2cfd-4962-8f26-3acaf1425b9a/1/I9iVEVvYYP5hODToK-QlywQiaHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1f:cf:a6:e4:e7:d8:68:d1:e6:41:55:00:45:04:86:b0:a8:
         98:5a:e2:25:4a:0b:41:13:14:9a:98:d5:77:bf:94:18:39:75:
         7c:de:af:32:63:bc:1e:14:c5:db:65:c4:80:01:e1:82:60:7c:
         7e:4f:f7:98:71:17:f9:82:c9:a1:c4:3f:af:07:21:47:21:76:
         d9:92:a6:36:de:48:cb:ac:dc:75:de:90:71:a9:5d:5d:3b:84:
         35:7c:fe:7c:49:3a:88:02:aa:a9:80:29:a8:0f:5e:1b:60:d8:
         d0:38:ee:00:8f:73:c9:04:8e:05:cd:22:2e:93:ed:a7:00:4d:
         03:19:d0:6d:f2:7d:83:22:d0:23:31:81:94:f3:f4:a1:43:6e:
         c8:b8:7a:01:42:fd:6f:e4:c3:e5:3d:83:97:f6:22:49:0f:8e:
         2b:e5:d6:3c:12:7b:ad:30:c0:2f:1e:e8:df:69:82:0e:02:93:
         10:a6:78:5f:1e:7d:8c:76:c4:5c:1b:24:2c:37:93:d7:7a:61:
         aa:a5:bc:38:73:ff:7b:d1:eb:98:da:bb:90:90:cc:c9:8b:c2:
         2e:ec:ba:e4:9c:ea:3a:98:57:10:7e:18:4f:7a:19:87:20:eb:
         00:a2:eb:16:63:45:9a:4e:30:ca:4d:36:47:8e:38:74:f8:6b:
         9d:ee:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:36:50 2024 by rpki-client on console-fra.rpki-client.org