Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File:                     B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier:          6DrQ/GSf/jTmswgcEtzLL+pRhAnYN7JOSI8WK3/niOM=
Subject key identifier:   3A:81:12:CA:EB:5F:F1:1E:07:71:62:E0:18:1A:44:01:02:B8:98:97
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer:       /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial:       018F546ED75AF00665E7F6952F7035F27BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number:          115F
Signing time:             Tue 07 May 2024 19:01:41 +0000
Manifest this update:     Tue 07 May 2024 19:01:41 +0000
Manifest next update:     Wed 08 May 2024 19:01:41 +0000
Files and hashes:         1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: gv/ogHe7aJiEfVRrPuc1fpcaAdglwe5MFgEq5by9dfM=)
                          2: aioD9ujZ60hMObKSIDD8aRvgtsU.roa (hash: t2+XxfXvTayNk8zXu9CokWl7j0V3fJ4gS3J0STIHkak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:6e:d7:5a:f0:06:65:e7:f6:95:2f:70:35:f2:7b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
        Validity
            Not Before: May  7 19:01:41 2024 GMT
            Not After : May  8 19:01:41 2024 GMT
        Subject: CN=3a8112caeb5ff11e077162e0181a440102b89897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:f5:bc:82:8f:f2:46:0d:55:b0:7f:39:b6:
                    a1:b5:2c:3f:e9:1a:ff:87:fc:86:59:e6:57:79:ce:
                    9c:70:00:55:71:86:dc:0c:e4:a5:3b:ee:01:3d:8f:
                    70:ef:a3:28:99:c4:b6:c9:28:52:0a:01:3d:ac:2a:
                    20:58:80:a2:c5:93:74:96:52:31:18:e4:be:86:c5:
                    a7:78:e6:07:a2:d5:2f:35:ce:83:b2:8e:5f:10:59:
                    b1:6a:9c:0b:f8:ce:4b:d2:2c:59:20:0c:42:25:3a:
                    8b:22:20:76:fe:0a:66:9e:08:f3:a2:6e:27:38:bf:
                    e4:bf:ff:e4:ea:5a:05:83:c2:76:21:7b:6e:f1:02:
                    b7:76:33:fa:bb:81:e8:ec:15:28:c5:e1:b7:af:46:
                    27:f7:d1:f9:e8:a1:0e:e1:ea:03:24:84:df:91:f9:
                    dd:03:cb:b7:0f:58:a8:ed:ac:fa:07:35:b4:6f:60:
                    47:47:18:41:2b:94:42:8a:03:14:d6:dc:a5:ac:ca:
                    32:e0:bb:af:23:16:7d:fe:f9:67:89:66:a6:52:ff:
                    68:ea:a8:1a:03:40:66:15:ca:d7:6d:b6:61:f9:24:
                    d3:fd:56:7d:cf:6e:9b:69:0b:7f:70:52:c3:90:da:
                    44:31:20:73:c4:cf:f2:b8:a3:90:f2:7d:5b:5d:19:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:81:12:CA:EB:5F:F1:1E:07:71:62:E0:18:1A:44:01:02:B8:98:97
            X509v3 Authority Key Identifier:
                keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:34:d6:a9:8c:63:c2:b9:2a:d2:4b:71:29:80:2e:43:f8:83:
         7e:d5:e1:d5:44:8c:71:e3:17:0b:3a:4e:33:ba:7a:19:32:91:
         b7:69:22:f3:eb:68:04:2b:d5:78:76:47:d7:3d:56:21:ca:ef:
         6f:b6:06:53:46:d1:9e:d3:ae:94:fe:cf:00:3f:ed:ab:4c:f5:
         07:1c:19:c0:1f:e6:12:32:95:bb:7b:5d:d1:d7:34:50:bc:b5:
         cd:1b:3f:71:33:46:6e:1c:16:01:e3:8e:e9:46:f8:df:b9:16:
         a7:15:e3:ad:fa:3d:6b:a6:16:34:83:a8:9c:5a:37:55:25:c6:
         d4:23:8e:f7:52:0a:fc:a4:71:fe:85:9a:12:24:e6:fd:73:04:
         0a:ee:ad:16:5d:ae:6e:ae:da:a8:9a:a3:17:e4:16:03:54:ac:
         7f:be:1f:eb:5e:31:55:10:0a:64:be:32:11:f2:85:93:eb:95:
         20:59:22:67:3d:ad:a6:3a:4a:19:8a:2a:33:cb:ca:58:90:97:
         7c:01:88:28:b6:af:f9:6e:d5:14:b9:44:35:10:c8:03:72:5e:
         4a:cb:69:13:6b:a6:b9:c9:d3:87:11:b1:aa:3a:49:6b:fe:45:
         e4:d5:30:23:2b:41:f0:28:33:21:5e:9f:f3:7c:40:ea:dd:81:
         df:8d:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:58:25 2024 by rpki-client on console-fra.rpki-client.org