Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File:                     1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier:          6nk9NzjNcP8teP180C4l/X7oLra+ba4WrgAasJjsqtY=
Subject key identifier:   2B:2E:9D:45:77:FF:F2:11:46:C2:A6:B7:85:7C:92:23:39:54:00:39
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer:       /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial:       018F2D601E02F88EA773AA3785415520A4EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number:          114F
Signing time:             Tue 30 Apr 2024 05:00:24 +0000
Manifest this update:     Tue 30 Apr 2024 05:00:24 +0000
Manifest next update:     Wed 01 May 2024 05:00:24 +0000
Files and hashes:         1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: GJ5BrHEDX2bWv4haR9gB1tZ0ti6fda+xTaYIxs1KZ8Y=)
                          2: FZ4EyeZPgcLx8EWSjF_PgComLSA.roa (hash: wzk57mH1eQ++iAp9iqP2Glc4ZWew96fth2RQ3cubb2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Apr 2024 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:60:1e:02:f8:8e:a7:73:aa:37:85:41:55:20:a4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
        Validity
            Not Before: Apr 30 05:00:24 2024 GMT
            Not After : May  1 05:00:24 2024 GMT
        Subject: CN=2b2e9d4577fff21146c2a6b7857c922339540039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:4a:ba:26:86:58:bb:39:26:d8:b1:4c:90:
                    d0:0a:9d:79:18:95:c0:d3:c3:16:30:61:8a:6a:2a:
                    c3:13:fa:c6:d1:7e:ef:b1:65:a8:33:42:e4:c5:a0:
                    1a:13:16:1d:bd:5c:fa:76:15:04:8e:98:4b:34:8f:
                    e2:ca:57:34:3e:23:9f:7d:60:94:f2:9d:72:71:20:
                    c1:84:ca:58:5c:c2:0d:10:80:83:1b:33:a2:6f:7a:
                    cc:dc:b4:14:e7:88:3e:65:82:03:2d:31:09:b8:14:
                    d1:06:5e:72:75:a9:e1:cc:a4:c8:f0:eb:0a:79:f5:
                    b4:4e:8a:23:c2:db:3b:24:76:ce:a7:41:0d:7f:46:
                    35:77:13:b0:b5:a4:d8:04:aa:be:53:e0:06:9f:b9:
                    8b:a9:38:2b:75:3c:70:f0:6c:dd:d4:77:38:74:ad:
                    1d:21:e9:46:13:13:eb:37:a9:c4:54:cf:1b:b1:58:
                    33:b9:02:27:4d:6a:6c:97:e9:67:b3:c4:c5:9a:cb:
                    c4:3d:12:86:46:dd:11:d2:b3:81:ab:a7:a0:5c:1b:
                    8d:f8:f8:0e:ad:52:74:f3:f6:29:72:a1:ee:11:c0:
                    4e:7d:af:20:d9:3f:0f:2a:19:9f:01:48:22:ff:33:
                    d7:ff:5d:73:45:59:bc:1e:fa:50:86:2e:54:3f:45:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2E:9D:45:77:FF:F2:11:46:C2:A6:B7:85:7C:92:23:39:54:00:39
            X509v3 Authority Key Identifier:
                keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8d:bb:0c:17:cb:6f:85:ff:b6:0f:e2:49:31:b4:11:77:74:
         97:83:da:3b:9e:4f:b9:c1:6f:90:c5:59:25:f7:ec:61:c6:49:
         db:3a:c8:f6:0d:ef:4b:7f:d3:67:22:e0:52:cc:6f:c9:8d:87:
         22:39:72:f9:e7:65:4c:88:af:37:dc:0c:8d:e4:39:e0:ec:9d:
         2e:d5:5b:b1:35:ba:43:de:0e:ca:ea:96:b3:07:1a:21:6e:08:
         ff:6c:4b:0b:42:19:81:90:99:b2:a7:6f:17:fa:50:d7:a1:5f:
         60:87:4d:ff:10:b1:8c:22:93:ee:6a:80:99:35:a2:68:ff:6d:
         e1:95:86:c7:dc:b3:12:a9:0b:cc:c5:d8:21:fb:cd:da:46:28:
         6d:21:de:0f:13:4b:13:28:57:93:b5:3a:03:fe:95:5b:df:58:
         62:62:fd:a5:07:9e:5f:42:8e:3f:33:01:95:23:36:89:83:16:
         f5:67:39:19:1a:49:94:4f:35:36:dc:78:80:94:b0:3d:bc:70:
         dc:5b:5a:ab:61:c6:0c:c4:8a:14:13:66:79:97:d0:19:55:28:
         f5:f9:67:c2:46:5f:fa:d5:f8:0a:ea:d0:39:bd:42:1c:c8:b2:
         43:d5:74:ae:15:45:4d:68:da:32:5b:81:0d:8c:3c:79:ea:be:
         fc:7b:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 08:00:28 2024 by rpki-client on console-fra.rpki-client.org