Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File:                     0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier:          3xZiqqPCOWOXiWqa/gsYxDXTlooFk6/IFuUWOWxXyYg=
Subject key identifier:   55:8A:56:87:3D:44:81:C5:E4:04:D8:A8:AC:39:3C:25:A8:80:26:FF
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer:       /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial:       018F53263E1FC0A5179FC9AB1949E629FF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number:          1131
Signing time:             Tue 07 May 2024 13:02:46 +0000
Manifest this update:     Tue 07 May 2024 13:02:46 +0000
Manifest next update:     Wed 08 May 2024 13:02:46 +0000
Files and hashes:         1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: sWWgLPaga+6yXa68K4f3MK1iLDDfVhBM+f0OCjRWlQo=)
                          2: 6VZncbWpWcsTAGJq_VZyd_b7S14.roa (hash: qBwjvXiaft2xm0DCRFkFsS1H5cMXCELN0iORHV4uhMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:3e:1f:c0:a5:17:9f:c9:ab:19:49:e6:29:ff:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
        Validity
            Not Before: May  7 13:02:46 2024 GMT
            Not After : May  8 13:02:46 2024 GMT
        Subject: CN=558a56873d4481c5e404d8a8ac393c25a88026ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:63:f7:7b:25:3e:38:d1:10:50:c5:96:27:
                    90:bc:3c:9a:86:40:e3:dd:a2:f9:84:9c:8e:7d:ad:
                    4d:c1:70:8e:4e:df:c7:4d:3f:cc:92:18:d9:99:5e:
                    e8:c1:31:8e:5c:9b:f7:49:8d:3f:69:23:8f:a9:8e:
                    fb:54:7d:3a:b5:3b:28:3f:38:24:df:4d:e3:38:4d:
                    d6:86:af:53:15:9e:87:bc:25:61:14:cd:21:15:4b:
                    8b:3f:33:8a:31:ba:7b:da:fc:3c:53:f2:a6:40:e6:
                    1c:29:93:bd:99:a8:18:92:d2:17:ac:41:94:d1:22:
                    89:cb:3f:10:80:48:7f:b6:d8:c3:5e:9e:65:db:af:
                    46:6a:8f:fc:75:79:08:64:45:d5:1a:14:0b:3f:1c:
                    fb:92:b6:49:bc:2f:9a:c6:b0:34:45:1f:f5:72:92:
                    0e:a9:a6:4a:c7:9c:8f:b3:35:73:c3:3d:c9:42:dd:
                    e6:5b:6d:84:1e:b5:2b:4e:5a:bd:b9:ac:3a:b4:fd:
                    99:a0:28:c1:19:bf:f7:ea:23:97:23:bd:84:ff:b3:
                    c1:90:9a:02:d2:e5:06:03:31:5c:b1:f6:a2:dc:6a:
                    af:95:6d:8d:1f:51:9d:e4:38:9a:47:22:e7:41:f9:
                    3e:05:81:86:b0:c4:17:0e:e9:b4:30:3e:41:3f:35:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8A:56:87:3D:44:81:C5:E4:04:D8:A8:AC:39:3C:25:A8:80:26:FF
            X509v3 Authority Key Identifier:
                keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:04:2d:26:12:2f:36:19:84:f8:3a:fc:46:a3:b6:56:bf:0e:
         6d:8d:58:42:7d:d5:6a:cf:07:a1:d1:6d:8d:86:81:72:b9:09:
         38:8e:7d:53:ba:30:4e:ef:1d:88:0e:63:0b:b2:f9:b3:68:27:
         83:d6:1a:10:73:6b:de:9e:2d:a9:00:c2:8d:51:cc:f7:cb:1e:
         54:2e:65:c8:81:42:18:78:00:06:97:2a:bd:1d:99:25:36:57:
         ce:7a:72:c3:e2:32:79:28:3e:30:98:50:9b:63:53:33:da:57:
         43:72:8a:2a:1d:ae:b7:7e:79:6b:e1:5f:90:8a:ed:ea:d0:5f:
         97:f1:94:18:a1:05:b3:d5:86:39:28:9d:a1:d6:8e:fa:9b:64:
         dc:28:ee:ed:57:27:86:96:c8:8e:78:97:49:a7:90:04:57:15:
         7c:b8:76:d5:6b:e0:62:e8:60:9a:51:c0:28:81:a6:1a:96:94:
         e5:2f:83:c6:f6:50:0e:04:fc:8a:65:07:84:2e:8e:17:77:af:
         17:fa:bd:a2:9a:bc:0d:41:c5:6b:d2:02:75:7a:d5:93:17:53:
         7d:45:eb:44:ce:08:9c:81:3d:02:bc:72:9d:e5:bf:81:8e:86:
         d7:4b:c4:04:2f:86:10:19:b9:6c:8f:28:23:e8:a0:5b:9e:50:
         02:ac:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:50:21 2024 by rpki-client on console-ams.rpki-client.org