Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File:                     C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier:          b9gQVkcpBvnvBCyAS6xFlrLO/ud+HcNV5Vr07MNlEr4=
Subject key identifier:   31:2C:AD:28:7E:DB:E9:74:33:C3:C3:5A:E6:96:0F:AF:E7:54:59:E1
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer:       /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial:       018F57038F29880507FC90EEDE4254231F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number:          115F
Signing time:             Wed 08 May 2024 07:03:21 +0000
Manifest this update:     Wed 08 May 2024 07:03:21 +0000
Manifest next update:     Thu 09 May 2024 07:03:21 +0000
Files and hashes:         1: 1pG2TPqO4E4trNRrM_-Zrp7dHUA.roa (hash: d9el/EzqUA4zeIJB4v66XNpRonRMRsDwN2KU2Tqba2A=)
                          2: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: CVRDVKMzMpdsVY+69z/SXadfS0oHIjsob3yYyag66o4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:8f:29:88:05:07:fc:90:ee:de:42:54:23:1f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
        Validity
            Not Before: May  8 07:03:21 2024 GMT
            Not After : May  9 07:03:21 2024 GMT
        Subject: CN=312cad287edbe97433c3c35ae6960fafe75459e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:90:25:d1:1b:40:71:3c:9e:05:a5:f6:3a:
                    aa:57:4d:0a:ec:a3:8a:fa:23:27:3c:b3:01:a7:88:
                    0c:f5:c1:e4:0f:f8:41:93:22:c0:59:b0:2d:31:fd:
                    c3:85:47:7d:50:a1:5f:9e:61:f0:24:90:16:60:09:
                    2f:e9:19:04:4b:d3:dd:ff:7a:80:e6:8d:13:8a:67:
                    86:32:0e:71:af:ca:9e:d5:a8:8a:de:12:d1:bd:71:
                    ae:bb:88:d5:14:f6:8c:f3:53:65:37:42:6b:87:8c:
                    45:b7:c9:16:6f:46:cb:4f:ac:83:35:ea:04:91:ff:
                    58:63:68:e6:9f:88:64:04:c6:eb:e3:ee:15:11:2e:
                    0c:5c:98:68:8f:fd:ce:82:8b:7e:fa:ec:91:76:d4:
                    16:02:40:a8:44:46:d1:06:02:10:2a:ff:96:ae:94:
                    80:42:f9:1e:16:51:42:e1:48:d4:2d:f0:45:c8:fd:
                    29:12:44:a4:23:2b:9f:90:81:d3:4e:60:d4:ae:b7:
                    23:eb:95:38:3d:a8:4d:ca:f2:47:e4:a2:db:b9:48:
                    81:3b:73:7d:1a:b4:50:e4:5d:3a:d4:81:a3:d7:e7:
                    05:83:36:6c:eb:e3:5f:c3:f3:45:43:1a:d7:bd:da:
                    84:77:98:66:21:e1:67:29:c5:2d:c4:6d:8c:eb:3a:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2C:AD:28:7E:DB:E9:74:33:C3:C3:5A:E6:96:0F:AF:E7:54:59:E1
            X509v3 Authority Key Identifier:
                keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:be:e1:2b:5b:6b:d8:24:f6:69:34:a0:fd:24:29:a1:c1:d1:
         74:61:9d:1d:32:8c:a1:71:56:15:f0:d7:88:2c:10:ef:f2:8e:
         0f:3e:84:e9:5d:b0:9b:de:98:5c:ff:c2:01:94:c9:d3:63:14:
         2d:09:0f:b5:a7:ba:35:61:85:0e:6e:e1:97:2c:42:1f:3b:0a:
         92:2e:23:b6:05:d7:4c:c8:c7:51:da:65:67:27:b2:b7:97:04:
         27:97:0f:cd:ce:28:64:42:b8:42:96:f6:69:78:1b:58:07:11:
         a6:7c:ee:d7:34:af:4c:76:59:1a:f7:72:35:c4:e8:8e:eb:55:
         8c:84:d3:a0:b6:ca:b8:ff:c7:35:bb:f6:28:dd:5c:89:b3:fc:
         08:61:bd:4a:63:e3:04:00:d6:8f:ea:f1:b9:1f:b1:5a:ad:d9:
         f3:b5:86:df:f2:e6:53:25:31:3e:aa:bc:33:24:fb:45:b5:8a:
         0d:71:ea:b6:04:2c:b9:16:7a:8a:a9:ba:cb:09:01:1b:56:58:
         3c:70:dd:0f:c9:a4:45:d5:d0:83:40:a7:fe:04:1d:b4:1e:f4:
         7a:4e:98:d1:6e:59:df:72:e5:e8:fa:db:58:44:c2:e8:b5:db:
         9d:9d:c6:fa:f5:93:88:b2:a0:95:a9:0b:37:cf:9d:14:45:17:
         7b:47:10:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:09:03 2024 by rpki-client on console-ams.rpki-client.org