Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File:                     15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier:          SqKSjnxPu/2YZKMdk/3KyUR+S28+NyeVGv0yzaZmrPc=
Subject key identifier:   2D:18:54:A8:4A:2A:D0:8F:03:81:97:85:1C:B4:B0:82:76:22:69:09
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer:       /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial:       018F87B677CF331FF8E018224289FB8D8EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number:          01F8
Signing time:             Fri 17 May 2024 18:00:33 +0000
Manifest this update:     Fri 17 May 2024 18:00:33 +0000
Manifest next update:     Sat 18 May 2024 18:00:33 +0000
Files and hashes:         1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: QbZ4ZoE/RBK8ie2Loa+xAaWS+o+kufv3n0GJTI1Gn+c=)
                          2: 2ySkL2qL_FgkdTeGQ1hmgpMmPNE.roa (hash: BQKgclTUvTPSmzy2UisilQ8q5HohxKH+c7EOze1Ddbg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:77:cf:33:1f:f8:e0:18:22:42:89:fb:8d:8e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
        Validity
            Not Before: May 17 18:00:33 2024 GMT
            Not After : May 18 18:00:33 2024 GMT
        Subject: CN=2d1854a84a2ad08f038197851cb4b08276226909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:e1:13:8a:db:15:08:54:d0:d8:25:be:09:
                    42:4b:eb:f3:84:c6:8e:10:77:56:e9:ed:fd:5e:48:
                    19:0c:72:a8:c8:e4:34:eb:7b:ca:09:c5:a7:18:fe:
                    56:2e:c9:fc:8f:be:08:17:63:8b:a8:4f:c1:ea:3e:
                    bb:73:7e:2b:34:74:5d:e7:dd:6e:03:f1:0d:7c:9b:
                    ce:ce:69:37:ea:5b:00:56:ce:20:3f:94:3d:b1:02:
                    3e:54:71:85:2c:ad:b2:0a:01:46:6f:56:d4:7c:62:
                    3e:0c:26:c1:ec:4a:fa:ce:06:28:0a:74:67:00:f3:
                    72:61:db:84:65:c9:c6:e9:65:f1:23:ad:5d:40:46:
                    7d:cf:25:aa:0f:06:07:f8:6a:22:db:ed:21:54:17:
                    e3:02:69:7e:74:bd:1d:ee:16:68:97:7c:cf:97:94:
                    32:db:05:f9:e1:b1:97:76:7d:11:3d:37:e1:c8:15:
                    b5:5f:e8:8c:9f:d1:ef:4f:ce:6c:a0:64:6c:16:5d:
                    86:2d:e6:e0:cb:85:37:c8:57:bc:06:65:f5:f3:74:
                    b1:9b:31:74:d5:b6:96:ae:d9:57:c1:a3:ea:04:33:
                    9c:b7:60:1b:67:0f:54:1f:aa:a9:9e:a7:e8:32:96:
                    e2:12:c6:df:82:ec:6e:9b:6d:ab:2d:db:06:5c:48:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:18:54:A8:4A:2A:D0:8F:03:81:97:85:1C:B4:B0:82:76:22:69:09
            X509v3 Authority Key Identifier:
                keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:07:4a:75:c9:dc:95:13:3e:1f:39:86:3b:a8:ff:15:da:9a:
         f9:76:bc:2c:71:cb:8f:1d:f3:3e:0f:1c:bb:49:76:23:dc:25:
         de:45:b8:22:aa:d0:41:d4:64:d9:74:57:1b:78:ed:0d:14:1c:
         89:e7:b5:1d:b5:48:87:7c:78:8d:7c:e5:de:e5:55:4d:c7:1e:
         74:80:7e:97:bc:78:49:29:e0:d3:bc:ba:75:35:56:b5:75:01:
         90:5c:ba:ea:ef:7e:da:9b:4d:41:88:77:87:d3:a9:e3:ec:dd:
         35:d6:42:2b:6f:fa:5b:cd:a4:51:df:2a:50:7e:5e:71:13:0f:
         19:88:de:74:02:4d:8c:f1:90:b9:ab:fe:33:83:ed:2a:18:71:
         29:8f:2d:03:89:2e:5e:da:f5:76:7a:dc:0e:c3:f8:90:21:91:
         0d:0b:16:7f:12:69:7a:f7:3b:d2:24:0b:07:5a:30:c3:02:a7:
         b8:a0:f3:07:19:c1:9d:2a:5c:2a:69:a2:db:65:bf:57:92:3d:
         b9:21:ff:83:4f:18:11:11:3d:c7:ea:27:51:fc:8f:21:32:75:
         9a:96:ee:ba:92:92:a4:1a:5b:ed:33:ca:23:f1:46:a7:b9:9b:
         b1:f7:37:44:c2:d3:9a:74:fe:c8:70:e2:61:8d:28:2f:b7:0b:
         65:e9:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:04:56 2024 by rpki-client on console-fra.rpki-client.org