Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File:                     68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier:          4+7MYxr0qLWHJ1pGzzIswrefyI7bP9JZGbfK7RIKTEk=
Subject key identifier:   7C:AC:FB:13:9B:F2:92:5B:84:A5:43:61:24:88:59:5E:F7:17:1B:A6
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer:       /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial:       018F58F27C0053DCFD1CFE9B754E93D742E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number:          115F
Signing time:             Wed 08 May 2024 16:03:57 +0000
Manifest this update:     Wed 08 May 2024 16:03:57 +0000
Manifest next update:     Thu 09 May 2024 16:03:57 +0000
Files and hashes:         1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: ZE9KkCiaOlEvk4/jCgAV1vg6RHp6Md3LYmYneB9durc=)
                          2: FWGzP6Ub13duo76f4DzadrVDglo.roa (hash: J+xeLVEJ48uJeffwG/knijXsXY6IQ3s5+CH6qxUwx1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f2:7c:00:53:dc:fd:1c:fe:9b:75:4e:93:d7:42:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
        Validity
            Not Before: May  8 16:03:57 2024 GMT
            Not After : May  9 16:03:57 2024 GMT
        Subject: CN=7cacfb139bf2925b84a543612488595ef7171ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:eb:d7:b4:28:55:eb:ef:08:78:2a:05:70:
                    9e:a6:45:ea:0c:44:d5:7c:3a:03:c6:62:6c:d1:63:
                    82:b6:19:ce:f5:2a:60:97:e5:b0:0d:33:ad:c0:36:
                    2e:55:71:3b:8a:05:6a:e9:90:61:da:cd:9e:5a:76:
                    fa:e4:2e:a0:ce:21:c5:b0:8f:24:b4:25:01:74:89:
                    40:54:83:4f:cc:9b:3f:9d:7d:82:ca:d3:24:01:60:
                    46:c5:fc:d1:f1:10:d1:fc:72:bf:a5:a1:72:37:b4:
                    5a:11:6f:35:cc:23:fa:43:b4:a2:5f:f5:8e:3f:0c:
                    1c:e8:1b:45:c6:9b:1d:15:d0:d7:bf:97:11:93:f3:
                    44:08:75:9b:27:81:45:19:d3:8f:0a:ad:80:09:79:
                    89:09:3f:e6:fd:18:82:2a:28:a9:3e:a4:88:53:f6:
                    cd:70:0e:e0:24:99:dc:74:91:78:81:cd:6e:df:d4:
                    5f:36:31:2b:4e:ba:43:3f:39:7e:57:3b:10:8d:7a:
                    c2:51:27:bf:da:11:c8:15:d5:5e:6d:f3:f0:76:ca:
                    89:b0:f6:82:0a:7e:71:aa:4d:97:16:9b:d8:e3:55:
                    d3:97:05:30:51:70:d6:17:45:29:14:02:f7:70:cd:
                    40:0e:fd:1e:cc:8b:04:43:c2:85:80:b7:a8:43:0e:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:FB:13:9B:F2:92:5B:84:A5:43:61:24:88:59:5E:F7:17:1B:A6
            X509v3 Authority Key Identifier:
                keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5c:ec:5d:83:1d:0b:d0:74:2c:57:42:f3:d3:a0:e4:b7:49:
         10:26:f4:f6:f8:4e:47:48:8d:99:d1:0d:81:d7:15:f4:4c:45:
         7a:4c:ab:f8:84:b7:d6:c0:c0:a4:35:09:fc:8f:da:a6:70:f7:
         0c:31:4a:57:64:27:5a:c1:a5:25:bc:5c:21:5e:4c:88:ab:5f:
         49:03:c2:ca:77:4c:28:5b:df:5d:e0:4c:82:91:76:95:24:5d:
         d6:9b:aa:76:30:48:7f:57:ea:5a:db:7b:dd:ec:c7:06:d0:a2:
         b3:22:f6:57:c0:3b:e7:f3:75:1c:ca:b6:b7:7e:84:8f:9e:02:
         c5:7f:ea:57:f5:68:06:02:56:8f:06:e0:b5:62:fd:3c:ea:5c:
         35:d9:13:ad:6a:56:21:82:43:69:3d:66:f0:9b:a0:2b:e6:c3:
         8f:7a:1a:9d:3a:2f:66:9c:98:da:93:02:fa:f7:45:bf:2a:61:
         18:17:d0:f5:5e:64:ff:e3:d4:57:68:bb:39:50:8d:48:ed:3b:
         04:d4:ae:fa:df:7e:29:e4:70:0c:f0:87:6a:04:d9:df:4b:82:
         13:a8:4e:e6:6c:9e:e8:13:2c:07:f5:ff:8c:03:6b:59:be:c3:
         ab:ee:93:fb:d5:71:ed:98:82:e1:08:e2:a2:b7:cc:8d:6d:80:
         07:e0:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:01:09 2024 by rpki-client on console-ams.rpki-client.org