Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File:                     08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier:          /rnO0gZBi3Fam28ZYjA9uE8GlugUqZc9jaiZ5S+cr7Q=
Subject key identifier:   88:44:81:C5:77:F4:E7:65:95:94:D8:89:52:65:D7:CD:74:01:03:DF
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer:       /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial:       018F4F49C83AD4C61B4673ABDFBCAC27AF0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 19:03:06 +0000
Manifest this update:     Mon 06 May 2024 19:03:06 +0000
Manifest next update:     Tue 07 May 2024 19:03:06 +0000
Files and hashes:         1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: buTDtlfNclWtpG73j+77SqlrRjjUwLnm1su257oFrIU=)
                          2: 9BA7UDOia8nFK7gesANfRJI8n2I.roa (hash: B9c5PEIBoa/EnDouzWkZWazB5CXIjqaC2Mcx3TS2yRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:c8:3a:d4:c6:1b:46:73:ab:df:bc:ac:27:af:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
        Validity
            Not Before: May  6 19:03:06 2024 GMT
            Not After : May  7 19:03:06 2024 GMT
        Subject: CN=884481c577f4e7659594d8895265d7cd740103df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:ad:13:17:8e:e5:50:fe:15:8e:46:21:bb:
                    68:6b:c5:47:ba:3a:d7:b4:d1:f3:fd:c2:ce:ee:39:
                    ce:84:e7:6b:d3:ef:d1:54:3a:31:5b:d0:26:4a:eb:
                    36:f2:c4:5e:51:57:8d:df:cf:d4:25:69:a9:b3:00:
                    12:b1:89:9c:1e:d3:72:87:fb:96:d3:5f:47:6e:35:
                    3b:33:fb:d5:63:2f:ec:c8:0a:6a:77:d2:ae:7c:5f:
                    f1:8a:0a:2b:cc:43:77:1f:8f:16:dd:5d:21:00:93:
                    a9:f0:ad:ca:e7:23:ba:f0:9e:d8:5e:15:a2:d5:2f:
                    62:85:1e:bf:d8:9f:03:e0:e7:7c:fd:f8:b7:39:81:
                    10:3f:82:a5:a7:49:8b:49:c6:a6:d0:f6:84:89:ba:
                    92:b1:3f:d8:e7:18:37:c2:d8:81:a6:c3:c7:6e:2e:
                    f4:b5:6d:39:58:00:cd:63:d6:fd:a3:3f:7b:be:21:
                    75:30:86:8e:e6:7a:54:12:48:a1:1a:b5:3b:72:1d:
                    fa:d4:8c:f9:bd:91:c6:f9:40:a4:4b:4a:6e:a3:d6:
                    0e:dc:9d:2e:e4:82:59:39:a5:51:08:69:3d:47:66:
                    77:9d:15:ca:b9:3a:54:18:d1:ec:90:15:a1:5c:ef:
                    5b:5a:98:49:6b:6e:31:92:25:ed:14:7f:15:db:4a:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:44:81:C5:77:F4:E7:65:95:94:D8:89:52:65:D7:CD:74:01:03:DF
            X509v3 Authority Key Identifier:
                keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:c6:f5:e1:cc:26:84:64:d7:4b:6a:7f:19:c8:ea:4c:b5:
         09:78:f0:3b:a4:2c:02:61:7d:fc:d7:53:c1:9c:66:08:0b:bd:
         d8:db:3a:ca:b8:de:35:4d:1c:ff:fc:fa:99:86:d7:bf:cc:37:
         06:ae:dd:98:73:b3:dc:c4:b4:11:1b:5b:49:89:94:ce:4e:f1:
         05:ff:50:00:f9:9c:59:b3:54:16:b5:a7:e1:68:08:b2:fb:a2:
         2f:d7:19:32:2d:eb:78:88:26:40:0c:68:07:dd:f4:ff:51:6c:
         4c:52:4b:d4:74:ea:35:0b:73:fc:dd:b4:d4:64:f4:69:ab:06:
         11:23:82:bb:41:5c:c9:d4:48:79:a7:54:64:ce:5d:c6:41:f4:
         43:06:74:fd:d2:03:3b:19:5e:b8:a4:ca:f9:f0:9b:86:78:6c:
         42:10:c6:93:32:64:fd:06:63:8b:0d:04:fa:18:3d:e1:2e:12:
         b6:77:56:61:dd:d3:aa:18:28:b9:65:53:fd:75:a7:b8:96:d7:
         0c:ae:81:20:fd:31:ce:78:e0:a5:61:8d:30:d7:ba:d7:92:56:
         36:10:23:84:99:9e:3f:54:79:ba:cb:43:29:3e:10:03:71:a3:
         85:67:f8:f9:3a:2e:3c:d2:1c:da:eb:06:43:0f:44:b6:69:1f:
         b3:30:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:39:50 2024 by rpki-client on console-ams.rpki-client.org