Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File:                     DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier:          991RZze5LB9OY0LcfHQERvlF6ItkFnpnhdv/54R7WJ4=
Subject key identifier:   76:21:0B:92:C2:80:74:23:96:80:D4:DB:33:DE:F4:6E:A2:7E:98:AC
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer:       /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial:       018F52490EBC02CBE926208A8A305B01279D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 09:01:10 +0000
Manifest this update:     Tue 07 May 2024 09:01:10 +0000
Manifest next update:     Wed 08 May 2024 09:01:10 +0000
Files and hashes:         1: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: mx2BtLz/AauquviR0WX5dReNNMyCuLPelW7d6PgjtCs=)
                          2: kN176bXZtiQY0c1gvsCfeQUsksU.roa (hash: Fu0gvxfUbeXX6mJPfmgVUAHzq6TEJAfcWEB+95IJJ4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:49:0e:bc:02:cb:e9:26:20:8a:8a:30:5b:01:27:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
        Validity
            Not Before: May  7 09:01:10 2024 GMT
            Not After : May  8 09:01:10 2024 GMT
        Subject: CN=76210b92c28074239680d4db33def46ea27e98ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:21:32:21:1b:43:93:69:e8:db:d8:0d:11:
                    42:4e:93:e4:88:49:bc:e7:0b:ec:d4:a8:b1:2f:26:
                    cc:72:17:73:8e:6b:f7:d8:e1:e6:46:25:fc:d2:b5:
                    f3:b6:8a:e5:c6:2d:85:88:a0:2c:13:26:c5:e3:e5:
                    ef:57:98:48:f3:ac:ed:e7:c8:9e:c7:99:a7:ff:fb:
                    a1:0e:cf:fb:c0:c9:be:eb:05:53:fb:77:1d:62:c0:
                    e9:38:35:51:3e:ee:2b:ab:f2:ea:35:20:86:08:16:
                    3f:bc:b1:cb:dc:9b:2e:9e:72:84:e2:04:3a:f1:ff:
                    88:94:41:ab:dd:ca:8b:48:b1:08:3f:d1:3b:75:9e:
                    b9:97:75:56:09:5c:c1:aa:d4:79:05:a5:41:b4:5b:
                    41:10:62:ab:19:6e:68:48:fe:d8:4c:f4:2c:c4:f1:
                    42:54:b7:d9:63:c4:01:4e:10:5a:07:f5:20:aa:29:
                    b0:0c:b8:f0:37:03:66:0d:4e:a7:2a:cc:1a:3c:04:
                    4f:01:6d:42:f2:9b:11:e4:d0:f9:25:25:66:ef:6a:
                    1c:29:12:8e:72:8e:2f:e2:d1:72:50:3c:05:1d:8f:
                    89:a2:53:ad:4a:1d:b8:b7:39:8e:4f:d0:ff:b9:13:
                    f7:5b:19:f5:72:95:84:73:6d:40:01:34:9f:41:6e:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:21:0B:92:C2:80:74:23:96:80:D4:DB:33:DE:F4:6E:A2:7E:98:AC
            X509v3 Authority Key Identifier:
                keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b7:ee:76:e3:8f:88:eb:a4:99:cc:73:91:d4:16:71:a7:77:
         31:b4:de:9c:20:5d:ed:42:c1:10:ce:8f:b9:a6:73:eb:84:3e:
         d9:43:90:58:74:6e:9f:5a:9a:43:93:e2:ab:69:4b:f2:b2:0e:
         fa:7a:0a:5d:82:c3:2d:db:dd:75:fc:ad:21:dc:bf:62:1e:5a:
         28:5e:34:32:17:aa:41:22:03:c2:f8:d4:80:66:77:eb:53:94:
         b6:5b:77:85:de:59:2c:52:4f:3f:b7:8a:d9:bf:48:a5:95:83:
         47:9e:7a:24:a1:7b:39:ec:69:ff:a2:81:ed:56:52:f0:3d:d0:
         3e:a9:c7:99:37:b6:e7:8a:5f:8b:bd:c3:7b:e7:f7:93:5c:3a:
         80:17:03:89:d4:f4:66:3b:52:0f:de:58:05:e3:77:04:52:eb:
         27:c7:ae:87:2c:ef:70:c5:fa:d4:2f:37:f9:59:73:f9:f4:a5:
         47:66:fd:79:22:bd:a2:18:d8:7a:88:8e:1a:52:37:95:99:02:
         88:58:96:3a:58:55:9d:03:0a:d3:99:38:6f:e6:6d:0a:48:b8:
         50:47:91:c0:81:5c:94:27:59:04:59:b0:46:2f:53:22:b1:f7:
         46:08:97:e7:0a:d2:bb:83:b8:d5:bd:88:e0:89:0f:1b:54:74:
         0d:ed:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:20:58 2024 by rpki-client on console-fra.rpki-client.org