Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.mft
File:                     D75ES2FQwEMEIn-Uv6J2gwbX9Mg.mft (raw, json)
Hash identifier:          GhfUirOwTqBTNcc23mcsE0fIhnf9LbEi3UaB5Qw6Cl8=
Subject key identifier:   E2:EB:79:39:10:2E:DE:F0:C9:B5:56:A4:BF:C7:D9:23:02:73:37:B8
Authority key identifier: 0F:BE:44:4B:61:50:C0:43:04:22:7F:94:BF:A2:76:83:06:D7:F4:C8
Certificate issuer:       /CN=0fbe444b6150c04304227f94bfa2768306d7f4c8
Certificate serial:       018F3AE55AA73F010CCBA6025979E2E328E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 20:01:00 +0000
Manifest this update:     Thu 02 May 2024 20:01:00 +0000
Manifest next update:     Fri 03 May 2024 20:01:00 +0000
Files and hashes:         1: D75ES2FQwEMEIn-Uv6J2gwbX9Mg.crl (hash: dk6HYmMF/AhCy/+t5GF4TH/eT+9NiFyGLh06shHn1V8=)
                          2: nTWYzLu2OlK7ex6wo_g2s-xbzPE.roa (hash: WQAxzESS4FhEYF1LLnKSKAPWFt9XmJfC4r+4u+0i7sg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:5a:a7:3f:01:0c:cb:a6:02:59:79:e2:e3:28:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fbe444b6150c04304227f94bfa2768306d7f4c8
        Validity
            Not Before: May  2 20:01:00 2024 GMT
            Not After : May  3 20:01:00 2024 GMT
        Subject: CN=e2eb7939102edef0c9b556a4bfc7d923027337b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:a3:68:3c:c4:a1:20:c5:11:c8:71:4a:9c:
                    fd:d1:00:c3:fc:f4:21:39:e4:28:57:32:7c:af:08:
                    07:f9:51:f7:3e:d6:a5:50:a2:a3:c2:72:2c:78:d9:
                    37:e7:5d:b0:f0:94:2f:12:fc:08:aa:4b:9f:d4:f0:
                    d9:3c:e0:89:bc:66:77:3f:43:a5:c9:e3:e9:2b:f1:
                    1a:bc:a3:71:f6:7a:59:9c:fd:0d:1d:c2:b2:03:e9:
                    7c:a7:ee:e2:0c:12:96:72:35:63:09:50:8b:ae:03:
                    37:58:02:55:4a:92:d7:26:c2:2c:8b:34:1d:89:d5:
                    d5:25:a2:4f:ea:5f:7c:d0:bf:69:55:d5:08:63:13:
                    6e:45:da:f0:c2:8d:dd:63:61:c7:f7:1e:e2:1b:c4:
                    bc:8c:b7:3e:19:f1:7e:6a:3d:ae:34:5f:92:77:04:
                    a2:a4:a6:8e:f4:dc:84:a1:33:98:2d:30:41:ff:87:
                    c9:ea:06:26:cb:a2:0e:6e:ea:74:a2:09:b0:f7:63:
                    01:3b:76:b0:66:2f:84:b3:b1:98:12:ba:a6:24:6a:
                    21:62:26:02:69:16:b1:d1:5f:d5:d8:14:2c:1d:45:
                    77:c9:48:de:87:70:45:29:ea:20:68:b7:2a:ca:bb:
                    d4:42:79:e3:c6:52:fa:09:79:91:db:65:68:10:31:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EB:79:39:10:2E:DE:F0:C9:B5:56:A4:BF:C7:D9:23:02:73:37:B8
            X509v3 Authority Key Identifier:
                keyid:0F:BE:44:4B:61:50:C0:43:04:22:7F:94:BF:A2:76:83:06:D7:F4:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:61:65:49:60:1f:85:a8:13:a2:05:a5:36:31:05:f5:03:
         f1:08:a2:71:e8:e0:64:81:8f:66:95:ac:39:c4:70:e4:cb:82:
         5f:2c:2d:7c:53:d9:8f:f9:c3:cd:a8:3b:ec:6b:60:a2:a5:19:
         aa:20:74:8b:f4:0c:b1:12:ae:98:cd:f8:b9:12:3e:a6:7c:13:
         49:1b:ba:b3:23:c6:64:57:42:f5:a7:f1:a6:24:09:97:32:57:
         d7:cc:18:b4:25:4f:f8:61:f5:96:17:bf:e0:b1:a8:53:75:4c:
         ff:28:a4:2a:84:e2:73:69:1e:8a:43:93:79:99:96:d7:76:ab:
         d2:3e:ff:9c:d3:f0:e1:64:c8:70:b6:f5:ea:04:23:b8:ea:d1:
         2e:ca:5a:75:e9:aa:59:27:05:99:62:a8:b3:e5:25:7e:9b:03:
         ae:0f:af:09:b7:b8:39:0d:91:f6:9c:b4:8b:e8:ba:9b:37:d6:
         a9:5a:00:6d:7d:1f:f1:ce:29:02:d8:81:67:09:11:11:38:a1:
         de:58:ff:ef:e4:62:12:96:38:56:6c:0f:8f:4a:07:02:65:b6:
         2a:71:4e:b9:15:d7:58:ac:81:88:16:c0:f1:de:9a:c5:a2:ec:
         38:be:eb:28:60:3a:45:0e:fe:fa:64:84:9f:e8:d2:9c:d3:4e:
         bc:76:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:24:16 2024 by rpki-client on console-fra.rpki-client.org