Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File:                     15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier:          jv9gONSwXrcHV3rCVT9ocGcn4nS2isGHQI7hQO+LIAo=
Subject key identifier:   D4:4E:84:FB:0A:06:02:5A:A2:40:D9:92:85:85:3F:70:4A:A6:85:44
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       018F3C2F0A6B351046D8B1EE47D3E5B37D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number:          0855
Signing time:             Fri 03 May 2024 02:01:06 +0000
Manifest this update:     Fri 03 May 2024 02:01:06 +0000
Manifest next update:     Sat 04 May 2024 02:01:06 +0000
Files and hashes:         1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: ZcEgAvGs5leayfHsrUHbxtXFGiEdcUPXtm0lMShMkfc=)
                          2: N-HIR8tb2G84PV5sJjY95rZvucM.roa (hash: DEZVBHtG/qqJmsooBl/1qs4w1TSw5XdxadxCcTiPJ0o=)
                          3: ngNMLN1cHJEpMxk7VWISUFedbpg.roa (hash: 31Gsm7cNM0AwryRfEUH1yivQZrbsKuJvYAse/z/ksyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:2f:0a:6b:35:10:46:d8:b1:ee:47:d3:e5:b3:7d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: May  3 02:01:06 2024 GMT
            Not After : May  4 02:01:06 2024 GMT
        Subject: CN=d44e84fb0a06025aa240d99285853f704aa68544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:3f:fb:71:c5:9e:47:d6:0a:3d:c9:aa:22:
                    29:73:d2:8d:46:da:8b:8f:bc:1e:c3:99:32:18:84:
                    d3:bc:30:2c:1c:43:e4:bc:65:9b:c2:39:10:c6:74:
                    3f:26:c3:f5:61:54:f1:a1:ca:90:bd:7e:f1:bc:4c:
                    b5:76:d7:1a:35:46:c0:ca:ec:1a:a2:19:86:18:e4:
                    8c:33:87:b2:ce:bf:bb:46:8e:94:a5:e1:28:9b:15:
                    ef:10:2d:d5:91:97:e1:2f:0d:c7:b1:a9:67:e9:40:
                    9d:4d:04:5b:7b:81:58:6e:6a:a6:11:6c:cc:7d:3c:
                    4c:ba:01:d3:dd:a1:fb:93:ba:00:df:73:95:0e:17:
                    ca:b5:f0:95:a1:c8:af:f4:e9:96:80:12:1d:25:76:
                    0f:b0:6a:ab:66:0f:81:68:69:c9:dc:35:64:a0:10:
                    0b:b3:80:1e:c0:61:3a:4c:3b:9f:22:32:c6:0a:42:
                    de:96:12:98:9b:26:e8:4e:93:57:44:fd:56:ba:95:
                    1f:9f:1e:0e:cc:a9:06:24:89:a5:2f:ee:76:29:3c:
                    14:3d:78:e6:68:dd:bf:4e:2b:73:78:f8:76:d4:29:
                    9b:be:8b:81:4d:09:f0:cf:f5:a4:27:24:8f:17:89:
                    8c:32:66:69:28:ff:cb:40:88:d9:c5:dc:72:d5:92:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4E:84:FB:0A:06:02:5A:A2:40:D9:92:85:85:3F:70:4A:A6:85:44
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e5:d7:cf:ce:c7:aa:7b:c2:eb:3c:d3:8f:84:ae:6c:c6:9c:
         92:6b:e3:16:5d:d5:dc:75:c3:49:45:34:60:6c:f5:ff:47:73:
         c8:25:70:e4:29:f7:1b:97:aa:05:f0:5d:25:71:c1:f4:a0:83:
         b1:cb:ab:93:03:3d:ba:17:3b:b4:14:81:d7:4a:c5:ee:3a:42:
         cb:5e:10:d3:a4:54:70:ba:69:a8:18:1d:a3:db:1f:62:04:7c:
         5c:a7:25:00:4c:ea:f8:36:aa:14:dd:4e:3d:60:f4:86:62:1e:
         87:c9:98:42:f6:1a:35:aa:fe:69:dd:4e:06:1a:33:3d:49:c7:
         33:ea:01:cb:43:8e:c4:99:9d:98:59:f6:40:6f:67:0b:27:be:
         d7:64:78:2a:70:09:5d:7a:1e:85:b3:c0:d4:e1:a2:4c:13:53:
         06:00:38:dc:01:03:25:69:6f:78:74:d6:52:1f:88:8e:b5:8b:
         da:ae:d9:5c:4e:3a:2c:c2:72:45:3c:63:cf:e0:09:2f:52:27:
         c6:45:cb:af:59:f5:86:0b:89:15:66:4f:d4:eb:43:2b:e4:5c:
         20:ad:92:0f:0e:5b:7f:64:53:21:9b:bc:c4:4b:e7:c3:6e:d3:
         15:a3:16:30:1e:90:cb:2e:38:e9:48:6f:e8:a7:6c:d6:bc:ff:
         71:01:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:56:47 2024 by rpki-client on console-fra.rpki-client.org