Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File:                     D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier:          xY2pnTbQ32YQSMyCZJwdyDMQJ1ktm+CCy4dzwr58Xuc=
Subject key identifier:   ED:CE:3D:AB:1B:37:E0:F6:94:32:F2:D7:9F:85:4F:05:6D:2C:6E:C0
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer:       /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial:       018F5515CACA22D6025C17FE9917B278D366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 22:04:02 +0000
Manifest this update:     Tue 07 May 2024 22:04:02 +0000
Manifest next update:     Wed 08 May 2024 22:04:02 +0000
Files and hashes:         1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: Uro/Oh5WZ/+JI3onUCleXgimfWSVYk8Tu3Vjn7QcaDQ=)
                          2: XZwNH8EOpzZcFiUD7mLnV55pRpY.roa (hash: gqDaJpD4+VHFaYCt/Z//ITZML/mRodUJYec1d2U3fXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:15:ca:ca:22:d6:02:5c:17:fe:99:17:b2:78:d3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
        Validity
            Not Before: May  7 22:04:02 2024 GMT
            Not After : May  8 22:04:02 2024 GMT
        Subject: CN=edce3dab1b37e0f69432f2d79f854f056d2c6ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:4e:05:cc:02:7f:c6:47:6a:01:88:53:93:
                    f2:fd:7f:dc:76:f4:e2:70:41:e1:8b:86:21:07:aa:
                    c6:fe:d5:f2:51:1b:35:43:b5:ef:10:c5:0f:24:25:
                    93:a9:09:8c:98:d8:63:2c:95:56:f7:1f:1e:07:c1:
                    f2:ab:3c:20:89:63:47:6a:27:52:98:ba:b2:61:6b:
                    1e:b2:4b:43:41:a5:fe:16:e7:16:d4:cb:58:ed:9f:
                    fc:83:01:5a:db:1b:a2:22:db:8a:1d:72:98:06:5c:
                    32:d1:b2:cc:18:d8:16:a7:5a:c8:44:10:0c:63:93:
                    e8:c3:1f:d5:a7:8e:d5:1f:93:63:bb:34:ad:fe:aa:
                    ba:58:2d:5b:87:cd:b6:bf:e0:45:5f:e1:4e:f3:e9:
                    88:a0:51:5e:08:cf:c8:ec:98:a3:a1:c2:87:ce:97:
                    31:21:5e:1a:da:93:54:6c:e6:3f:28:c3:5f:33:ab:
                    b8:c5:b3:a1:1d:aa:62:67:23:72:c4:ba:4a:8e:3d:
                    42:35:fd:09:a3:7f:dc:a2:cc:e7:b9:b8:6b:7f:95:
                    ed:2e:82:9e:67:7d:dd:7f:6d:28:0e:37:65:dc:f7:
                    87:4e:6e:5d:24:7d:d2:b5:45:70:c8:4b:01:61:65:
                    83:ac:e9:25:63:85:3f:82:e9:f4:d5:da:ee:78:1f:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CE:3D:AB:1B:37:E0:F6:94:32:F2:D7:9F:85:4F:05:6D:2C:6E:C0
            X509v3 Authority Key Identifier:
                keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:1e:d3:19:e3:d7:9f:78:90:8e:eb:b8:9b:86:02:b1:00:
         e4:f9:83:d5:0b:10:f7:47:1c:cc:95:eb:d5:25:2b:fc:ae:4a:
         4f:7b:10:7f:fa:24:10:87:d9:1b:23:28:99:ba:fd:a8:86:5c:
         d0:af:9e:4a:42:a0:cf:64:9e:44:57:9b:61:80:bc:0d:b0:7d:
         f5:fa:cd:e6:c0:c9:ab:c8:86:55:b9:97:49:3d:c1:5d:c7:76:
         83:f7:bb:b2:76:60:2d:31:18:dc:ad:9a:1c:3b:56:58:84:dc:
         b6:34:d3:9f:d2:3e:a4:6f:e8:9a:8c:af:61:b4:3e:45:97:22:
         79:ee:6c:cf:eb:ac:47:d6:95:c2:2e:ac:9e:a2:df:dc:d3:9d:
         30:f3:c2:85:dc:08:82:63:3d:3f:e6:1b:08:a7:02:25:2c:20:
         0c:ae:a5:c3:3f:ee:b3:65:88:97:00:66:77:c2:e6:62:7b:6e:
         d1:bd:fe:50:b9:ec:59:7c:62:d1:4f:d7:bd:48:e7:56:41:bb:
         c5:25:73:25:30:21:09:32:65:fb:e4:08:be:a5:72:59:34:98:
         0b:a7:f7:54:3e:0c:e6:f1:c4:9d:b3:98:95:0d:f1:d3:f0:c8:
         b2:0c:de:b9:2a:03:eb:f3:1e:ac:c7:a2:c6:88:36:e9:57:ba:
         d0:30:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:30:19 2024 by rpki-client on console-fra.rpki-client.org