Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
File:                     29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json)
Hash identifier:          U7OZcS4XfpKWG7kQCNbTKvjja/eomRN24dnPM95KkRo=
Subject key identifier:   80:27:CD:0A:D9:E8:B1:B3:EB:9D:0D:74:79:06:D2:7A:7D:FE:7E:BA
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Certificate issuer:       /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial:       018F460E6C25A200E0D9DE75C03B88F0911C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
Manifest number:          115C
Signing time:             Sun 05 May 2024 00:01:41 +0000
Manifest this update:     Sun 05 May 2024 00:01:41 +0000
Manifest next update:     Mon 06 May 2024 00:01:41 +0000
Files and hashes:         1: 25fDYiozCriyzQrJc7xSlHgy3uA.roa (hash: GCnslpnW5X5r0fPTW1oNmrNykT1lPryfTDj+EgFiTU4=)
                          2: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: 5xwseK+kq551WZqiKeaMgptDhyqs7Ucyno7n27fVFQU=)
                          3: 7bJXskbznb0ncquvAgjTA7MzrUc.roa (hash: 3k5yk4XsFp7D3dxp716QjTvf8HxoYfTiCgc9Sbgqm5w=)
                          4: T69PIW6CtrxEyVHICp_G_9cVoJ8.roa (hash: 05faG5/xdUBs/Jf0emYw1cQqlo9XmW8Ou2XVCizbdjM=)
                          5: WbxMD_SavACMulVK2TFesCrRQ0Y.roa (hash: VMMxbfw5L7XxlpKzE6GTS8ySu/SUCP4eYj3JtG3KeZ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:6c:25:a2:00:e0:d9:de:75:c0:3b:88:f0:91:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
        Validity
            Not Before: May  5 00:01:41 2024 GMT
            Not After : May  6 00:01:41 2024 GMT
        Subject: CN=8027cd0ad9e8b1b3eb9d0d747906d27a7dfe7eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:9c:5c:ef:47:bb:e7:69:eb:fc:4a:2d:11:
                    c0:22:66:33:e8:f8:cc:b4:54:2a:72:35:e0:b1:6a:
                    0f:6e:a7:eb:7e:bd:44:28:88:b0:65:28:d0:62:c0:
                    99:ee:27:a1:cf:fe:58:d2:3a:1d:e5:0f:fa:2c:2f:
                    d3:fc:b6:21:4f:b6:b0:ff:42:68:f5:33:69:40:aa:
                    08:ed:ab:61:89:d9:1c:45:60:ac:98:15:f7:1b:69:
                    fa:64:d3:14:a2:17:1c:1d:ef:75:04:7f:03:96:1c:
                    de:a8:64:02:30:f9:30:fb:8c:f4:16:ac:bc:14:25:
                    81:b0:55:be:a9:f4:ff:67:4b:ed:17:7a:36:b1:eb:
                    16:5f:b4:6c:27:08:75:e6:9a:11:f4:cf:62:90:f4:
                    38:c1:14:43:05:a9:15:4d:8e:17:09:c3:01:07:5a:
                    be:bc:3d:52:8a:4b:d7:c0:5f:df:0a:f9:33:e3:a8:
                    f8:47:02:63:55:85:f4:4f:87:ce:24:60:68:76:8b:
                    11:98:07:13:ae:6e:a4:09:64:df:88:19:f9:b7:9e:
                    69:0a:cf:b1:90:53:3f:d4:0c:50:52:27:ea:47:54:
                    69:53:e4:3d:11:2e:e8:eb:c7:0f:64:2b:f5:6f:17:
                    24:81:67:04:7e:a0:e3:b1:ca:5f:74:89:6c:a6:a9:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:CD:0A:D9:E8:B1:B3:EB:9D:0D:74:79:06:D2:7A:7D:FE:7E:BA
            X509v3 Authority Key Identifier:
                keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:db:c5:0d:cd:d4:0c:59:73:86:04:c4:2f:da:ac:c9:ca:
         7c:5c:59:16:c7:31:7a:eb:34:82:b2:96:71:40:59:1c:51:3f:
         13:2e:e1:ce:b0:7e:bd:89:fb:ac:ba:0c:fb:f1:3e:6c:e4:9b:
         c6:80:4f:6c:45:69:29:8b:e5:c0:d5:18:62:b0:f5:62:ff:8f:
         93:af:04:92:90:c1:58:7f:78:99:67:fc:5e:b8:09:0d:51:48:
         e8:53:bb:6e:35:34:7e:24:45:2f:15:c2:47:fb:6b:12:01:3c:
         17:00:7e:62:af:4e:61:fb:ff:ad:3e:3c:16:83:fe:0c:52:b3:
         d5:1b:aa:1b:58:54:45:fc:5f:3a:ca:27:d4:a9:e2:00:cf:23:
         74:58:fc:95:de:44:d5:42:99:e1:a2:20:a7:68:6c:0b:88:27:
         c3:e5:b5:ba:2f:d3:1d:a5:51:75:3d:d0:d5:11:cd:25:f8:07:
         0d:50:f9:e3:ec:19:e9:e0:de:49:e0:88:4c:1e:83:fc:25:7c:
         7a:1f:e5:70:df:01:3a:97:f6:7c:34:02:85:52:b2:83:20:5c:
         5c:a7:72:7b:72:2b:e8:89:34:a9:1d:b2:b4:91:76:ad:a8:2e:
         3d:0b:43:8f:b5:1f:8e:0a:87:45:cc:f1:cd:cd:f2:f1:b0:4e:
         04:06:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:49:42 2024 by rpki-client on console-fra.rpki-client.org