Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File:                     Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier:          kLoq835YGOCUTeOpCekYnizSpi6SZKE2uCfyoR/QWz0=
Subject key identifier:   63:68:1D:CF:01:31:88:9E:48:08:44:AC:8C:6E:85:B3:47:9F:05:F3
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer:       /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial:       018F381C5CBC1E37F1D46F1C3330312E9311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:02:13 +0000
Manifest this update:     Thu 02 May 2024 07:02:13 +0000
Manifest next update:     Fri 03 May 2024 07:02:13 +0000
Files and hashes:         1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: OeBZxcMAALQxSweDziIabH8PG+j853Ny5EBlzHBXR0E=)
                          2: vIsbtB7HfZCeeFrDfObFtGdlQg4.roa (hash: E/XAIdBZBd/1W/zv2kf1hZNnKxEPiHHiqjXjf6x93ZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:5c:bc:1e:37:f1:d4:6f:1c:33:30:31:2e:93:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
        Validity
            Not Before: May  2 07:02:13 2024 GMT
            Not After : May  3 07:02:13 2024 GMT
        Subject: CN=63681dcf0131889e480844ac8c6e85b3479f05f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:fe:6c:b1:49:da:e2:91:96:76:59:49:b7:
                    42:e4:1a:e6:25:78:89:13:c6:6b:70:27:c6:4c:5d:
                    68:72:6e:68:92:a9:61:a6:7b:c1:c7:0b:d2:95:0c:
                    7f:d5:0f:bd:78:06:62:e9:6b:40:6d:f1:3c:f0:2d:
                    2e:a5:cb:ab:12:b9:66:93:a6:02:ce:e3:8f:ab:50:
                    60:35:6b:36:b1:41:92:40:ac:4e:4f:c7:29:ef:a7:
                    aa:e9:1f:f8:97:31:ab:e4:ff:be:fd:11:e6:bd:c6:
                    6e:c2:6c:31:14:ed:d1:82:a7:ff:15:e2:ed:3c:5b:
                    05:d8:b2:14:3f:2c:fc:a0:14:6b:b5:80:87:20:83:
                    91:77:b1:c0:d9:3b:43:e0:5c:82:98:e4:c7:23:aa:
                    6b:ea:58:aa:6c:13:6e:8b:3e:38:6e:b2:3a:d6:e7:
                    15:ec:a1:32:68:09:ab:39:10:06:c7:82:38:fb:4f:
                    e7:b5:ac:90:89:6c:a3:f0:c2:1d:7c:a5:a2:2f:8b:
                    70:ef:49:07:a6:ca:c0:38:77:fe:5d:ce:ad:2f:7c:
                    fb:3f:8d:df:5d:5c:89:00:35:08:53:8a:79:11:57:
                    8e:51:65:09:02:6e:3e:a0:c2:05:8b:14:bd:a9:30:
                    e4:d3:ca:ee:f3:74:da:f0:27:88:e1:9a:e9:23:67:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:1D:CF:01:31:88:9E:48:08:44:AC:8C:6E:85:B3:47:9F:05:F3
            X509v3 Authority Key Identifier:
                keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:ed:83:87:26:4e:de:1b:e4:8c:6f:fb:86:f8:be:49:06:
         1a:44:ed:1a:85:1d:f7:92:af:e8:ce:0b:ec:d3:a9:4c:b4:2f:
         98:45:15:3d:49:47:a2:a5:57:70:67:14:ca:6a:d2:9d:1d:9a:
         10:27:78:c1:40:4e:4a:48:c5:19:4b:a5:4a:07:aa:e1:1b:8f:
         b7:5c:ae:a2:f0:d6:45:32:f9:ce:4d:d6:26:46:bc:66:37:83:
         dc:40:8b:02:c4:3a:68:e5:82:33:46:b9:7b:9f:11:01:7f:fd:
         ab:af:ce:a5:95:0c:43:0b:0a:cd:ae:e6:68:45:f4:77:61:77:
         3b:15:fd:92:9a:d3:b5:9b:a4:3c:95:96:5b:8a:16:b3:8b:e6:
         36:0c:bf:f5:5b:0b:7b:2f:38:96:e1:81:cc:f7:8b:8f:d5:86:
         ae:cb:b5:0f:f5:b3:0c:9b:59:7c:1c:44:10:7c:b0:05:22:2e:
         8d:59:98:f5:a7:82:07:3b:1c:63:4b:f1:b8:cc:9b:89:98:40:
         e5:6b:68:55:de:71:a9:5b:dd:22:83:b1:ae:fb:9f:f1:af:a0:
         d8:4f:bf:78:c2:a8:90:35:67:8e:85:02:15:08:3e:e7:28:e6:
         bb:97:6e:0c:6a:92:15:84:4a:6a:df:e4:1b:e5:f5:11:b1:e8:
         e2:ff:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:26:46 2024 by rpki-client on console-fra.rpki-client.org