Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File:                     HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier:          9BWDjea7wz3ARvqZrPgtVCV1iIHMf6QjXt4hoZetz8Y=
Subject key identifier:   CB:1B:B7:A4:15:74:C7:63:D8:69:5F:CB:74:66:C9:88:E5:43:17:BB
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer:       /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial:       018F5701DD81EC65B1EA06FFB6DEB5B13706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 07:01:31 +0000
Manifest this update:     Wed 08 May 2024 07:01:31 +0000
Manifest next update:     Thu 09 May 2024 07:01:31 +0000
Files and hashes:         1: Ehk33GNlzsw-O91dX-zKhugDZu4.roa (hash: XKvbQ2PUaPUekDD6LgU1c6UHj9ba/DCkDJvHhJpYxZE=)
                          2: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: ROYUelLDtfkh1trt4MGOWK2fWYZyri9yiNhNAEPT930=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:01:dd:81:ec:65:b1:ea:06:ff:b6:de:b5:b1:37:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
        Validity
            Not Before: May  8 07:01:31 2024 GMT
            Not After : May  9 07:01:31 2024 GMT
        Subject: CN=cb1bb7a41574c763d8695fcb7466c988e54317bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:e8:8d:5d:df:01:29:4f:21:7d:1d:cd:f7:
                    85:1b:22:e8:49:95:32:60:d2:ec:d3:6b:85:44:19:
                    14:31:43:05:ce:2f:a3:a9:c4:fa:e2:e7:ec:b4:b6:
                    96:2f:be:9c:7a:97:13:b0:38:19:65:d8:b4:77:00:
                    7e:fc:39:7a:48:e8:16:af:46:34:9d:b6:e1:2c:15:
                    d9:3d:fd:4a:fb:56:0b:28:c7:23:47:7b:fb:b5:aa:
                    26:97:eb:e0:65:37:ed:7e:19:58:5d:3b:2b:3c:b5:
                    3d:d3:21:0f:33:3c:3c:ea:ec:8c:a6:6b:68:aa:b4:
                    e1:f9:bb:09:f9:fc:0e:cd:0e:21:2d:40:ad:05:e8:
                    ed:7d:c4:fd:f1:e7:fc:6d:f6:12:03:9e:a5:4f:49:
                    36:b2:cc:7b:97:37:ae:68:a5:79:da:bf:15:de:f5:
                    69:44:5b:6a:74:4b:38:a5:21:8f:e5:d6:b6:94:60:
                    d2:fe:c6:07:e4:cf:ae:0a:df:d3:e8:72:03:f6:eb:
                    43:36:f3:0e:b6:f8:74:10:05:0d:d7:41:81:e1:3d:
                    cb:2d:9e:d9:4a:fa:d1:69:a2:33:b4:75:a6:51:38:
                    7d:49:79:64:a0:7e:44:0c:2e:7d:a5:e8:7e:04:9a:
                    5f:09:b9:74:63:22:b6:bf:6a:2d:58:30:97:27:0c:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:B7:A4:15:74:C7:63:D8:69:5F:CB:74:66:C9:88:E5:43:17:BB
            X509v3 Authority Key Identifier:
                keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:15:da:a4:b1:f4:dc:06:c3:c5:67:b0:9b:b9:17:97:16:3c:
         88:98:4c:95:0b:f5:67:a0:2c:8e:aa:15:03:de:08:e4:7c:a6:
         64:8a:2c:7f:ee:a2:ff:fe:db:41:80:ce:7b:96:fd:54:e5:45:
         16:15:8f:89:35:dd:c8:fa:2d:5c:4a:d0:61:a6:c0:a8:29:17:
         27:89:34:ae:cc:70:ad:3a:b8:bb:99:4f:ff:1e:d0:0a:07:9e:
         41:1d:f1:c7:8d:45:d5:40:18:1f:ab:cd:9f:5d:2a:38:19:76:
         52:c9:34:a0:40:7e:6b:8f:5a:1d:64:0e:60:4f:cd:ee:17:e6:
         79:8e:7b:90:1c:61:7f:ab:39:ff:25:2c:ef:ab:ac:a6:43:54:
         69:61:f5:a3:a3:68:76:46:ee:e5:43:b3:93:72:28:62:b0:e2:
         08:4e:1e:1e:8b:c6:77:44:c7:95:1a:98:c6:fc:e7:4e:47:be:
         70:e7:cc:b0:3b:a1:17:0e:b1:b2:d5:60:cc:a3:64:68:f7:4e:
         2d:c9:05:0a:e2:01:e9:92:74:29:c3:84:61:f7:b2:b0:f6:ef:
         4f:10:ff:df:4c:de:75:2a:8d:da:29:58:ed:44:ab:c6:f9:17:
         7a:fc:c8:45:93:a6:b1:98:8c:5d:56:0f:b9:2b:12:78:b8:37:
         94:8e:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:08:17 2024 by rpki-client on console-ams.rpki-client.org