Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File:                     HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier:          ZRGuYo/hXposntDMXvgHi4kyD89Fp4adHd53DyNWgSs=
Subject key identifier:   D9:E2:39:C5:3D:1D:FC:A1:F1:5A:D7:22:F3:85:06:A2:B2:9F:C1:59
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer:       /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial:       018F3362CF744822A0C88AF2C2ECF600B551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number:          114A
Signing time:             Wed 01 May 2024 09:01:04 +0000
Manifest this update:     Wed 01 May 2024 09:01:04 +0000
Manifest next update:     Thu 02 May 2024 09:01:04 +0000
Files and hashes:         1: 9Uh2ZjfQ4UQ6r3SHQV3OQXTo79E.roa (hash: 29WH2/Itti/Gn0TEkLZAQjyzszUQ/WN5oKSILtJEBmE=)
                          2: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: 48mlFY3u+REkqLv13szMASrzHpRzqEU64GlJI0Uzq88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:62:cf:74:48:22:a0:c8:8a:f2:c2:ec:f6:00:b5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
        Validity
            Not Before: May  1 09:01:04 2024 GMT
            Not After : May  2 09:01:04 2024 GMT
        Subject: CN=d9e239c53d1dfca1f15ad722f38506a2b29fc159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d4:74:f4:ad:3d:27:ad:8f:3e:dd:0b:5e:7f:
                    a2:38:b5:e9:04:52:22:27:a9:c3:7a:30:45:fa:c5:
                    22:7d:10:8f:05:e6:bd:b7:ed:73:e8:b3:07:cd:2b:
                    79:e2:f7:05:e1:f8:54:f1:c0:2c:c9:a9:07:4a:a6:
                    e4:10:8d:58:2b:5e:86:27:5d:a7:5f:2c:a9:38:71:
                    68:fe:6e:1c:ee:54:d2:d7:33:b2:cc:b2:ad:3b:90:
                    92:91:5c:b2:0e:fa:19:a6:cb:95:d1:81:05:b6:8f:
                    c0:8d:cd:33:ab:21:da:ef:40:8b:ce:e3:4b:04:5b:
                    42:4c:62:18:98:18:36:82:62:ba:f1:a8:22:49:6e:
                    38:f3:e7:33:b9:f4:84:2b:9d:55:e2:9b:4f:b7:59:
                    01:42:97:c8:d8:d8:dc:da:b0:c2:52:50:a3:9d:92:
                    31:f0:83:b6:73:35:92:5a:ac:91:78:f6:9e:af:3a:
                    b4:13:3b:37:d3:82:ad:ba:5a:60:b7:f4:91:f8:7b:
                    b3:91:8a:b1:b4:44:01:2c:f6:78:5c:cf:ef:ed:94:
                    1a:1d:bf:56:1a:fb:c5:36:41:e6:24:6d:36:da:0a:
                    82:a0:6d:5c:d5:3c:e7:53:cd:bb:7b:d8:99:02:74:
                    a8:d5:e4:8c:ab:00:4a:9d:9c:d2:96:80:06:7e:71:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E2:39:C5:3D:1D:FC:A1:F1:5A:D7:22:F3:85:06:A2:B2:9F:C1:59
            X509v3 Authority Key Identifier:
                keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:ee:a6:73:f3:af:ef:8c:d7:72:2c:0f:09:40:da:2b:b6:
         40:78:57:0d:c8:4c:d1:a2:28:a0:4c:65:cb:1b:a6:2b:e8:3d:
         4f:99:0c:00:41:b2:31:66:03:8e:21:a8:48:43:3f:db:d9:fa:
         95:18:72:79:c2:ea:16:75:fc:e1:e2:29:da:74:90:10:a4:e3:
         fe:42:7f:66:e0:8a:91:fb:34:4d:75:cf:00:45:37:c3:60:3d:
         07:e4:cf:ba:44:45:43:b4:7c:11:74:27:b7:d4:ea:6e:c8:20:
         72:46:2a:8e:90:12:05:62:fd:4f:f5:e5:cb:d2:82:30:78:31:
         1b:5e:49:b6:89:1c:a5:5f:00:6d:6a:7c:34:83:81:60:83:08:
         02:8a:20:09:b7:d3:53:ea:54:09:4a:da:79:4c:da:48:d2:56:
         92:8a:f0:a4:bb:9d:f7:ce:89:fe:62:41:f6:78:40:79:06:d8:
         fc:a1:ac:9d:aa:fb:49:77:55:f8:f7:32:11:61:a4:a3:63:c9:
         30:2a:2a:08:d4:5a:23:cf:f7:2e:fc:b1:b8:2d:fb:f8:e2:ab:
         36:ee:62:91:5f:f1:02:bc:d0:75:73:3d:e5:ab:02:8c:ea:79:
         49:3f:0a:04:69:0f:9c:4f:d0:f6:a4:8b:f4:71:68:5a:d1:a7:
         ac:0d:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 11:01:43 2024 by rpki-client on console-ams.rpki-client.org