Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File:                     CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier:          o1S05Fks+egwdZFA8bPlBxD8G5ELT88QkJH2aaZNzI0=
Subject key identifier:   27:9E:C7:52:BD:A3:F6:FB:71:72:60:BB:9B:58:E4:4B:DD:29:1C:E8
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer:       /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial:       018F58F0937F5F579245A28714E15555D76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 16:01:52 +0000
Manifest this update:     Wed 08 May 2024 16:01:52 +0000
Manifest next update:     Thu 09 May 2024 16:01:52 +0000
Files and hashes:         1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: QX2VQtW8VoM+Ldl3IOj7KtaJ+wSKcxbPACNwqovGy1k=)
                          2: oiM1IgrYDgTti_QMigSX_OuM4L8.roa (hash: j20H5STQa60YP6Gw6o0EUQhhcIx+2VEjgyPJtfJNcZo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f0:93:7f:5f:57:92:45:a2:87:14:e1:55:55:d7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
        Validity
            Not Before: May  8 16:01:52 2024 GMT
            Not After : May  9 16:01:52 2024 GMT
        Subject: CN=279ec752bda3f6fb717260bb9b58e44bdd291ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:9b:bc:f3:29:e4:b5:f8:92:2d:0e:78:ef:d7:
                    fb:54:33:3b:4a:89:6a:51:1b:e4:75:29:3d:f6:01:
                    05:0a:03:55:35:6b:11:e6:85:bd:b1:30:2e:2c:98:
                    d1:15:3c:a8:95:a7:3a:86:ec:34:b5:48:72:ee:51:
                    fd:13:0c:17:9d:37:97:eb:a1:3f:65:09:75:af:64:
                    f4:f4:62:2a:d9:fd:cc:bf:f6:7c:18:25:43:3d:5c:
                    21:35:41:8b:a7:b6:3a:da:53:f5:0f:7d:c0:5f:38:
                    35:1e:0a:d9:cf:3e:41:d0:13:16:3e:bf:c4:30:b7:
                    2c:50:d0:76:6c:08:32:60:0d:b6:c5:34:c7:fc:5f:
                    3c:cb:47:84:21:a5:71:64:b4:38:31:75:ea:92:29:
                    62:c3:ad:5b:ba:ed:8a:42:a0:ce:d4:f8:df:6a:38:
                    65:58:52:6f:a9:0a:88:81:f4:e0:ae:86:b6:0e:8b:
                    d9:04:ac:49:b2:58:c7:8d:3e:73:95:69:4c:95:a1:
                    d3:19:a3:8b:b7:7b:fa:bb:c1:7d:dd:73:07:99:8c:
                    29:ec:d4:48:98:04:35:82:e4:cb:3e:5a:3a:f4:90:
                    2f:0f:19:d0:9a:b9:20:88:7e:42:d8:bf:05:00:79:
                    97:8e:2a:b1:97:7c:05:29:af:c4:ca:23:b5:ab:6b:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9E:C7:52:BD:A3:F6:FB:71:72:60:BB:9B:58:E4:4B:DD:29:1C:E8
            X509v3 Authority Key Identifier:
                keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:bf:46:8a:cc:83:96:34:72:31:6d:fb:22:aa:32:b9:58:
         be:ed:5d:1d:ac:72:41:f0:34:8d:90:03:1a:a5:81:b7:e2:22:
         6d:e8:b9:5c:b4:57:02:3c:99:80:43:79:4d:b6:dd:55:de:ea:
         e0:da:27:26:a6:18:b2:e2:10:88:a5:43:cf:5e:67:ee:f4:cd:
         2a:63:73:2c:27:b6:ac:76:09:81:64:b2:8b:e2:ea:00:dc:2e:
         18:6a:84:39:60:09:2e:8d:68:4b:d8:1f:bc:c1:6e:b2:20:f1:
         4b:dd:09:bc:c8:5b:34:7c:16:f0:55:5a:7d:89:22:96:95:1d:
         50:1f:53:93:61:05:fc:e6:cc:cb:e9:a6:42:83:c3:9d:2f:f0:
         33:54:f8:f7:d4:3a:31:3d:66:3a:c2:50:66:e2:fd:13:2f:44:
         32:01:a6:b5:ac:c2:0f:28:cd:05:68:fa:08:12:94:de:9d:55:
         cb:85:56:fd:e1:6c:77:7a:16:7d:0d:32:17:34:09:91:0c:84:
         28:a6:19:85:3f:52:ed:2a:f5:62:40:c8:4f:42:08:3c:b7:ca:
         5e:07:ce:46:90:81:e3:05:0b:33:d8:cc:82:35:b9:fc:75:f8:
         b6:0f:11:8d:cf:ce:0f:82:61:52:9a:ca:cd:96:72:83:df:e1:
         6e:b1:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:52:59 2024 by rpki-client on console-fra.rpki-client.org