Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File:                     CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier:          wyCRF9UpukPlH9FTs0QLV9HVyYevZsX6Fgjwv+SHKZI=
Subject key identifier:   C7:43:B6:85:11:72:DF:B2:0F:82:F3:CB:7F:4E:E4:80:25:49:C4:87
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer:       /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial:       018F343F1E373F544B3B352B46625D908250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 13:01:42 +0000
Manifest this update:     Wed 01 May 2024 13:01:42 +0000
Manifest next update:     Thu 02 May 2024 13:01:42 +0000
Files and hashes:         1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: ocdqv68UOK/VFdIyWmnr4aplkAzK+TRkb3mbV9gjlYw=)
                          2: Gr3ysqBQ81u1mm-HMvEzVWUT8Fc.roa (hash: r1bF027MNnbCkSLaWdDrCN0El3GKvGa+yXdgKXy+eJE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3f:1e:37:3f:54:4b:3b:35:2b:46:62:5d:90:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
        Validity
            Not Before: May  1 13:01:42 2024 GMT
            Not After : May  2 13:01:42 2024 GMT
        Subject: CN=c743b6851172dfb20f82f3cb7f4ee4802549c487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:8b:d6:2e:ab:34:67:aa:fb:bd:69:a4:76:
                    ea:1f:83:6f:9c:7a:3c:47:d0:34:1c:79:6d:67:1e:
                    5f:ba:68:cf:55:9f:33:bf:3c:a7:60:74:fd:00:2b:
                    e9:2e:22:69:61:c6:1d:01:98:29:87:77:bb:bb:12:
                    53:b5:a2:4d:d7:f4:25:2d:a4:05:e5:47:75:14:b8:
                    4e:e6:6f:ee:99:67:e2:45:65:6d:6f:27:97:f9:ca:
                    f5:be:87:bf:63:b0:59:0a:bc:94:1f:02:97:46:d4:
                    7c:0a:c0:d9:63:65:61:bd:c8:86:1e:86:78:ef:14:
                    47:f8:39:e4:95:00:45:8f:49:1d:9a:d3:6d:55:67:
                    a1:6d:d1:c4:a1:d5:14:2e:b9:b8:d0:83:05:a9:86:
                    6e:82:4d:01:eb:6e:ab:8f:60:11:d9:95:a4:4e:6d:
                    9e:8f:a1:3e:cb:30:64:60:90:fd:b2:d6:79:02:30:
                    73:73:a2:97:f6:e3:03:e5:00:94:81:46:ce:c8:7d:
                    65:60:a6:03:1a:60:e0:aa:09:63:81:43:e1:f2:13:
                    d5:d3:fb:9a:d4:eb:21:a2:bd:e9:93:c9:2d:ee:7e:
                    81:0e:ba:e7:ea:2a:12:9b:4e:e1:77:68:fb:cf:56:
                    1f:ce:d9:16:27:36:d3:ba:e3:c5:25:b5:b6:84:49:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:B6:85:11:72:DF:B2:0F:82:F3:CB:7F:4E:E4:80:25:49:C4:87
            X509v3 Authority Key Identifier:
                keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:96:d5:3d:a0:df:9a:f1:5f:1e:31:91:08:b9:33:8f:a3:29:
         cb:85:46:b3:03:15:47:e6:81:be:1c:b4:94:a0:9e:42:63:ba:
         0d:08:c9:cd:22:de:d4:f1:86:3d:cf:a5:40:98:c9:89:c0:8b:
         10:db:dd:37:f0:8f:21:66:fb:0b:77:1d:a0:00:1e:d4:c6:5a:
         36:69:b7:03:cf:f8:70:f9:64:73:a3:8c:c2:c4:81:6b:d1:f8:
         34:90:bf:db:70:b6:91:2e:54:51:ed:d8:8b:3d:43:d9:ca:b4:
         1f:a8:f6:1d:8b:80:e9:ff:59:89:e2:24:e1:6e:05:cc:8b:93:
         36:9d:be:73:3c:bd:3c:12:bc:59:24:78:d6:74:6a:b7:b7:b1:
         a5:60:6c:c3:00:14:5f:ca:bb:86:4b:e5:fc:44:b1:63:46:90:
         3a:70:bb:75:d3:3b:c9:cc:bf:a2:21:02:d0:da:0b:37:56:44:
         a5:08:b0:e6:01:57:1a:16:e2:d8:3d:1b:52:0e:b0:7d:c7:06:
         e8:c4:d2:a4:e5:f9:01:d0:d8:4b:a5:41:59:b8:18:9a:7a:29:
         06:cc:02:69:3b:5d:01:6d:2d:61:ef:6b:bc:1a:63:8d:23:85:
         c8:5b:3c:4c:f3:9f:e8:c8:e7:91:78:77:e0:dd:0c:3b:c9:e2:
         11:8c:14:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:00 2024 by rpki-client on console-ams.rpki-client.org