Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File:                     1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier:          pAkemqpGFGTPddQv6Vu4qSrJE3YLKN0xufaPoC3ZM3Y=
Subject key identifier:   5C:AA:F3:E5:D4:CC:07:18:BE:BC:1D:00:C8:E6:F6:C2:B7:E7:6D:A3
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer:       /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial:       018F54379B98A10FFBD0A65ABFD331BF7A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number:          115D
Signing time:             Tue 07 May 2024 18:01:21 +0000
Manifest this update:     Tue 07 May 2024 18:01:21 +0000
Manifest next update:     Wed 08 May 2024 18:01:21 +0000
Files and hashes:         1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: SmrulsZQpRMvQMSkmfy05B10Ti7kPdC20S4cZdbp5AU=)
                          2: K1nNj8QvCdpZReVbybBnUTHjrUI.roa (hash: nqNus7iInZh+GfpovpKsy8YNvegjUx96jVEh8vyh5I0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:9b:98:a1:0f:fb:d0:a6:5a:bf:d3:31:bf:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
        Validity
            Not Before: May  7 18:01:21 2024 GMT
            Not After : May  8 18:01:21 2024 GMT
        Subject: CN=5caaf3e5d4cc0718bebc1d00c8e6f6c2b7e76da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:bc:7b:b7:4d:cd:4d:56:af:ee:35:e1:55:
                    18:54:7e:a2:df:03:cd:6d:f8:94:53:5b:30:fc:31:
                    77:b1:37:26:c1:08:74:f8:f4:cb:11:41:b7:d6:52:
                    f1:2b:65:c4:33:57:b9:4b:2d:b8:4b:bb:9c:99:dc:
                    33:4b:94:90:c0:af:9e:23:80:69:65:4a:c4:c8:5b:
                    c7:17:32:76:bf:de:be:f9:99:0b:cd:78:03:d4:f2:
                    47:91:9e:97:00:40:d5:3f:05:43:b0:03:8c:39:57:
                    90:27:22:1a:f0:71:8a:74:9e:64:04:93:3e:97:cf:
                    f9:b0:9d:4d:47:53:fa:2f:b0:c0:fd:86:3e:e9:78:
                    f8:6e:41:d2:e4:3b:e5:0f:c8:ff:39:4e:e4:c2:03:
                    1d:1a:7a:86:f4:36:7b:2e:57:ca:bb:6c:1c:f6:70:
                    21:54:8f:a3:c8:68:34:a1:31:be:e7:c5:3b:9f:fc:
                    8e:fa:9d:9c:82:65:68:40:c1:bd:69:ad:67:b6:38:
                    10:b5:05:82:37:60:96:3c:bf:8e:e3:cf:25:33:5f:
                    93:ff:15:5b:e2:53:ad:60:08:39:a8:e8:bf:e6:e5:
                    c3:eb:53:91:52:8a:3f:7b:53:f8:95:85:23:d5:15:
                    e2:15:ba:ef:46:f8:f4:59:7f:dd:e7:74:ae:3b:fc:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AA:F3:E5:D4:CC:07:18:BE:BC:1D:00:C8:E6:F6:C2:B7:E7:6D:A3
            X509v3 Authority Key Identifier:
                keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:30:c2:66:ae:1a:2f:69:68:8b:b0:c2:16:de:06:93:b6:25:
         3a:56:c8:26:17:bc:c4:69:46:6c:c3:87:3a:5e:89:69:5a:2b:
         08:06:7a:d9:f9:6e:6a:59:cb:0b:f2:a2:92:e0:cc:18:b7:6d:
         3d:a6:87:51:71:f8:11:80:83:9f:b4:dd:8c:c7:e8:7c:ef:18:
         33:e2:ef:85:82:48:c8:27:00:0a:a7:a4:4a:fd:ed:55:6e:46:
         aa:a8:0c:2e:9d:fa:2f:3f:33:82:3d:e7:2b:6b:16:75:4c:6c:
         14:e8:7b:76:dd:b7:7d:06:76:1f:03:6b:25:0a:b0:29:08:39:
         a3:78:bc:d0:6b:bc:61:e7:12:03:89:8f:c2:58:c4:6c:7a:f0:
         f6:e4:59:4c:b7:07:40:74:df:4b:98:37:fa:55:b6:c4:ce:30:
         9c:44:e0:c7:8a:1f:92:a0:d5:4f:35:cf:5a:21:f4:b0:98:24:
         dc:f6:6a:66:68:28:e0:55:f7:27:11:8f:87:84:60:d1:00:5a:
         96:86:1a:6a:3d:f0:a7:bb:0c:34:fa:9d:85:e6:4a:7a:48:70:
         1c:7e:89:37:c1:e1:b4:d6:e8:12:28:6f:3a:43:be:24:05:24:
         61:e7:4d:81:7e:7b:de:81:0e:d2:5f:a6:04:0f:b6:67:5b:a2:
         e0:70:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:25:28 2024 by rpki-client on console-fra.rpki-client.org