Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File:                     Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier:          Ohp/oecuGbNrsi+CJ/yEbq5iD8N6ThHBFvG2pkLOfxM=
Subject key identifier:   52:C8:1C:A8:D8:35:A5:28:1D:97:27:1A:1A:D8:72:C6:98:CE:74:5F
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer:       /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial:       018F5136F8FE0DF568298E6048F955822CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 04:01:48 +0000
Manifest this update:     Tue 07 May 2024 04:01:48 +0000
Manifest next update:     Wed 08 May 2024 04:01:48 +0000
Files and hashes:         1: AWDGlLSPTHsT8ccmfgBdlZumMc4.roa (hash: ry8zFoxoFQG8Hel8vUbhmIJm+gkmqHSCQWP+i3/IEmU=)
                          2: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: VtwXcS+fQnWWGhqBfNSK9mjDUfFMuS4Y/3830TixxTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:f8:fe:0d:f5:68:29:8e:60:48:f9:55:82:2c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
        Validity
            Not Before: May  7 04:01:48 2024 GMT
            Not After : May  8 04:01:48 2024 GMT
        Subject: CN=52c81ca8d835a5281d97271a1ad872c698ce745f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:60:0a:0b:dd:89:e5:34:60:e0:30:f5:6b:
                    6c:c3:09:14:e0:1a:a4:65:87:20:36:46:b3:5b:0b:
                    94:3b:84:a4:5f:bc:1f:98:de:16:dc:9b:6d:42:66:
                    6a:7b:e4:c4:ca:c5:6f:0f:13:35:f2:9e:1d:ad:5a:
                    6d:cb:fe:82:17:28:73:ba:3f:a0:3a:fb:b9:cb:a3:
                    44:7f:bd:d9:f8:b2:a2:04:d6:17:2b:1e:a3:cf:5b:
                    b2:c3:3f:9b:72:78:3b:f7:f9:b6:35:a4:e9:43:96:
                    aa:b2:71:d2:46:bd:5a:27:f3:d2:a1:7d:a9:2c:37:
                    56:fa:78:19:a3:a7:c0:bc:d0:3b:13:1e:96:db:4b:
                    da:77:38:c8:63:ee:44:ca:5d:b0:36:ee:f7:cf:e9:
                    52:58:a0:55:c3:8f:ef:ed:29:31:27:38:47:f1:1a:
                    5f:0c:f7:ff:eb:3e:1b:5f:04:2a:2b:ce:63:c6:f1:
                    54:b6:07:5a:88:3b:07:cb:71:8f:bc:7c:6e:ee:6e:
                    89:a8:c2:96:04:86:2a:30:c2:6f:af:8a:1e:2b:6f:
                    3a:54:56:e1:6d:d1:0a:96:2a:dc:11:b8:9c:26:df:
                    e9:30:1d:6c:21:13:96:e9:cf:ef:36:18:69:c7:ef:
                    9f:8e:1c:35:9e:d5:d3:68:ba:d0:2c:d5:13:61:d3:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C8:1C:A8:D8:35:A5:28:1D:97:27:1A:1A:D8:72:C6:98:CE:74:5F
            X509v3 Authority Key Identifier:
                keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b6:c1:f9:10:e1:2e:93:6f:82:dc:ae:dc:3b:3a:82:a7:ef:
         54:d2:d7:d5:31:ce:90:37:ce:29:f5:25:7c:fb:0c:ad:eb:95:
         b2:48:ac:81:23:ea:f6:74:ea:8e:46:1b:fd:81:a2:e4:00:48:
         14:bd:5d:09:cf:12:21:3d:55:67:ec:93:8a:a4:83:25:d7:09:
         ad:73:f9:ac:88:06:24:ab:f2:7c:ed:f9:3c:40:35:99:2c:cd:
         6a:b6:37:70:ab:c3:b0:54:81:11:95:e3:be:be:44:dd:23:01:
         37:d4:bf:ed:61:07:b2:7d:87:cf:78:6b:0e:4a:55:dc:9f:e7:
         05:c0:2b:03:e5:f0:e7:70:bb:ec:d2:28:81:5e:22:80:2a:91:
         1e:fa:9e:68:f4:66:f0:2b:84:4d:55:8e:e8:f7:89:33:7e:49:
         46:47:20:a1:18:55:3a:99:12:27:85:de:2a:a8:33:af:8e:e6:
         c6:11:fb:45:34:3e:d4:d6:1e:65:9f:22:5e:9a:e7:9e:d7:1f:
         3a:34:56:4f:77:89:5c:fa:d6:2f:e9:0c:39:ec:9b:e3:83:99:
         41:fe:9d:3d:57:ef:4e:cc:20:fc:f3:b5:c0:7a:19:72:96:e7:
         f3:6c:db:42:cf:a3:05:2e:52:7a:1f:35:19:ee:16:34:e1:15:
         14:5a:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:06:07 2024 by rpki-client on console-ams.rpki-client.org