Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File:                     IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier:          NBFkaLt106TBV3K+UxwWu7+z8uleGczAj5uV9nvOotA=
Subject key identifier:   4F:C1:19:7C:A4:AC:6B:C3:E0:9A:3C:26:D9:A1:53:80:DC:6B:B0:A8
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer:       /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial:       018F527FF6D16F373730D1EEAFD97F6600DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number:          115A
Signing time:             Tue 07 May 2024 10:01:08 +0000
Manifest this update:     Tue 07 May 2024 10:01:08 +0000
Manifest next update:     Wed 08 May 2024 10:01:08 +0000
Files and hashes:         1: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: /61Hmhb7NfghiqCCDGk/gisIwSo/aoIqA7WE9X3wGCI=)
                          2: p09rUFvZ_HH6qe5iMJqboSH7et0.roa (hash: 2Svcx+uOrWOdm8h0G14BKlDf7GUbANonZ7wD7tBJhyk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:7f:f6:d1:6f:37:37:30:d1:ee:af:d9:7f:66:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
        Validity
            Not Before: May  7 10:01:08 2024 GMT
            Not After : May  8 10:01:08 2024 GMT
        Subject: CN=4fc1197ca4ac6bc3e09a3c26d9a15380dc6bb0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:e1:45:86:fb:59:e0:c2:87:78:e2:f0:d1:
                    72:ec:a6:fa:13:fe:4e:64:6a:73:80:11:55:36:fb:
                    0b:09:6d:08:2f:93:83:43:be:5a:5b:94:9e:65:2c:
                    e1:61:7f:ed:9b:1b:c3:7e:10:f0:b9:d0:54:b3:54:
                    d2:b6:f8:45:38:53:4f:05:8a:fc:73:62:85:89:f4:
                    92:cd:73:b9:15:2f:a0:b2:2f:e9:5e:46:56:36:a3:
                    4b:cd:5e:c3:d8:b8:66:4c:24:b9:5e:6e:ff:1f:b0:
                    42:db:63:84:1a:08:a4:ed:bb:8c:a6:a7:df:2a:ea:
                    30:f5:97:3b:64:58:b9:76:50:79:d2:54:f7:27:63:
                    9c:ba:b0:a5:04:c7:22:1e:cc:a7:dd:9e:3d:12:96:
                    d9:ff:ad:5b:ac:9a:41:91:3d:ef:eb:7d:49:8f:5e:
                    3c:9c:bc:3e:55:8c:f3:66:18:1c:cd:a0:1b:5b:4e:
                    92:ee:12:f5:a6:d8:9a:1f:74:4f:e2:38:7f:86:72:
                    89:e2:71:82:0c:7c:2b:07:1e:89:bf:72:e4:72:ac:
                    45:c4:a6:8b:97:e4:58:38:44:96:6b:23:7c:0f:6d:
                    67:b9:18:73:b4:ba:fd:ae:44:00:49:ea:71:86:37:
                    db:2a:cb:e4:0a:9c:80:81:0e:3b:2b:ac:43:71:dd:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C1:19:7C:A4:AC:6B:C3:E0:9A:3C:26:D9:A1:53:80:DC:6B:B0:A8
            X509v3 Authority Key Identifier:
                keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f8:ef:dc:5d:63:b5:ee:d5:5b:34:f5:18:74:88:4b:8c:15:
         51:49:a8:1d:ab:f9:a2:90:74:c0:ec:9c:c4:c0:c3:b2:7b:2b:
         50:b8:53:1a:22:a8:9f:80:9a:b8:9c:fd:c5:2c:d8:2d:ca:13:
         23:18:5f:ea:11:8a:eb:6d:e1:92:99:37:d7:31:71:5e:09:63:
         1f:b7:4b:02:c3:e5:f7:2d:6b:f7:fc:21:ae:c7:e5:f4:6d:a8:
         82:79:ac:cf:29:c2:2f:61:22:56:19:c3:2a:3e:25:16:1c:ed:
         c9:9d:ff:38:70:52:f2:4c:f0:6f:e9:a9:63:ff:df:77:f7:e2:
         f0:ba:ea:38:17:f6:a2:04:5a:d1:b3:70:10:c4:f5:36:08:34:
         78:a9:56:b5:fd:8c:91:62:99:0e:2b:62:68:ae:e9:6e:d7:d7:
         71:5c:cf:73:8c:e8:54:e5:48:7c:fe:ce:52:0d:93:8a:f7:21:
         8f:ec:77:f5:2d:df:4f:a4:64:55:8f:13:6e:67:36:be:80:fc:
         90:f0:cf:f1:9b:65:72:9d:1b:24:ed:22:d4:92:97:e5:03:4d:
         d2:43:e7:a8:a2:24:bf:a5:41:94:4f:4b:42:39:4a:50:c1:44:
         93:7f:a1:c0:d3:ed:92:ae:92:6b:90:2c:32:60:34:05:ca:6f:
         be:b3:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:34:51 2024 by rpki-client on console-ams.rpki-client.org