Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File:                     dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier:          Ep7ZMrgx71I+pigj08XD8vTrBPaqqKOzgS4pZVCa2pc=
Subject key identifier:   1A:88:0E:6A:40:47:03:1E:D9:BA:EE:5A:46:3E:08:63:02:52:A1:83
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer:       /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial:       018F87B63E208C44D902C500ED14AB691316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:18 +0000
Manifest this update:     Fri 17 May 2024 18:00:18 +0000
Manifest next update:     Sat 18 May 2024 18:00:18 +0000
Files and hashes:         1: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: CtAjgXpoMEKoYs5sOeE5mm/k1llcohMRECSuPxaBLo0=)
                          2: ze9RQ4O_kXZQFQ6PyQ_agiynTLg.roa (hash: zVmVyK3qt2PyrLyXnTZdZG67ziURIOPc/S8QBCH8zx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:3e:20:8c:44:d9:02:c5:00:ed:14:ab:69:13:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
        Validity
            Not Before: May 17 18:00:18 2024 GMT
            Not After : May 18 18:00:18 2024 GMT
        Subject: CN=1a880e6a4047031ed9baee5a463e08630252a183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:65:b7:4a:27:af:72:54:e6:4a:7f:f5:c0:
                    b8:27:98:a9:ab:2d:cf:24:ff:8d:f7:ac:45:28:40:
                    15:c2:7e:0b:76:5f:41:8a:83:11:1b:dd:51:a8:28:
                    96:9d:4f:56:a1:dc:97:50:0e:68:68:78:c1:45:a0:
                    13:e7:f1:81:66:18:e2:84:f2:4f:12:07:7f:b3:a6:
                    fa:f5:ad:dc:ea:ad:58:37:48:40:b8:82:3a:30:11:
                    85:0f:2b:84:b2:2c:7c:70:3a:16:77:df:61:2a:2a:
                    22:fe:cf:3e:0e:d1:32:64:12:c2:8d:7f:7e:d2:fc:
                    b7:a3:f0:db:9e:11:ff:eb:6d:71:2e:c4:32:3e:0b:
                    2b:85:9d:91:c2:71:77:3d:4e:82:0b:3f:ba:9f:90:
                    49:04:90:19:42:6b:5b:2a:2f:3e:90:ec:b6:75:9a:
                    b8:9f:8d:23:56:b3:e6:0d:06:d1:b6:e6:74:7c:af:
                    7f:6a:39:32:52:b9:38:ca:05:93:6e:c7:ea:bc:0d:
                    b6:4a:05:ca:fc:27:7d:9d:1b:e1:c3:75:89:b8:0f:
                    5e:4c:0e:19:e5:0b:8e:45:af:ad:ef:c0:94:9c:2b:
                    07:08:26:bf:c1:2d:05:2a:19:e9:ba:b5:8b:dd:a5:
                    2b:9d:e9:e2:80:4a:9e:86:a1:c2:2b:2f:04:cc:cc:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:88:0E:6A:40:47:03:1E:D9:BA:EE:5A:46:3E:08:63:02:52:A1:83
            X509v3 Authority Key Identifier:
                keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:c6:73:f8:ee:4b:70:d7:89:e8:2b:a4:91:0f:fc:bf:2b:
         a3:a3:a9:87:c7:58:fa:81:3d:93:6a:03:89:93:9a:b1:6e:b7:
         a2:df:a1:0d:e2:91:1e:6b:0a:8b:22:1b:6c:0b:2e:d3:12:46:
         23:cb:c3:37:c4:55:5b:6b:7f:b0:0d:58:94:57:53:d4:f9:c8:
         c4:dd:fb:8a:ef:dd:d7:2b:6d:6c:67:c6:62:0b:39:77:89:18:
         74:28:b9:61:5c:0f:4a:5e:f1:71:d4:bc:79:73:eb:8b:3f:47:
         eb:9a:13:4f:51:89:6c:10:ae:50:69:a4:04:5d:e0:d8:40:c9:
         d7:43:77:97:40:16:fc:83:8a:dc:51:ed:ae:f9:64:b2:b8:1d:
         95:17:f8:c0:4e:f8:a3:c9:90:26:65:9b:bf:3d:17:19:44:95:
         5e:69:a8:ec:68:e1:ec:24:49:9f:9a:a0:9e:8a:6f:e2:d8:bb:
         db:e5:e6:ea:ea:84:d7:fd:5f:e5:5b:53:7d:bc:b1:12:db:55:
         da:c7:90:5f:81:3c:02:9e:35:fa:c2:2c:db:a6:38:eb:be:67:
         c2:db:b2:01:09:cd:71:a9:c9:e8:c6:dc:50:48:17:5a:f8:79:
         b2:a0:b0:ee:8d:ce:16:86:b3:d4:7a:5f:a9:0a:7d:b4:28:95:
         af:ad:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:26:14 2024 by rpki-client on console-ams.rpki-client.org