Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File:                     2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier:          uVbBLLEzXxtSbeZKLKSRZ6tpIzX0XwmJsS5lbhlQfao=
Subject key identifier:   5B:BA:34:D8:13:80:AB:27:09:02:86:5C:6B:29:37:DC:30:91:15:8C
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer:       /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial:       018F58F0FD6AB46FE1B796319CDB6C0716BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 16:02:19 +0000
Manifest this update:     Wed 08 May 2024 16:02:19 +0000
Manifest next update:     Thu 09 May 2024 16:02:19 +0000
Files and hashes:         1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: LsRm7MZRQbsIzbWTQj4fVmYiasSdqhobrPlMGYi4uKo=)
                          2: 6J3EI5tOKFWKwEsXAX4U4ySUe3Q.roa (hash: z2X9cdwDZwkkaz62bf66tQnCbfmdu3awlBFzIam8kUU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f0:fd:6a:b4:6f:e1:b7:96:31:9c:db:6c:07:16:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
        Validity
            Not Before: May  8 16:02:19 2024 GMT
            Not After : May  9 16:02:19 2024 GMT
        Subject: CN=5bba34d81380ab270902865c6b2937dc3091158c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:a2:5f:b5:bc:ce:80:98:27:9d:e6:ce:32:
                    48:e1:35:6c:57:d4:b7:24:2c:a8:fb:a6:c2:be:4c:
                    94:64:d4:10:95:71:3c:c4:0b:c2:33:09:54:7c:c6:
                    b8:a1:90:7a:34:48:fc:32:8b:e7:a9:57:c1:8d:ac:
                    8e:22:f2:be:26:84:9a:0c:4f:3d:3b:af:5c:62:92:
                    ca:b3:55:a8:9a:8c:ee:61:47:95:f2:d7:ec:5a:f9:
                    bc:5b:a6:88:4e:1c:d5:91:64:bc:18:cb:8c:8f:0f:
                    1b:05:f9:cf:9b:a5:a1:63:c3:ed:13:25:7d:07:e5:
                    43:14:58:8c:02:c4:a8:0a:af:7c:5c:dc:a8:50:32:
                    e6:00:35:0b:8e:25:33:22:28:76:37:b5:d5:59:aa:
                    3c:d5:78:36:96:c1:9a:71:56:e9:b5:64:d2:26:de:
                    a5:da:38:39:30:a8:7e:f6:56:00:74:54:3e:ef:b9:
                    f8:57:46:29:04:8f:c1:81:06:10:63:8d:a6:0e:d1:
                    3f:8f:2e:b2:00:ad:25:0c:d7:a4:b0:c6:60:ef:8f:
                    29:e0:8f:8b:3e:c7:a6:eb:41:95:fb:c4:49:57:7c:
                    85:72:30:05:bc:28:0d:63:33:71:93:e9:4c:33:f0:
                    92:22:5b:97:64:17:95:fb:57:a1:57:77:fd:0b:2b:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BA:34:D8:13:80:AB:27:09:02:86:5C:6B:29:37:DC:30:91:15:8C
            X509v3 Authority Key Identifier:
                keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ed:ef:fa:2e:93:6a:c8:9d:b8:61:ac:e7:ad:89:ad:65:4b:
         2f:71:7e:7e:fa:01:76:2e:29:97:2c:6a:71:cf:4e:90:d1:32:
         87:1f:f8:70:55:a6:3d:d5:68:f6:d8:d3:e3:ba:43:3a:67:1b:
         6c:df:5a:7e:e5:18:43:be:66:61:59:a8:ee:fd:ad:d9:47:fd:
         b6:b3:80:3c:25:73:4e:f9:7e:c7:37:82:13:5f:f9:37:c0:30:
         71:fe:43:69:b7:b0:81:7f:27:00:03:46:16:3d:b7:7a:b9:a8:
         38:a7:96:7b:d4:ec:67:b1:ff:e4:52:12:55:e8:ef:ee:4a:91:
         6e:04:3c:cc:df:92:05:6e:2c:86:e5:c2:6f:08:0c:09:55:d3:
         bd:9c:2e:6b:e7:bc:f2:68:08:02:c0:ab:ea:f0:4e:f5:5a:4c:
         c2:4d:bf:1f:e5:50:9d:93:39:4b:fc:2c:67:42:7c:2e:ec:a1:
         9a:1a:fa:89:31:03:36:5d:fa:5f:ff:ba:a9:f5:12:d7:13:f3:
         72:81:64:17:83:3f:d4:19:10:ca:96:03:7e:86:b4:26:3e:9a:
         9a:c0:5f:d4:38:c9:5e:ef:9d:9d:12:55:b4:98:fe:2f:6d:94:
         52:98:02:15:8f:69:26:be:85:85:7c:98:51:00:b9:c2:75:63:
         96:d7:34:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:42:55 2024 by rpki-client on console-fra.rpki-client.org