Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File:                     cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier:          jDQi+igSp8Nm4QxtQiDgly1n3MwJcZmtBdMzUB6fBuY=
Subject key identifier:   64:5F:C5:8D:0C:14:8E:32:3D:06:C2:BE:83:CA:21:AA:7C:B5:FA:80
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer:       /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial:       018F8748BD978E18B54C5BC12637F077E480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: DuQzPflIpLYZtz8EgFyc6WRw9tOlLReQ2X71ye5hSAI=)
                          2: gKm7vDseh63AP9vWAvHQSyo9xW0.roa (hash: SNLKm/MMUzGxAauHrflUScArsN1mDoASex5cfaO+0hI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bd:97:8e:18:b5:4c:5b:c1:26:37:f0:77:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=645fc58d0c148e323d06c2be83ca21aa7cb5fa80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:47:c9:44:1d:45:a5:8d:6a:7f:19:af:07:
                    e9:86:d8:48:94:ae:d6:54:11:26:00:9b:e9:a4:42:
                    2f:fb:c1:36:34:df:97:0d:25:19:b1:b6:2d:35:6d:
                    1c:79:4a:78:86:f1:8e:a3:1d:63:e5:93:1d:46:3f:
                    7e:dc:6b:d8:98:00:fc:26:09:0e:98:73:fd:df:57:
                    24:d6:26:db:d2:f9:dc:5f:97:38:c3:75:f7:da:04:
                    b9:a0:b6:4c:d1:6c:32:62:07:1e:09:60:db:4c:fe:
                    00:90:88:d7:a8:4e:9a:58:c0:0b:3c:32:01:19:a2:
                    17:c8:de:22:f9:c8:fa:82:27:25:a2:dc:52:fe:b4:
                    3a:bb:92:9f:a9:34:75:73:34:ce:df:7e:11:39:98:
                    41:eb:fe:37:f8:e5:86:36:75:82:f6:dc:89:b9:ad:
                    c1:e2:88:7c:bd:45:c4:3f:3e:a7:6e:34:78:bf:ae:
                    08:6e:b7:3a:f0:b0:20:9f:dd:03:8f:12:bb:ed:55:
                    cc:74:b6:31:e4:56:41:a2:ba:5f:e7:c1:de:83:08:
                    e7:c0:0f:e2:ba:fb:89:5f:14:f3:c7:70:59:01:e0:
                    34:82:bf:de:91:a7:ec:d6:7e:fe:aa:1b:66:3e:c7:
                    f5:de:a3:b6:ed:d5:85:31:1e:10:d0:f6:df:c8:b7:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5F:C5:8D:0C:14:8E:32:3D:06:C2:BE:83:CA:21:AA:7C:B5:FA:80
            X509v3 Authority Key Identifier:
                keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:30:f5:c7:e6:26:c8:15:2f:ee:6c:63:dc:11:49:f3:46:f8:
         86:61:fd:00:e3:57:0d:01:b8:37:9e:2c:b0:ad:c8:fd:62:1e:
         91:1e:5c:a8:f4:20:b4:0b:09:d8:61:c4:0e:28:8c:60:a3:60:
         05:c0:6f:cc:4a:5f:50:cf:dc:d2:4a:57:a0:6a:92:8f:82:8d:
         39:b5:04:2c:24:50:1e:c2:d4:dd:ab:8e:65:85:f8:e8:57:82:
         eb:8f:6c:a5:41:d7:54:e1:0d:48:1b:d1:2d:71:4a:20:13:39:
         57:ab:ab:08:8b:fd:f6:e4:c0:53:c0:75:f7:13:3b:ab:dc:7d:
         70:2f:30:bf:4c:79:5f:25:d7:e2:df:b3:60:c7:38:04:21:0a:
         bd:2c:8d:57:38:06:33:7a:06:53:53:66:33:ff:0a:f7:8d:1c:
         8c:e6:2e:c8:dc:65:a9:d0:5f:8b:e4:10:29:f5:a9:42:a4:73:
         ee:e8:85:1d:0c:fd:b5:16:1f:e5:0c:58:49:72:c0:98:a4:66:
         aa:61:d8:c3:85:4a:04:ce:f0:57:c1:b0:32:55:6b:a6:1e:01:
         cb:b6:33:8e:b0:2f:34:05:2b:09:37:b1:8c:2e:9d:d9:77:17:
         ab:e8:74:26:37:a6:fa:b8:39:f7:83:88:bd:21:f8:05:81:7a:
         14:eb:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:36 2024 by rpki-client on console-ams.rpki-client.org