Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File:                     dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier:          wmtmvTStA5GNWWUVGQk0ntTbqtXH5fQh0qbFKyLfygg=
Subject key identifier:   F8:21:9F:DE:18:68:30:96:B4:94:A0:3E:C9:4F:78:4D:01:DD:52:49
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer:       /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial:       018F874A2394E5D3733EFD09397F89D219C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number:          0915
Signing time:             Fri 17 May 2024 16:02:13 +0000
Manifest this update:     Fri 17 May 2024 16:02:13 +0000
Manifest next update:     Sat 18 May 2024 16:02:13 +0000
Files and hashes:         1: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: DmA+ksuOLl2AohvcfuJ5ic9VX3S53m3KZQWQj3BRR6o=)
                          2: p1G3SPjQtuVqLbTqD5pbOBQ-g6w.roa (hash: au3O9BcRAP0sNjAfiDBgY1OpADJ6xp7vVwLr8c9aOpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:23:94:e5:d3:73:3e:fd:09:39:7f:89:d2:19:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
        Validity
            Not Before: May 17 16:02:13 2024 GMT
            Not After : May 18 16:02:13 2024 GMT
        Subject: CN=f8219fde18683096b494a03ec94f784d01dd5249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:ba:91:f3:f3:82:2c:cf:29:15:80:7d:07:
                    b4:28:1c:73:ec:08:29:b2:76:b2:85:f8:85:1b:31:
                    ca:f6:8b:0d:9f:4e:c8:0b:00:27:c1:62:df:09:9b:
                    a9:76:fb:c3:30:a0:72:f5:f9:5a:8c:f7:27:cf:80:
                    f9:af:21:30:96:37:ea:6c:65:c4:ea:c3:7b:1e:5d:
                    af:ef:e2:df:60:bf:83:58:d1:b1:3f:6d:c7:43:9f:
                    1a:91:1c:c4:bd:c5:c3:86:4c:f2:c9:a6:d3:7f:53:
                    d0:7e:b5:5a:29:ba:a3:22:77:d0:b5:81:4f:2f:4d:
                    f7:cf:b5:f1:bc:da:cf:fa:22:d6:34:7d:a4:18:f7:
                    64:af:09:75:ab:00:8f:c8:98:ad:a2:fb:b5:da:11:
                    7c:50:e3:df:8d:df:34:3e:61:75:c7:25:7c:6f:a6:
                    33:c3:69:6b:35:ba:d4:c4:04:54:c3:ca:da:88:ed:
                    0b:ae:ef:f3:f6:cf:fe:08:ea:43:8d:55:9d:33:b3:
                    c5:3b:4a:7e:d1:c4:01:f4:2f:fa:ea:b5:b6:27:a1:
                    29:35:11:93:ae:55:a2:94:f6:1d:4a:8e:69:3f:0e:
                    9a:1b:94:dc:ec:d9:c8:f7:40:1f:5a:81:f3:e6:d0:
                    b7:a4:23:c0:65:18:4e:4c:ff:61:63:c0:62:ba:f6:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:9F:DE:18:68:30:96:B4:94:A0:3E:C9:4F:78:4D:01:DD:52:49
            X509v3 Authority Key Identifier:
                keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:48:2e:e1:62:ca:c6:eb:35:93:89:2f:05:e7:bd:f0:24:
         5e:0e:83:48:38:a1:18:02:d6:18:0e:43:17:b7:f8:90:49:e5:
         43:2b:7e:ba:f3:e3:03:cb:db:f9:e9:0c:72:a3:7b:2b:f0:0d:
         34:d8:46:d1:ab:c6:a7:08:9c:10:88:05:f0:d1:0b:2b:f2:66:
         04:68:d5:88:80:8e:39:a8:fd:54:65:46:4a:0c:04:0d:35:0f:
         d7:f1:af:b5:c7:88:ec:1d:b8:7b:c8:0e:2c:38:b2:37:6f:c5:
         50:6c:c5:67:96:3d:64:0a:35:4a:63:74:3e:96:f0:e4:2c:f6:
         f1:10:fa:69:bc:cb:fb:26:b3:77:c1:88:14:b2:d2:13:09:70:
         80:db:b6:7b:c4:b3:4b:2c:39:7a:80:48:5b:bc:a3:10:ac:1d:
         d6:88:fa:c0:5d:d1:b4:25:71:e5:17:bc:94:ce:93:23:b3:b8:
         e0:f8:8e:e2:74:f2:fb:43:2e:2d:a6:c0:cd:39:bf:3a:fb:88:
         8f:50:9e:7b:c6:ee:18:05:58:36:1c:bc:c5:ab:90:ac:c7:4d:
         62:09:ee:10:ee:50:e3:3e:e3:0e:34:ec:6b:f6:68:de:f9:bc:
         4d:16:57:95:5c:a6:b5:bc:ff:93:b0:6b:e4:82:ba:ee:50:8a:
         5a:9a:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:45 2024 by rpki-client on console-fra.rpki-client.org