Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File:                     IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier:          n1P9fxJiRdNlD8HiRHStps69dOqe6lJQhRqp7JKHB3o=
Subject key identifier:   31:36:92:83:DB:12:D2:E6:69:F9:34:CF:6E:E8:BA:FC:2E:23:6A:4D
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer:       /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial:       018F55B85E4DA7C19DAEBBC52EFC31E06F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 01:01:37 +0000
Manifest this update:     Wed 08 May 2024 01:01:37 +0000
Manifest next update:     Thu 09 May 2024 01:01:37 +0000
Files and hashes:         1: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: 4o+uE99gzJXctoQZeRM2vh8ZSf9dCTw6MOyMQVN5gPw=)
                          2: RYeWQc-0FaJmwoMolOoIaKPOPYo.roa (hash: ZNzXa0T6w5hvb9ghf/QNBvfcwhJK/waDz8Gy9SDbYb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:b8:5e:4d:a7:c1:9d:ae:bb:c5:2e:fc:31:e0:6f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
        Validity
            Not Before: May  8 01:01:37 2024 GMT
            Not After : May  9 01:01:37 2024 GMT
        Subject: CN=31369283db12d2e669f934cf6ee8bafc2e236a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:37:de:8a:d2:4e:04:14:89:3c:8a:6a:a3:
                    cc:08:52:45:93:9c:24:97:8f:11:a2:c4:91:71:85:
                    3e:bc:70:8a:92:31:0b:a9:36:d2:ce:79:75:67:1c:
                    7c:c0:e8:b3:3e:d9:28:5b:84:68:56:60:f4:d1:d9:
                    53:19:d6:e8:73:de:c1:a3:26:5e:38:92:9f:db:48:
                    c3:19:bd:ad:d7:20:a0:65:ab:07:ad:2a:4e:59:5a:
                    78:da:a5:33:a6:05:f4:08:cf:a2:1d:d5:4f:77:83:
                    fb:0a:25:fb:bf:19:62:16:ba:23:39:0f:0a:15:8f:
                    a7:2d:72:47:4c:ba:34:ed:81:02:34:8e:bb:eb:21:
                    15:5b:3e:33:99:15:7f:7f:17:52:22:2c:14:45:8f:
                    7c:f1:c7:78:62:f8:92:bd:a4:ca:61:7d:c5:50:18:
                    9d:a5:22:cb:e8:1c:2c:8f:cd:44:01:4c:ca:4c:4f:
                    1c:a6:7f:fc:1e:72:df:6f:11:5c:e0:ba:19:2b:e8:
                    ee:55:b2:62:19:f2:b0:ac:ee:12:0d:3d:b9:43:13:
                    49:37:76:cc:75:9a:e1:9e:7d:ed:b4:98:2b:45:30:
                    da:d7:f8:6c:5c:b8:cb:7f:4a:5e:be:06:36:bb:21:
                    01:ad:92:28:1f:c7:d2:c5:fd:92:10:58:5e:c5:48:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:36:92:83:DB:12:D2:E6:69:F9:34:CF:6E:E8:BA:FC:2E:23:6A:4D
            X509v3 Authority Key Identifier:
                keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:e0:fe:ac:0d:5c:a7:71:43:79:05:ed:3c:8c:0a:8f:59:
         c4:bc:5b:14:f0:32:81:fe:d7:94:f0:1f:1d:28:dd:af:8d:17:
         55:7e:09:ed:fd:85:e8:f1:46:51:47:63:c3:70:16:14:39:bd:
         e6:bd:34:05:ce:b3:b6:5f:aa:7d:b2:84:b0:aa:ae:77:43:21:
         1d:18:8e:7d:1b:62:1e:a9:eb:e5:09:dd:cb:61:b7:74:0f:53:
         2e:f4:c8:23:1c:bc:c5:77:1d:fd:58:bc:0c:58:86:cf:b8:3e:
         34:ab:0a:0c:70:b9:be:87:f5:1e:55:f0:c2:f6:95:16:e7:de:
         81:ed:e5:9b:4f:0f:6d:ed:92:08:8c:20:d7:fd:15:18:d0:39:
         d7:f1:06:d4:14:6e:79:6d:97:fc:1d:2d:05:77:08:36:bc:e0:
         eb:59:e9:77:17:4c:2a:3e:23:dd:b2:c2:da:a3:77:dd:e8:60:
         e4:62:26:06:de:ab:73:db:a3:d0:41:d4:1c:59:6b:2f:69:3b:
         be:c5:16:9a:19:d5:57:18:38:f6:95:24:7c:91:b3:5c:ae:94:
         2d:05:b6:e5:79:ee:94:41:7c:4b:12:48:71:6b:d7:ff:cd:1f:
         69:e6:c8:75:5b:3d:83:0e:c6:f7:94:a8:07:7a:79:df:91:7e:
         52:c5:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:27:47 2024 by rpki-client on console-fra.rpki-client.org