Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft
File:                     INYXvbXXaOOV5JtBzYEhe9MWOrM.mft (raw, json)
Hash identifier:          ivzVCjQ+ENT6w1Cu30qceZfJttuzgGgeRx3y4Ix4R1A=
Subject key identifier:   A4:F7:93:D1:D2:68:FB:E4:8C:45:F5:F4:53:64:6B:8A:3D:DB:07:52
Authority key identifier: 20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
Certificate issuer:       /CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Certificate serial:       018F4AC7019752696092331A0ED6879EDD28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft
Manifest number:          115C
Signing time:             Sun 05 May 2024 22:01:47 +0000
Manifest this update:     Sun 05 May 2024 22:01:47 +0000
Manifest next update:     Mon 06 May 2024 22:01:47 +0000
Files and hashes:         1: INYXvbXXaOOV5JtBzYEhe9MWOrM.crl (hash: rfFCNc/3zSkP6vjqgQd95mwoFS6w+lw9BS83za1YbsQ=)
                          2: f8G5mW9F4NTNvR-ciqR9doELxPs.roa (hash: pRStVUQvssmHho3uLaF/xaQ4mlTT5CnNIo7tUiFVdpA=)
                          3: fXymCcg43rMAKs2mcsEPZsFLWgo.roa (hash: Xv/6UgFRd3Mr3j672h6+YnDJ6G+I38/5fynk5ddKwQE=)
                          4: grz505nrdjgW5a8HdyTkSk9fgY0.roa (hash: QxRCzWcA6nXty7Egh7oq0WwGL6Ksn57uL6+XYj8lc6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c7:01:97:52:69:60:92:33:1a:0e:d6:87:9e:dd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
        Validity
            Not Before: May  5 22:01:47 2024 GMT
            Not After : May  6 22:01:47 2024 GMT
        Subject: CN=a4f793d1d268fbe48c45f5f453646b8a3ddb0752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:57:36:d6:86:b0:f7:e7:18:fb:af:a1:e3:
                    95:aa:91:9d:d2:97:b3:15:a8:cc:f7:a3:75:a0:2e:
                    29:69:65:42:83:c4:c2:e9:36:a7:39:f3:bd:82:22:
                    83:62:31:8e:17:21:f9:2e:20:19:89:fb:c2:80:21:
                    3e:ed:15:ca:74:73:f6:e9:a7:d9:6c:7f:00:48:ef:
                    5b:b4:df:96:1b:30:f2:e8:c4:db:11:df:c3:ad:8e:
                    c1:02:c8:4e:ed:1d:88:91:be:54:a3:5c:17:fb:51:
                    1e:b4:f9:dd:bf:b0:3e:75:f6:e7:13:37:71:58:a8:
                    5e:b7:2a:71:41:ee:99:e1:00:6c:04:02:ef:a2:37:
                    c0:eb:52:e1:da:7c:59:84:57:6f:3b:4b:9a:8b:5a:
                    0b:5a:b8:36:04:74:d6:97:6a:05:f3:d2:a3:1a:a0:
                    2a:81:5c:83:e4:8e:a8:07:61:f9:f5:7f:36:82:f9:
                    b3:e8:13:f1:46:86:bc:92:ea:27:ba:eb:29:7b:da:
                    92:9b:33:3d:9e:5b:84:09:68:21:af:16:ed:e6:d7:
                    0b:91:3e:61:13:3d:26:49:9d:73:6b:43:ac:df:e4:
                    c0:ee:56:b4:60:67:77:0e:39:53:7d:c0:17:57:06:
                    bd:8b:11:cb:87:43:29:ce:84:34:50:5e:e5:53:61:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F7:93:D1:D2:68:FB:E4:8C:45:F5:F4:53:64:6B:8A:3D:DB:07:52
            X509v3 Authority Key Identifier:
                keyid:20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:94:96:8d:22:76:ba:54:90:d7:30:2b:b2:68:ab:e9:e4:24:
         04:f7:66:cb:00:72:1c:8a:ad:ab:72:2b:9f:27:f3:5e:22:0a:
         8a:e2:c1:20:de:a8:66:c2:8f:e8:a5:4b:9d:29:f5:ec:df:e2:
         3f:ad:54:15:69:c0:38:df:ab:56:cc:ef:4a:96:7c:4f:62:2d:
         31:19:f0:dc:61:8b:e7:3b:5b:4e:40:e7:24:50:ae:09:0b:13:
         73:a2:7e:84:38:fd:ea:b9:e6:cb:b2:9e:10:e1:59:a8:9d:b2:
         66:d1:e8:ed:04:bc:86:47:50:ee:5f:5f:a9:55:c3:82:1f:cc:
         a9:7d:53:cc:63:b6:f8:d7:43:69:e3:f1:1e:97:2e:72:e2:c7:
         ef:a7:eb:70:7b:60:d1:da:c2:09:2d:22:85:9e:9b:ef:e2:73:
         30:b5:31:98:07:4d:05:ec:b8:ee:17:2c:a5:0c:40:0b:89:a0:
         96:a5:ec:13:25:58:1d:79:d3:86:b6:b9:74:c2:37:d3:44:77:
         b8:5e:5c:6a:69:de:29:69:64:1d:ea:d0:42:4a:53:26:eb:ab:
         3d:0d:36:cf:d3:1b:93:a5:07:6e:3a:4b:06:5a:ca:db:3d:f5:
         18:46:01:fa:2c:eb:76:17:05:39:75:b7:39:74:98:00:a8:33:
         e0:c3:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:52:09 2024 by rpki-client on console-fra.rpki-client.org