Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          ub8yXcju3k0SEvBxgUS0wEyw0NXLSXOTAz/nhVibdd4=
Subject key identifier:   6D:5A:52:59:9A:BB:6E:FE:6B:AE:87:38:84:2D:22:62:57:18:D2:AC
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       018F369B213254E2663E3E89AAFE6955D614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 00:01:27 +0000
Manifest this update:     Thu 02 May 2024 00:01:27 +0000
Manifest next update:     Fri 03 May 2024 00:01:27 +0000
Files and hashes:         1: 28cZ9OmPGAlw1UvwwuYM3S3pyT0.roa (hash: bRgZy67uR0Q4U/UNqcb6AvEmgxRI6fH8E1n12Ta3HhA=)
                          2: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: 1oEOZP7OaEiV7c3XRspLHz7zZCjDSt32YiJYwS+w+7A=)
                          3: I0UcssrwK4YrtrkMHjYjGDXWpjc.roa (hash: 3tKCNMkkl7MRdKskJPBVh/7rEjaNvLsIOBh7S0blndU=)
                          4: Ugb4rGZIcxUqjFRaUS9lfYf7-Uo.roa (hash: zDCmyV3Y2LtR5WobEOL7ZMtnsFdf5D/kLywkSJqwNKY=)
                          5: w-mYywg_8JAFPVDkz9S7z1JEaHs.roa (hash: qHZcVOrsQSaoo0CFaSybwzkhCN1cKCrXg594GlsVGB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9b:21:32:54:e2:66:3e:3e:89:aa:fe:69:55:d6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: May  2 00:01:27 2024 GMT
            Not After : May  3 00:01:27 2024 GMT
        Subject: CN=6d5a52599abb6efe6bae8738842d22625718d2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:e3:37:44:b8:fc:23:4c:3e:0f:7a:cd:f8:
                    a4:bb:ab:85:89:1a:c1:13:60:9d:8c:b5:5b:d5:87:
                    bb:09:44:8c:99:34:34:14:f1:06:40:8e:07:c4:5b:
                    6f:63:07:69:79:1f:ca:c9:fc:93:06:d8:97:ff:a8:
                    49:69:a8:dc:ac:34:e8:15:d6:a9:2a:ed:64:70:34:
                    da:f8:ab:31:43:2d:7f:85:ca:44:05:2c:33:f9:2d:
                    99:95:c2:26:e6:80:d4:3d:31:55:db:88:9f:24:aa:
                    9c:aa:83:35:4a:11:4e:62:39:46:bc:41:c4:de:fb:
                    d5:02:ae:c3:d8:ef:e2:cc:82:91:7a:1d:d0:b4:c0:
                    d6:2a:55:56:19:8e:5b:2b:e3:31:ec:07:3e:aa:51:
                    61:ab:0a:c3:1d:aa:01:d2:25:f0:8d:b9:af:f0:b8:
                    86:79:1e:c2:34:95:11:13:4f:7a:7f:e0:85:24:cd:
                    66:9a:4d:e2:c1:17:49:00:9c:31:81:6b:cf:c4:e1:
                    98:d7:9e:d4:2e:2b:b9:08:e4:f8:37:52:14:42:87:
                    de:55:b8:7a:23:b5:f8:a7:02:31:a4:47:99:33:4d:
                    04:69:92:61:ca:21:a8:db:b8:fd:e3:60:b1:dd:2f:
                    e4:05:d5:da:bd:39:2f:26:55:ef:9c:8d:1d:b1:76:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5A:52:59:9A:BB:6E:FE:6B:AE:87:38:84:2D:22:62:57:18:D2:AC
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:0c:34:21:b0:3b:ea:9f:e6:6b:c6:81:89:db:a2:ee:e6:
         c8:89:06:cb:c3:0b:5e:bb:aa:4c:1c:17:28:72:1e:90:71:39:
         03:f1:aa:7c:d9:3e:12:48:4c:2d:a0:70:1c:00:5e:79:d7:e4:
         4d:2a:4f:c7:84:9f:71:9f:81:bd:62:d8:d3:ae:00:27:1b:52:
         0d:81:c9:11:26:69:59:06:31:6a:08:fc:cc:73:d7:e0:f7:57:
         69:de:1b:f7:2d:90:60:32:c5:01:ff:80:14:f4:36:42:a8:68:
         7d:ee:8c:38:e2:c9:82:b1:34:1a:d3:df:24:71:45:26:4b:65:
         16:7f:e5:4c:dd:c6:9f:68:2b:2c:85:2f:5c:7e:dc:d2:70:51:
         93:5d:c9:27:67:48:bd:39:3e:73:b2:c5:22:51:b7:f0:d3:70:
         60:25:ce:e9:47:b6:86:3f:54:85:1c:49:67:2a:45:50:91:23:
         0f:66:64:34:3e:0b:27:6a:f2:83:53:4f:e8:20:c8:02:b5:6d:
         8f:3f:47:61:0c:87:b0:e6:0b:5c:3a:a5:af:66:58:d3:73:77:
         3f:de:18:bd:05:b6:e7:1a:a7:65:fe:f6:f9:d5:b3:f6:1e:e4:
         20:1d:6f:f8:f1:20:1d:3d:ed:a4:5f:be:d4:e6:0d:a7:92:4a:
         41:00:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:06:25 2024 by rpki-client on console-fra.rpki-client.org