Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File:                     1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier:          pUh6Cv9042tE5XK0Ok7zKtasa+IDePhX3WSybU34WLk=
Subject key identifier:   3C:59:47:6C:3D:DE:C5:70:56:DB:C6:55:8F:A8:9E:97:7E:E9:79:BC
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer:       /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial:       018F4D5B67788DEA7F07A0D905BDECA397B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number:          115C
Signing time:             Mon 06 May 2024 10:03:06 +0000
Manifest this update:     Mon 06 May 2024 10:03:06 +0000
Manifest next update:     Tue 07 May 2024 10:03:06 +0000
Files and hashes:         1: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: Ak1O31zt1AoG+2vu6k6PPQf3lpYkd4friWpcv8V6qQ8=)
                          2: s86ZsgYFMP7MtIKLkRK7tZoZcEU.roa (hash: 5ztBVi7abHqEz/HPX+0T9p+o/bBpmCy0fVLuzU0qero=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5b:67:78:8d:ea:7f:07:a0:d9:05:bd:ec:a3:97:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
        Validity
            Not Before: May  6 10:03:06 2024 GMT
            Not After : May  7 10:03:06 2024 GMT
        Subject: CN=3c59476c3ddec57056dbc6558fa89e977ee979bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:4e:2d:b6:db:32:f4:96:01:80:dc:76:1e:
                    ab:e6:59:c9:7b:a0:e1:42:e5:83:89:d9:7e:86:51:
                    c8:af:2b:36:ad:6a:80:9c:16:32:ec:62:e9:a8:3e:
                    c4:11:09:ed:8a:99:be:33:5b:b9:a2:56:86:95:49:
                    c5:ae:06:0e:c4:f6:5b:d6:fd:0d:f5:4b:ca:44:4d:
                    7d:c5:65:98:17:a1:79:5c:a4:82:62:c2:ef:16:15:
                    80:56:36:a3:58:cb:e5:c1:22:9e:e4:46:f0:8d:00:
                    39:6e:8c:28:d4:e0:57:9a:af:4e:f5:b8:84:8d:3e:
                    10:b4:91:23:6b:f4:e2:b1:1f:3a:19:17:5d:a9:c8:
                    8f:6f:d9:0b:e9:47:69:d1:f9:37:5c:1f:e0:8e:a1:
                    0a:19:c0:c2:3c:1f:5d:2c:61:ab:db:e4:2b:6c:0e:
                    a4:ed:04:91:2c:86:ec:d4:38:be:b2:6a:fd:5b:98:
                    c7:fb:73:83:9c:c1:87:76:28:20:f6:30:04:0c:f6:
                    6d:52:b8:dc:88:6e:47:aa:15:4d:49:b6:69:12:38:
                    6b:93:b4:62:86:79:46:03:bd:56:36:33:d6:b4:bf:
                    54:f7:0b:22:d4:cb:7d:97:a3:b3:81:e1:55:48:a1:
                    29:ad:74:42:f7:31:0c:72:4f:1a:95:08:e6:b5:1d:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:59:47:6C:3D:DE:C5:70:56:DB:C6:55:8F:A8:9E:97:7E:E9:79:BC
            X509v3 Authority Key Identifier:
                keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:37:f2:d9:29:46:12:ae:f3:87:5c:9c:1d:98:6a:b0:44:
         81:7b:11:cf:3a:4e:6c:83:77:9e:26:e1:fb:9f:0e:07:59:7a:
         7e:26:b5:93:dc:10:1d:9a:37:8d:28:58:69:e6:eb:79:69:5d:
         bd:8e:10:5e:bc:e3:06:1f:6e:0b:1b:5c:d2:c1:8f:87:cf:64:
         a5:66:1f:bc:7c:b3:b4:c5:7e:50:47:af:85:e1:2b:1e:a8:65:
         09:46:4a:e2:16:59:86:ac:a8:28:20:76:cf:10:3b:ad:f4:79:
         51:06:5a:87:91:43:5b:ee:24:18:15:5d:b9:27:3e:b6:68:d2:
         0a:fd:b4:ed:08:85:c5:ef:e8:6e:b8:32:e9:fb:00:3f:e1:f9:
         b4:8b:7b:31:0d:9d:f1:69:fb:7c:01:d1:cb:6a:95:3a:c3:39:
         df:9c:de:1b:b6:1c:9f:20:59:98:7a:3d:04:bd:b6:79:7b:47:
         48:1b:d9:22:f9:e3:a6:67:9d:4b:58:56:82:ff:7a:a4:1e:98:
         85:1c:e8:ca:91:17:10:36:df:ce:83:23:e9:4a:8b:3b:ae:66:
         92:cb:73:e1:c2:97:68:4f:50:49:3d:b2:f1:07:79:ed:12:a9:
         0f:93:07:74:d8:38:b7:13:a7:60:da:ea:5a:15:96:72:ec:93:
         e7:1e:e1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:06:33 2024 by rpki-client on console-fra.rpki-client.org