Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
File:                     1ikBDNsLMSwy4Hqvm3INc9O806s.mft (raw, json)
Hash identifier:          cBp1jWfopAbbpe5/FAnHUlK3MoTBZHXUVJxqKidK3oM=
Subject key identifier:   24:8D:97:02:98:84:80:BB:E1:3A:1B:7B:E1:15:37:64:F9:D7:74:4A
Authority key identifier: D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
Certificate issuer:       /CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Certificate serial:       018F4B6CAF1250CB9D4AC6AE114DA957F71D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 01:02:44 +0000
Manifest this update:     Mon 06 May 2024 01:02:44 +0000
Manifest next update:     Tue 07 May 2024 01:02:44 +0000
Files and hashes:         1: 1ikBDNsLMSwy4Hqvm3INc9O806s.crl (hash: Xyb36pWUYNfqM/6/MSBRYmti4nKpj+CSUdQZkhEyShs=)
                          2: oQamNnOe5T5nIYQEHPRqQXGQjIg.roa (hash: wjgcU9yRznIEf8wuTWofBSKmkBYug6IPiU6SJqQ0J+U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:af:12:50:cb:9d:4a:c6:ae:11:4d:a9:57:f7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
        Validity
            Not Before: May  6 01:02:44 2024 GMT
            Not After : May  7 01:02:44 2024 GMT
        Subject: CN=248d9702988480bbe13a1b7be1153764f9d7744a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:50:5e:f0:70:ed:22:fe:af:36:c1:7a:1f:
                    c2:f2:e2:9b:46:e0:f5:1f:aa:0a:76:1a:1e:83:0d:
                    3a:f0:ba:d7:1f:97:75:08:22:9b:b4:ac:1b:ae:11:
                    a5:3d:90:76:e5:60:62:b9:47:43:a9:d2:66:64:e7:
                    05:97:37:4b:8b:27:b5:a9:ca:e0:35:fb:1d:57:09:
                    f7:11:b9:9d:53:10:53:aa:c4:2f:97:f1:4c:c9:08:
                    28:80:2d:61:90:8c:a8:6a:35:00:0b:ac:f1:c2:61:
                    a5:ba:fc:6f:d7:0c:c6:8e:1a:f8:9c:aa:05:72:34:
                    46:8a:70:62:9e:16:d9:16:ee:65:84:2f:10:8a:17:
                    23:d1:08:c5:8f:61:59:5b:b4:3d:7d:10:87:f9:69:
                    1f:fe:e7:da:fa:f3:46:4f:09:bb:0d:4d:91:f1:7a:
                    81:2d:c2:07:2e:e4:a1:81:68:a7:5d:39:2a:6c:e4:
                    a0:c4:0f:50:61:61:c9:c1:e2:d2:b2:92:c8:7e:3a:
                    71:b5:25:f4:35:4d:a5:97:f0:f8:9a:bb:d0:4a:2a:
                    76:86:b0:59:42:35:fa:b1:c9:d1:4b:28:b0:ad:37:
                    31:f6:81:7e:73:ca:53:fe:6d:e4:00:dd:de:71:ad:
                    59:2e:2b:db:e1:09:d1:02:6e:16:dc:e6:6c:ac:35:
                    f5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8D:97:02:98:84:80:BB:E1:3A:1B:7B:E1:15:37:64:F9:D7:74:4A
            X509v3 Authority Key Identifier:
                keyid:D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:93:be:ef:94:a1:e7:34:d2:ad:47:dd:89:ed:b7:4d:e4:ca:
         4a:27:1d:83:6b:bc:e0:ea:f7:fd:4b:93:94:59:07:26:46:a8:
         bd:02:ea:60:0e:0a:4a:08:26:a3:ec:10:54:d5:6a:8f:91:94:
         47:59:6d:68:01:91:2e:5d:5d:21:4c:1b:53:6f:45:2e:00:10:
         d4:4c:04:33:2d:de:84:8d:7e:35:d8:31:a5:df:4e:fb:ae:e9:
         51:ac:06:fc:eb:46:13:75:68:4b:3c:ce:1d:3f:13:9e:d3:dc:
         0d:df:54:e9:9b:7f:7d:65:5f:57:e6:00:9f:64:97:4f:28:bc:
         b5:9a:13:ff:04:d7:59:90:a9:25:5a:12:52:85:a5:60:22:50:
         88:8b:b1:a0:ec:70:b2:ce:d3:c4:63:73:17:88:73:48:28:b4:
         80:55:28:19:b0:a6:bb:0f:76:1c:e6:d3:89:ae:e2:38:25:c8:
         6e:49:ba:00:85:85:7f:d7:20:13:4b:3c:cb:6d:ea:d4:29:d6:
         ca:56:98:21:75:9c:df:ac:5b:42:81:93:b4:43:d0:02:cd:04:
         76:d2:4b:66:96:b0:46:45:07:35:71:9c:da:a3:b0:24:a2:53:
         b4:c7:65:f2:52:b4:91:9c:73:93:23:be:a1:0b:13:76:3f:5a:
         32:19:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:12:06 2024 by rpki-client on console-fra.rpki-client.org