Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File:                     AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier:          jNITyXuP7yn6N7bL5/PVLcMynoDoxyCDLPLbVIYWzsg=
Subject key identifier:   28:CF:DE:B4:02:25:D4:87:E0:4D:37:72:C9:D1:58:C9:2E:FB:03:66
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer:       /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial:       018F51A4ACDAB4C93B63676834F554A8B7FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 06:01:37 +0000
Manifest this update:     Tue 07 May 2024 06:01:37 +0000
Manifest next update:     Wed 08 May 2024 06:01:37 +0000
Files and hashes:         1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: U1nrazKqX8tDezuIioVA7WXH145iS/X9LJTyO+WpBZ8=)
                          2: LJLKtdN5TXYEnGMUb492uPnrepc.roa (hash: hodAm4l+rfHQupGtU9XhWaCmQ2VxdeEFDb0fNrK10DE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:a4:ac:da:b4:c9:3b:63:67:68:34:f5:54:a8:b7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
        Validity
            Not Before: May  7 06:01:37 2024 GMT
            Not After : May  8 06:01:37 2024 GMT
        Subject: CN=28cfdeb40225d487e04d3772c9d158c92efb0366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:53:c8:03:56:e2:fa:6b:7f:6e:27:04:1a:
                    13:55:aa:73:fa:5a:61:31:38:af:c8:3b:8f:c1:f8:
                    c6:ff:12:9d:5d:29:fe:94:2b:ab:b5:a7:4d:c6:8e:
                    bb:35:04:e1:dc:9e:5f:37:4a:c8:6c:84:5e:96:98:
                    24:e4:e1:f1:ee:fd:29:d9:6f:7e:0a:da:3c:ce:eb:
                    db:75:8c:8e:e6:aa:76:be:e2:3d:d8:f9:8a:03:24:
                    05:95:87:e1:3e:93:9c:0a:74:2d:04:9d:d7:37:13:
                    c0:a7:65:31:06:9b:c3:89:db:26:2a:1d:b8:e0:35:
                    b2:f6:0d:2e:f3:3f:9d:7a:58:4e:08:bb:ec:02:50:
                    c9:aa:dc:27:62:c3:d6:06:17:24:88:e0:1f:75:7e:
                    ec:4c:f8:85:a8:ef:80:8c:a4:7b:a8:73:31:21:20:
                    b3:79:e9:72:7a:7b:bf:8e:fb:f3:28:01:49:b9:21:
                    bd:c1:13:20:93:96:a8:b9:ad:9f:9c:5f:53:34:4c:
                    75:0b:d5:c3:30:c5:66:2f:b7:5a:26:e0:08:4b:95:
                    86:8b:c1:0a:72:a9:3b:1a:40:36:a9:e8:21:c1:b7:
                    2b:63:66:0b:bf:09:d4:57:76:f6:ea:ed:88:98:ea:
                    42:8e:18:b0:4b:63:3b:0e:c8:76:fd:27:bb:ff:d7:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:DE:B4:02:25:D4:87:E0:4D:37:72:C9:D1:58:C9:2E:FB:03:66
            X509v3 Authority Key Identifier:
                keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e7:ad:98:fd:40:6c:54:13:0f:6d:49:a4:f2:67:0c:87:88:
         33:97:b5:96:bd:05:9d:18:43:b9:0b:2e:5a:57:96:1d:0d:fc:
         c0:e0:d5:97:6d:80:9c:d3:8b:c6:c5:8f:c8:55:e9:94:85:a5:
         0c:63:77:41:6c:56:ae:48:6e:04:a1:0b:cb:02:af:03:11:54:
         4b:fa:a2:1d:8b:5e:68:b1:52:71:8c:9e:74:cd:50:e0:22:45:
         7a:27:d1:6e:9d:cd:2f:4c:e9:d0:09:45:37:99:7d:97:79:11:
         2e:7a:26:b8:24:9a:53:9b:7f:da:6e:5a:bb:c9:83:56:56:a3:
         16:19:c5:88:dd:64:64:66:60:3b:ae:f1:70:4f:27:ab:ad:bf:
         66:6d:22:ac:c0:a7:5b:e5:f1:91:c3:f3:fe:06:05:de:b6:bd:
         cd:28:e4:57:c7:25:3e:a9:cb:44:f4:c8:72:6c:5f:5b:26:7e:
         a1:86:5c:da:3a:b1:13:70:d6:39:0d:08:2e:1d:1d:88:2b:8c:
         db:fb:56:63:da:2f:9b:31:63:7d:38:3b:a0:e9:72:7d:3f:00:
         ed:db:39:4f:81:01:6a:76:77:3f:87:7b:a7:0f:d6:c0:3f:6f:
         a8:ee:3c:2e:d0:5c:08:ef:70:92:3f:d8:b8:91:31:5f:17:dd:
         d6:2b:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:51:14 2024 by rpki-client on console-ams.rpki-client.org