Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File:                     CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier:          8p4erbHYLTLjPR7VDXmm+1vJUylYK8JNEsoayClXNWk=
Subject key identifier:   A9:B5:A3:11:A1:8E:25:3D:0C:9E:EC:68:90:3A:34:11:2F:72:71:D1
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer:       /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial:       018F31AB913B71642B67BE9A3EBF817078D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 01:01:18 +0000
Manifest this update:     Wed 01 May 2024 01:01:18 +0000
Manifest next update:     Thu 02 May 2024 01:01:18 +0000
Files and hashes:         1: 046DxgQVcSXxSU9KuaiSwUt3kEw.roa (hash: 7tDVDORZpxS6BqWl5M5ATJsphJV4xrwoRnExmMA5oMc=)
                          2: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: +nS+FTMZChSB2MJ30dDf23xcz9As+rPdiA9YLrwovS8=)
                          3: rckK_-GsK1Z7qSfoCiLKGtKiJoM.roa (hash: pn7l+LUXNfiJKiCCbpeflqjyaZUp9JELuHtC137W1/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 17:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:31:ab:91:3b:71:64:2b:67:be:9a:3e:bf:81:70:78:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
        Validity
            Not Before: May  1 01:01:18 2024 GMT
            Not After : May  2 01:01:18 2024 GMT
        Subject: CN=a9b5a311a18e253d0c9eec68903a34112f7271d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:a6:dd:a8:be:a5:fa:49:89:0c:b2:61:07:
                    d0:54:b4:5d:ae:31:05:b7:2d:91:94:3f:e7:1f:e3:
                    3b:b7:70:a4:5b:23:77:03:f9:ff:6d:73:a8:8e:40:
                    d2:47:0b:ce:b5:75:a3:83:29:cc:ad:2b:54:c5:7b:
                    62:f4:37:be:88:ab:d4:1d:e2:f2:f8:2f:2d:89:02:
                    6d:10:94:b0:c5:be:1f:a8:c1:a5:49:b3:ea:5f:ca:
                    05:21:34:30:d8:81:8c:70:08:40:40:ed:83:cc:98:
                    fb:42:11:c4:6c:ab:a8:a6:a8:65:20:d7:fd:87:fd:
                    93:3e:3f:4d:1f:b4:e0:fe:a8:3c:4d:33:d3:51:f8:
                    a5:45:f9:f2:f8:d7:28:9e:b5:1f:9c:d7:6d:41:cf:
                    24:90:ff:4f:4a:a5:2c:b6:f3:bb:e8:35:e0:6b:11:
                    96:80:66:7d:d3:ce:a2:6d:02:99:d0:c8:30:2b:bb:
                    03:b8:14:4d:51:27:7a:b8:1d:06:3e:ef:24:8d:fd:
                    3a:28:a1:e7:d3:e3:b4:a4:7b:a6:36:1e:74:9b:b4:
                    f2:45:66:f8:73:2d:49:f5:e9:25:4f:64:91:bb:42:
                    4d:71:7d:57:09:d6:b7:8b:16:65:c6:2e:5f:1c:35:
                    7a:0d:3d:e8:3f:a1:bc:c3:62:47:40:c0:c4:96:4c:
                    31:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B5:A3:11:A1:8E:25:3D:0C:9E:EC:68:90:3A:34:11:2F:72:71:D1
            X509v3 Authority Key Identifier:
                keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:c3:dd:9d:89:23:35:1d:fd:19:61:57:19:c0:52:fc:c4:
         b8:e8:22:6f:0b:61:f3:e4:5c:c8:a0:fc:a2:5e:69:cd:c0:bb:
         6f:a0:de:02:6e:77:09:2e:d9:4c:04:0c:b7:0f:b5:0d:ac:71:
         9d:c8:38:bf:c1:43:08:52:65:33:a0:1c:35:bd:55:db:1e:6a:
         e8:0e:fe:52:7a:58:62:ed:97:8c:05:1b:4c:88:c4:97:2b:87:
         82:39:b8:2c:2c:4a:19:c5:9d:08:c0:ba:11:a3:28:55:29:50:
         0f:b5:48:e0:fe:5e:ea:85:15:40:d8:16:a7:24:96:fe:75:a2:
         2a:ec:fb:2c:c6:d7:41:00:62:5c:38:68:6c:da:d2:73:7b:b7:
         d2:b8:7a:38:e5:17:bd:36:1c:c6:3a:d6:93:fc:31:ef:b9:95:
         de:4a:77:4f:da:4c:36:7a:f0:56:97:4e:d3:5e:8f:98:3c:ff:
         12:99:f2:10:18:2c:dd:07:cf:5c:a3:8f:f1:65:01:73:da:b3:
         70:44:9e:7f:ff:f7:f4:f2:94:1d:80:b6:49:09:f7:75:b0:a3:
         1f:39:81:43:8d:25:21:66:4d:5d:31:1d:50:69:7f:e6:f9:55:
         7a:2b:80:4b:d9:9c:99:6e:d9:94:ff:18:8d:be:fe:db:b5:05:
         8b:48:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:35:30 2024 by rpki-client on console-fra.rpki-client.org