Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File:                     1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier:          3zH01zjP0gvEaYOIDDCeahPFoAUfvod+n0v7UAcvBTs=
Subject key identifier:   2F:05:68:5C:5B:6D:E4:D8:FA:B5:92:34:A8:1E:DF:51:C0:3E:BC:39
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer:       /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial:       018F381D1A4CE4C9384095BC3E703F5DA8F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number:          114D
Signing time:             Thu 02 May 2024 07:03:02 +0000
Manifest this update:     Thu 02 May 2024 07:03:02 +0000
Manifest next update:     Fri 03 May 2024 07:03:02 +0000
Files and hashes:         1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: +SpR7R2bh4Sb3QigSzpVXV5CHEYXfxGe5ne7rBr8AUc=)
                          2: b3jsWEfXDUriMLk8dvmgQlDfA7c.roa (hash: Lqzimu8KgwTNnm81VRbHI43XeOHxzlaUmcN7wk40POs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:1a:4c:e4:c9:38:40:95:bc:3e:70:3f:5d:a8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
        Validity
            Not Before: May  2 07:03:02 2024 GMT
            Not After : May  3 07:03:02 2024 GMT
        Subject: CN=2f05685c5b6de4d8fab59234a81edf51c03ebc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:4f:54:14:14:b9:58:b2:7d:ca:4c:61:86:
                    86:68:55:f9:4b:7e:2c:06:fa:e7:18:68:0d:e3:f4:
                    bf:f5:71:a0:5b:c6:bc:66:bc:70:e7:8d:fa:07:d7:
                    3a:7c:b1:d7:7b:7a:41:67:86:86:ce:8a:1c:60:3d:
                    f9:33:05:88:80:66:b1:63:e6:ba:48:cf:04:47:27:
                    3b:a7:e5:14:04:20:08:ad:32:c1:e7:08:1b:c8:ec:
                    e0:c2:0a:b4:82:20:d3:fe:4d:3b:e1:4a:75:6c:23:
                    e3:c7:a3:17:d1:26:df:f8:dc:ec:78:17:1e:69:cf:
                    8c:17:83:67:e4:e6:d4:f3:b5:24:15:c9:fa:8c:93:
                    3b:8e:73:48:4a:51:79:54:06:91:ca:bf:62:b4:70:
                    f9:13:e8:1a:e3:44:73:e5:3f:29:e4:96:38:13:32:
                    4d:42:1a:7d:59:83:e6:a8:17:92:c8:1d:06:49:94:
                    ee:4c:f0:17:37:6a:56:09:c0:59:eb:a8:30:e8:26:
                    f4:99:89:4a:bb:88:80:15:ff:35:ef:47:7a:6f:b8:
                    7a:a1:65:23:1e:8c:83:90:4e:1f:25:03:69:ab:70:
                    b7:f3:e0:8d:ff:9c:dd:a5:fc:16:33:29:fd:5a:9c:
                    3f:4c:69:6f:a5:21:42:f7:e6:5c:70:30:c8:00:8b:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:68:5C:5B:6D:E4:D8:FA:B5:92:34:A8:1E:DF:51:C0:3E:BC:39
            X509v3 Authority Key Identifier:
                keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:b3:a0:f6:cc:60:b7:db:31:4d:86:88:29:85:58:7f:59:
         aa:78:dc:cd:17:59:8c:cc:b6:d4:df:d0:15:4d:89:aa:35:57:
         59:32:d4:1c:e9:40:d3:4a:be:dc:56:43:62:cf:60:75:9e:a5:
         9a:f7:ce:15:a4:c9:b0:5d:d1:8d:f1:78:83:1e:84:de:0d:bb:
         2a:29:cb:a3:c5:30:89:b6:da:ed:aa:4b:e6:27:51:02:31:44:
         d4:38:41:c5:20:9e:6a:0c:8c:2a:81:dd:f2:75:31:7a:0b:b9:
         ac:fc:d9:58:7e:d4:27:28:a7:32:5b:52:a3:98:48:b8:ad:52:
         85:6f:e3:7d:af:0f:f8:e0:a5:50:f0:19:eb:86:97:de:56:fd:
         fc:d0:da:a3:51:ed:4e:42:d7:22:24:dc:86:b3:d2:29:c0:a7:
         ef:e8:a9:3b:d8:3c:92:7c:24:21:34:e1:f8:4f:85:12:84:a4:
         af:f6:6b:7e:7d:d9:14:02:df:f1:01:f7:8a:85:12:1a:a7:63:
         10:da:ae:a8:65:46:14:4b:a4:18:03:77:be:e0:27:d7:7d:f8:
         75:a1:14:57:db:0d:29:00:35:66:4a:c7:bb:c5:c5:b9:0a:ec:
         e2:f7:0f:61:31:cd:cb:ee:40:6f:ea:a7:50:d9:e6:2f:b9:3e:
         a8:1c:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:15:47 2024 by rpki-client on console-ams.rpki-client.org