Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File:                     Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier:          H+zTIsIx7V0VAUuGPHvzRB9ct4+x5axdZR0zk5OXMFI=
Subject key identifier:   99:5C:75:A0:06:2B:0F:74:B7:74:3F:7C:58:E8:09:DB:AA:1C:C6:DE
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer:       /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial:       018F50C85D24B1836D56B31BDDDFB9295CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 02:00:59 +0000
Manifest this update:     Tue 07 May 2024 02:00:59 +0000
Manifest next update:     Wed 08 May 2024 02:00:59 +0000
Files and hashes:         1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: ysbHIDU6olm6xO2vR0jzTZSNYC3iWh7lAdhTVWtRNDU=)
                          2: WDbv5UdE-rBRhruqOxp8jMBixIs.roa (hash: nZBoZHD5XN8pKmRsPLb7g4XRzwNILA1jYcgwQvkFBr4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:c8:5d:24:b1:83:6d:56:b3:1b:dd:df:b9:29:5c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
        Validity
            Not Before: May  7 02:00:59 2024 GMT
            Not After : May  8 02:00:59 2024 GMT
        Subject: CN=995c75a0062b0f74b7743f7c58e809dbaa1cc6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:e1:fb:28:a1:81:e5:00:e1:09:df:33:97:
                    b4:7f:e3:da:10:b6:6f:a6:fb:5b:06:e3:6a:d3:b6:
                    b8:a7:d8:75:ec:b0:d7:83:6b:0e:2f:bb:35:df:b5:
                    bc:59:2e:d8:b8:61:8c:ed:2d:60:44:6d:72:d6:aa:
                    94:50:a9:ca:e0:4e:d3:22:a9:31:6b:5d:a2:1d:94:
                    9f:82:2e:78:72:b3:c0:0b:cf:cc:54:b2:46:5e:0a:
                    81:e8:dd:cb:c1:26:e7:e8:74:02:2a:b6:42:5f:a9:
                    63:44:9b:47:d5:3e:ce:08:99:d4:ca:bb:54:3a:99:
                    8f:18:b2:28:70:5f:02:6c:12:fd:72:06:8e:c0:f2:
                    8b:86:ec:69:da:21:ef:a8:e6:01:a0:66:01:c5:96:
                    fe:44:15:4a:79:8d:a6:03:e4:50:5f:d0:d2:55:0b:
                    11:f8:80:e1:db:61:9a:26:54:2a:04:e5:b7:d0:9d:
                    20:5a:a3:fa:4d:79:88:e9:73:e0:4a:31:c9:47:6b:
                    8e:ae:b1:9b:1c:24:1b:7c:32:31:f9:cb:7e:21:ae:
                    9e:4e:37:00:70:57:b6:cb:96:6b:22:b6:4c:2c:2e:
                    bc:4a:41:0e:a0:f8:e5:9d:cc:d9:83:04:8e:93:f9:
                    0a:d2:be:a0:03:71:a8:c3:f4:cd:bf:a6:6c:2f:e5:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5C:75:A0:06:2B:0F:74:B7:74:3F:7C:58:E8:09:DB:AA:1C:C6:DE
            X509v3 Authority Key Identifier:
                keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:15:a1:58:26:25:11:aa:7a:0b:3e:8d:7c:58:e3:cf:f7:15:
         6c:7b:41:39:47:58:6c:f9:e3:03:a5:ec:26:32:f7:c5:34:03:
         90:81:9a:80:76:f7:f4:ae:ba:12:18:6f:22:fc:e0:11:e2:80:
         3c:63:6d:9f:c9:13:6e:1e:87:8f:fb:a0:2b:79:f9:6f:bb:6a:
         e4:29:1c:a5:7a:72:f5:da:c0:c2:91:df:2d:2c:cd:6f:05:ea:
         e2:87:47:df:85:63:49:ff:70:a4:9c:4a:5c:30:7e:07:26:a7:
         f4:63:c0:00:ae:f8:c2:38:2f:ce:1c:ca:98:a6:0b:6a:62:89:
         b6:ab:e1:f4:c5:c5:c2:1d:96:b5:eb:2d:53:2a:37:79:aa:fb:
         52:3b:f7:09:3b:fd:f6:27:48:c2:95:2f:c5:6d:b7:54:99:7b:
         8f:cb:77:23:98:ac:1a:4f:d1:20:6f:55:0f:6f:c1:03:7c:f3:
         ef:61:31:50:32:ca:56:b8:37:b2:9e:d8:04:e9:c5:64:07:c1:
         f2:3b:63:e9:23:64:ab:dd:ea:40:9c:90:58:bc:96:67:d6:21:
         c4:a6:7b:16:5b:c2:51:a8:2e:5a:2b:e6:d3:64:d8:d2:22:aa:
         47:66:9c:5c:96:b1:d8:a9:2b:2d:60:71:0e:44:5b:46:ba:d0:
         d7:09:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:35:45 2024 by rpki-client on console-fra.rpki-client.org