Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
File:                     95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json)
Hash identifier:          aq63/NsvIV4CiW3Q091CKw/Bzl+KCPDWeioGyI5Ufcc=
Subject key identifier:   B7:14:57:CF:13:24:04:C1:55:32:B4:F1:09:E8:BD:D3:0B:22:8D:77
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Certificate issuer:       /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial:       018F362D45B58BC906524E569AF884C14D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
Manifest number:          114D
Signing time:             Wed 01 May 2024 22:01:27 +0000
Manifest this update:     Wed 01 May 2024 22:01:27 +0000
Manifest next update:     Thu 02 May 2024 22:01:27 +0000
Files and hashes:         1: 89TID-tLtQCf-sFJAyNozjU211o.roa (hash: ZgJIfp0V6uNun9ZbhJeQRkJ6iirxMXrMu7LoKmoR44Q=)
                          2: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: ig3UII0OppDyHmT8VbhBXPSFRoM0P6BjSQX8gKD8ncA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:45:b5:8b:c9:06:52:4e:56:9a:f8:84:c1:4d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
        Validity
            Not Before: May  1 22:01:27 2024 GMT
            Not After : May  2 22:01:27 2024 GMT
        Subject: CN=b71457cf132404c15532b4f109e8bdd30b228d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:76:0f:3b:8c:b9:20:b3:f3:f0:d2:cb:43:
                    6c:00:e1:0f:29:4d:ee:a0:17:ff:29:1c:70:87:75:
                    21:a2:b4:c3:4d:00:f6:95:ad:ca:d5:43:eb:65:d6:
                    ea:3b:32:76:34:b5:aa:b7:9e:71:47:77:12:5c:29:
                    3b:9d:80:e1:ee:3a:4e:c3:ae:4e:4d:56:d5:75:bb:
                    96:27:e1:f6:b2:00:23:f4:3b:4c:30:bb:72:ce:d9:
                    3f:32:64:07:a9:8f:24:57:36:2e:db:f0:62:3b:43:
                    fc:1c:8c:1b:4c:86:65:9c:bf:1b:af:0b:65:ec:3e:
                    d3:20:1b:ab:20:2c:e0:a8:71:5b:46:f1:53:e3:85:
                    cd:78:9d:a6:a1:44:84:16:bd:e3:76:0f:65:86:89:
                    a7:07:12:5f:97:0e:40:96:38:0b:f5:7d:07:e9:8b:
                    a0:af:8d:82:e7:37:48:34:d2:a7:e8:30:cc:c1:c9:
                    6a:97:b2:ae:51:45:ca:98:cf:72:99:7c:e6:de:23:
                    20:63:06:bc:68:2e:75:fd:89:bc:d9:49:f6:e6:0f:
                    86:97:12:25:be:93:94:7e:db:50:d5:e3:37:c2:ad:
                    e5:86:8c:64:a6:bd:19:0d:de:73:98:7d:1c:bf:df:
                    3c:f0:88:82:0c:ec:3c:95:03:a0:cf:76:44:53:5b:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:14:57:CF:13:24:04:C1:55:32:B4:F1:09:E8:BD:D3:0B:22:8D:77
            X509v3 Authority Key Identifier:
                keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:10:bf:d8:4a:3e:ac:38:d1:c4:b9:bd:44:ae:04:65:04:23:
         45:5a:a8:28:cf:b9:f9:7e:2d:79:24:fb:5f:eb:02:97:5a:ab:
         2c:89:b0:f5:c2:e8:c1:27:ee:0f:92:30:c9:f1:06:b0:a6:3f:
         7d:e2:1c:e7:35:de:48:ce:d6:95:01:60:a9:3a:67:13:7a:b3:
         7f:74:de:8e:13:b6:04:39:c1:b9:1e:fd:75:ee:cc:e9:30:2f:
         66:a7:38:54:60:bd:81:37:60:47:5c:24:9e:dd:51:ec:40:a7:
         8b:96:55:1f:af:77:66:10:56:85:4b:7f:d8:c1:60:24:1a:b1:
         58:f8:ad:ac:ef:53:d9:74:9b:8a:8b:9b:bb:3f:71:49:be:72:
         66:55:46:6f:c7:7a:13:4e:15:26:3f:65:ad:23:8c:04:28:d8:
         83:5a:d2:1f:01:31:1a:27:d0:52:0c:60:f6:be:5b:be:3d:df:
         43:29:58:e7:e9:c8:9c:b4:cc:98:f7:2f:dc:72:95:a4:d9:f1:
         c8:1c:d9:3f:c7:e6:45:e8:53:93:14:36:d6:4f:10:03:dc:b5:
         01:ce:c9:24:a0:3f:2f:ab:f5:80:41:f0:57:8a:f4:a9:67:b5:
         7f:98:4a:52:8d:83:76:90:1e:96:01:c8:0e:ce:1f:6c:9c:f0:
         85:d9:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:19:27 2024 by rpki-client on console-ams.rpki-client.org