Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File:                     IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier:          ZWDPJam7iriS6Ow3V/QKX2R39uhlqpMgEg4FsbvMoEA=
Subject key identifier:   17:47:D4:8B:83:03:84:48:DC:4A:6F:AB:90:99:59:04:E8:4B:5F:59
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer:       /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial:       018F3776A560686CC733695F3E1CD2C4CA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 04:01:13 +0000
Manifest this update:     Thu 02 May 2024 04:01:13 +0000
Manifest next update:     Fri 03 May 2024 04:01:13 +0000
Files and hashes:         1: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: ifWAbARwbdLYt8tFfquHQh8faw9z/v9ptXJJW/+GuG0=)
                          2: vAFQF-F8lni1r_6CH29HW5rnwVs.roa (hash: eT8pLKjYFSMt+CHPqTyYN+Ue2bQzsVG814zd0gP2bzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:a5:60:68:6c:c7:33:69:5f:3e:1c:d2:c4:ca:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
        Validity
            Not Before: May  2 04:01:13 2024 GMT
            Not After : May  3 04:01:13 2024 GMT
        Subject: CN=1747d48b83038448dc4a6fab90995904e84b5f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:a7:97:9e:24:69:6d:b6:31:95:77:0b:3a:
                    77:44:6d:23:9e:68:fa:12:7d:6f:d3:5d:df:0b:fd:
                    ba:60:87:89:32:e4:9e:9b:ab:65:55:6d:ee:85:19:
                    2e:b4:9f:fa:3c:62:43:cc:17:5e:af:11:ff:7d:59:
                    82:3d:18:fe:e4:eb:b6:28:e3:b4:ef:c4:42:b1:fd:
                    1c:f9:f6:11:a6:14:44:91:6d:3d:1d:57:d6:9a:6d:
                    e0:a7:0b:e2:18:4e:2d:5f:9f:e1:ac:4d:89:d7:ed:
                    bd:2a:51:99:92:37:c8:1f:e4:3e:0e:e6:3d:17:ee:
                    b3:ef:e6:9a:82:ca:05:c4:84:39:e0:62:3b:35:99:
                    2e:13:94:1c:38:ba:26:a8:2a:60:50:58:65:ff:c3:
                    f4:fa:ad:44:cc:b0:c0:10:3e:34:a0:7b:7d:d1:25:
                    5f:91:88:ce:8d:b9:c7:cf:68:01:fe:ba:d2:a1:9e:
                    c8:79:2f:08:44:e8:73:57:c7:00:ff:4f:16:f6:2c:
                    c8:41:cc:d4:c1:6e:74:70:2c:9f:81:2a:62:b7:b2:
                    ee:aa:99:8c:50:17:d4:00:80:50:db:a2:9b:80:c6:
                    b6:00:4a:12:db:df:f3:33:8c:08:21:99:6a:4c:d5:
                    f4:cc:c4:40:d3:19:1d:65:df:89:3f:fa:f9:0a:ab:
                    db:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:D4:8B:83:03:84:48:DC:4A:6F:AB:90:99:59:04:E8:4B:5F:59
            X509v3 Authority Key Identifier:
                keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:73:fa:96:41:27:cd:1e:41:53:26:77:d5:55:0f:70:5f:
         35:e9:b8:71:12:af:43:0b:24:32:2c:b0:00:3d:6b:9f:2f:29:
         18:1c:b0:ea:dc:07:50:f2:e7:4b:ab:87:da:d8:9b:d7:e5:15:
         7d:1e:1d:6d:21:50:10:0a:98:05:71:c6:33:d9:a8:5c:e4:a6:
         2a:03:fd:a7:d3:03:5d:0f:b5:72:63:e4:a1:ec:51:39:f0:40:
         51:77:f0:17:e6:ba:f5:0d:bd:ec:ce:62:55:40:84:07:d4:6f:
         fe:dd:d7:48:5f:03:f2:d9:7d:9f:43:52:ed:23:80:8a:7d:e1:
         b9:ea:b8:14:4c:ff:46:0c:2b:ef:10:46:84:26:b1:3d:ea:cd:
         e6:f7:6d:40:83:4e:21:3f:57:ed:f8:26:98:d5:77:46:3c:75:
         e6:5c:e8:19:d6:07:51:28:f9:cb:19:82:c5:ca:6e:94:21:06:
         e9:36:c3:8b:31:5e:4d:63:fe:05:72:7c:cd:36:3c:4a:93:28:
         11:a7:e1:34:f0:92:8a:07:bd:21:af:ca:7c:63:51:ad:7f:e1:
         45:0b:61:07:f1:f6:97:e1:9d:38:dc:5c:29:2b:d9:86:86:ee:
         2d:6f:d2:05:fc:a3:5d:23:f5:86:21:cb:46:97:18:ee:ef:dc:
         6b:d2:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:32:32 2024 by rpki-client on console-fra.rpki-client.org