Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File:                     13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier:          WckUxik7mXbgKFtewUvinKBtPthcEHNbqJ/gqKBv+Vw=
Subject key identifier:   23:53:2E:A4:40:C4:CA:A0:02:C0:62:7B:63:5C:39:9B:BE:6D:7E:DF
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer:       /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial:       018F4B6D77195C5883C1F174A73245A7225D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 01:03:36 +0000
Manifest this update:     Mon 06 May 2024 01:03:36 +0000
Manifest next update:     Tue 07 May 2024 01:03:36 +0000
Files and hashes:         1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: 4D46ALufCxS3xqr4BMSDCIKy6UaexfkpViCMkYbq/JE=)
                          2: wqhINxVpVUPttsnmvlz2VrEbNbQ.roa (hash: WmZnorqkJb5HTLnx/m9wIS7fLHnf8Opjcmr0UPEf4es=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:77:19:5c:58:83:c1:f1:74:a7:32:45:a7:22:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
        Validity
            Not Before: May  6 01:03:36 2024 GMT
            Not After : May  7 01:03:36 2024 GMT
        Subject: CN=23532ea440c4caa002c0627b635c399bbe6d7edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:f4:03:15:f8:3d:b5:95:ad:47:ea:78:a7:
                    22:3d:2f:de:7f:34:8c:ab:dc:51:3a:ff:7d:f8:9a:
                    ff:22:5c:58:33:3c:05:dd:4a:e2:94:d1:75:0f:1a:
                    67:72:dc:62:6f:2d:3d:d4:9e:71:df:43:e8:22:3c:
                    ec:3b:68:19:8f:15:aa:d4:6b:3d:ea:dd:a7:df:93:
                    43:43:aa:28:22:7b:6d:7e:64:5f:8a:f2:e3:e6:65:
                    c3:37:0b:b6:6d:be:79:2a:ef:b3:47:5c:a0:ae:7d:
                    b1:cd:fb:57:3b:9a:f6:e1:21:bf:07:06:f5:27:a8:
                    12:c2:0f:40:ae:2b:06:53:45:f9:4a:a7:f7:9e:90:
                    04:c4:30:fc:36:45:f4:3b:7c:8e:03:fa:e0:6f:a7:
                    b1:92:ea:07:12:80:f5:0c:31:c0:32:c9:26:b1:45:
                    f5:89:30:32:e7:30:b9:06:a6:0b:28:48:83:d9:f9:
                    96:e3:9c:08:c4:80:42:52:7d:96:f4:6f:cb:01:d3:
                    75:2e:21:8b:d9:73:6e:3d:5f:bd:ca:13:b4:fb:f2:
                    aa:53:35:e6:e1:33:bb:8b:74:ec:21:a9:60:a5:b6:
                    7c:5f:af:d5:ed:44:16:f5:f4:32:c7:e6:9b:44:4a:
                    1e:b1:0b:54:bc:71:c2:cd:f9:9a:14:8b:d4:0a:9f:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:53:2E:A4:40:C4:CA:A0:02:C0:62:7B:63:5C:39:9B:BE:6D:7E:DF
            X509v3 Authority Key Identifier:
                keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:b3:81:c4:8f:2f:75:40:42:3c:b6:6f:52:8c:12:5a:7c:
         35:24:29:17:8b:af:b6:d6:6b:8b:9d:5d:68:13:f5:ff:91:e3:
         2c:b8:6c:db:94:ce:ad:40:cb:31:7a:e5:06:4e:86:a4:34:3e:
         69:d8:45:85:12:11:33:8e:08:b0:93:16:a7:bb:15:50:f9:11:
         31:80:f1:c7:e1:b0:07:da:76:ee:61:d8:f3:01:0e:ac:d6:bf:
         58:ab:e2:4f:f5:49:5e:0b:b3:05:48:08:85:c8:75:c2:98:5a:
         0a:84:82:7c:d0:44:ce:2e:1f:b6:fa:fd:70:1e:f7:ab:c0:7e:
         e1:ae:b9:de:2a:2e:11:83:c5:96:ce:d7:b7:52:02:cf:04:11:
         79:38:f8:e0:be:c5:85:b2:42:ec:8b:6e:ce:69:ef:87:75:d3:
         78:99:ac:57:60:d1:f4:81:24:69:93:4d:82:a6:57:a3:21:b8:
         da:06:c1:bc:13:bf:52:d6:be:27:87:d9:97:c1:b7:b0:a6:bc:
         21:63:ca:f6:59:0c:d2:44:5d:e5:ae:88:df:d5:6b:30:03:3a:
         ac:a3:23:f7:7d:05:d4:01:eb:67:37:50:b5:68:a6:fb:16:6c:
         97:87:9f:3d:a4:54:06:4a:96:36:ef:c7:f1:4d:9a:79:b7:72:
         02:da:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:08:14 2024 by rpki-client on console-ams.rpki-client.org