Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File:                     U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier:          E2fZGkFEdgYg9VLcVe4xsgEVmZCo1aEbYBxMqV0jRdc=
Subject key identifier:   F8:EA:8A:24:F3:8C:C3:D6:21:D6:57:AB:19:EF:05:25:73:74:F1:9D
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer:       /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial:       018F874B08A2CBF0364BD45AD8ABBF15F1CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number:          115F
Signing time:             Fri 17 May 2024 16:03:12 +0000
Manifest this update:     Fri 17 May 2024 16:03:12 +0000
Manifest next update:     Sat 18 May 2024 16:03:12 +0000
Files and hashes:         1: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: J2+PXZJU87ZSnmn+VoU6U98cBJI+bjBr2tzpJo73N8g=)
                          2: VAxf8EK3_6EZlmCwwPbJRS6XQ7Y.roa (hash: 4WTLym7hGlr4cTQ0hd35DyMvFzpgM8rq4+BPuEnyTrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:08:a2:cb:f0:36:4b:d4:5a:d8:ab:bf:15:f1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
        Validity
            Not Before: May 17 16:03:12 2024 GMT
            Not After : May 18 16:03:12 2024 GMT
        Subject: CN=f8ea8a24f38cc3d621d657ab19ef05257374f19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:07:41:9d:d8:0c:3f:a5:02:c2:b3:0d:a3:0f:
                    a3:3a:ff:4f:4b:7e:67:76:92:31:37:aa:df:05:00:
                    77:4b:0e:81:33:c5:85:7b:33:97:fd:a4:7c:52:da:
                    ad:14:b3:8e:9b:3a:c7:9b:e9:f9:74:86:2e:72:53:
                    40:15:b3:c3:df:e6:2a:7e:5b:44:93:83:86:e9:12:
                    99:a9:a2:86:04:c1:4b:4d:51:8f:fb:e6:90:10:8d:
                    a0:c0:e8:cf:69:27:0c:73:82:91:e3:65:b3:b5:09:
                    d6:9e:60:54:8d:79:40:fd:0e:2e:02:ce:c2:ef:11:
                    f4:0c:f1:65:39:74:0e:55:dc:46:4d:39:cf:81:c8:
                    9b:26:e1:ca:1e:55:f2:64:b9:21:05:28:68:07:66:
                    96:1b:90:fe:18:ba:0a:bb:49:c6:44:2f:0b:42:d1:
                    fc:a7:39:c6:77:1d:99:84:c0:e1:dc:51:fd:b5:a7:
                    76:29:d8:ff:c8:46:fc:8b:51:49:7a:29:2f:6e:5e:
                    0e:bf:50:ce:1d:b6:9e:a2:62:90:e4:cc:7b:a2:76:
                    91:c3:ed:d9:9b:bb:94:29:96:25:0d:50:91:9b:69:
                    14:ac:35:1f:ea:85:76:73:47:3f:0f:00:12:85:f5:
                    c1:60:be:2a:81:cb:8d:9e:1d:6c:b8:90:46:0d:af:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:8A:24:F3:8C:C3:D6:21:D6:57:AB:19:EF:05:25:73:74:F1:9D
            X509v3 Authority Key Identifier:
                keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:46:ea:20:aa:00:fe:40:69:ec:0b:ec:34:8c:4c:5c:18:
         59:ea:46:99:8c:5e:90:53:44:ef:92:43:f9:c4:e6:65:5b:ad:
         3d:f2:dd:bb:cd:52:75:07:53:fd:07:8d:a0:05:fb:1e:60:f7:
         a2:32:42:be:c2:a7:5a:99:71:09:1f:9d:97:ca:ae:72:9f:9d:
         a8:d8:4f:68:d5:7f:93:82:e3:0f:0d:f9:a9:af:72:ee:7a:72:
         ee:df:0c:b5:f0:9a:39:e4:f2:ce:d6:7b:0d:43:5f:7f:0e:b1:
         6b:92:cc:28:4a:6c:c7:4f:4c:db:b8:45:ce:24:d4:84:11:d8:
         98:7c:09:93:88:aa:75:18:99:f5:d0:6d:cf:cc:c1:60:51:13:
         c8:7f:bf:56:1f:86:62:02:99:35:5d:7b:9e:5c:9d:52:06:9b:
         56:bc:74:85:41:6c:d0:2e:1c:81:f4:45:f8:8d:7d:ea:ea:89:
         d3:1d:46:5b:3d:a0:dd:34:01:27:a5:b3:bd:74:b6:f6:5d:6b:
         73:69:d6:fa:3b:01:ed:75:83:00:de:33:ba:38:58:7c:72:0a:
         c2:a1:83:fa:40:0e:f3:27:f8:df:55:18:25:55:7a:3b:c8:ba:
         eb:d1:05:ce:94:94:db:14:85:29:ba:6c:88:53:a8:48:bc:ad:
         00:09:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:38 2024 by rpki-client on console-fra.rpki-client.org