Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File:                     DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier:          cws4XNsC0DKPPidxorzYKeTVBp5rpw77WhYHyXI3Cq0=
Subject key identifier:   B9:7C:29:7D:EE:1B:32:93:FC:0E:DA:FD:6B:2C:81:8C:FE:1D:42:E6
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer:       /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial:       018F4C7E44AA732474C1D5261334CC17041E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 06:01:34 +0000
Manifest this update:     Mon 06 May 2024 06:01:34 +0000
Manifest next update:     Tue 07 May 2024 06:01:34 +0000
Files and hashes:         1: 9B-dA8XRRnVFph44j0KHr1QMDH8.roa (hash: o3vuZXVdLW+E5F+FFs41N5quq61h6HSFy0d+FWoma30=)
                          2: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: BdqsOmGWCbybQRgjsscPxqajz4dIQomFq+5G6dI5siU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:7e:44:aa:73:24:74:c1:d5:26:13:34:cc:17:04:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
        Validity
            Not Before: May  6 06:01:34 2024 GMT
            Not After : May  7 06:01:34 2024 GMT
        Subject: CN=b97c297dee1b3293fc0edafd6b2c818cfe1d42e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:cf:3a:4d:28:91:58:11:22:7e:c9:58:14:
                    ec:8c:25:82:28:12:74:a7:5a:56:95:0a:b9:5c:77:
                    ae:a2:68:73:d9:ad:88:34:b7:21:3f:5e:a3:81:55:
                    40:00:66:62:e4:3a:8b:1f:10:87:94:4d:d2:e6:7d:
                    f6:0f:fd:c7:f4:c7:47:c8:7e:64:68:25:b4:42:05:
                    25:cb:23:c6:e4:f6:51:eb:1e:ca:0d:b1:71:93:1d:
                    02:c3:2f:b1:52:4d:f2:a5:4a:66:16:e9:28:0a:90:
                    c9:6d:9d:82:9c:73:88:8a:62:e5:a4:a8:2d:5f:ad:
                    9a:4d:fc:dc:a1:73:c7:9f:bb:c3:aa:26:55:cf:35:
                    63:b2:08:dc:83:3e:c7:d5:96:6b:7f:6d:35:ce:de:
                    b3:13:22:37:d0:b8:4c:53:77:ef:23:62:ba:d9:6c:
                    3e:58:aa:d3:4d:8e:bf:45:36:40:e3:d3:c5:ad:2e:
                    b5:3a:e4:a3:b5:09:6c:ec:56:37:fe:2e:cd:87:c9:
                    73:82:ae:88:2e:a9:6b:1f:79:76:06:4d:70:de:cb:
                    ad:1a:32:51:27:17:44:db:45:aa:8e:33:5c:e2:e7:
                    d5:36:1b:60:be:3c:b6:4f:8f:af:73:3a:a6:f8:5a:
                    d1:78:b5:3c:c0:3e:e2:82:ad:cb:4e:3c:37:9a:92:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:29:7D:EE:1B:32:93:FC:0E:DA:FD:6B:2C:81:8C:FE:1D:42:E6
            X509v3 Authority Key Identifier:
                keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:29:16:6f:12:ec:b0:f8:1d:08:12:e0:e7:56:7e:0d:bc:91:
         08:15:e6:38:20:11:81:e8:57:ac:b3:bb:7e:07:3c:3a:62:5e:
         38:61:6f:1a:a8:ff:0a:17:90:95:67:3e:ea:61:16:95:4f:b8:
         8c:b9:0f:23:11:71:86:d9:74:a9:a6:de:ab:80:19:c3:c2:ac:
         8c:5d:5b:4c:2c:9d:db:be:97:e8:f8:16:18:58:76:f5:71:fd:
         a9:6b:19:d0:ad:2a:41:6b:2c:75:48:71:1e:4c:9d:ec:66:a2:
         0a:3d:f5:ba:4c:df:93:0d:6d:6a:3b:e3:2b:23:aa:fd:f8:c0:
         df:2b:e7:df:74:5e:be:c2:15:1f:18:86:38:be:6e:a8:3a:7f:
         b0:9e:c1:8f:3c:df:4a:14:f5:57:da:91:85:00:1f:f0:07:1c:
         c6:bf:78:ac:a8:bc:5b:a6:d7:aa:ed:1f:eb:3a:ba:cb:94:83:
         e6:85:29:36:47:13:2d:56:a4:96:51:9e:34:c1:d3:6c:e4:eb:
         5a:0c:9c:52:bc:08:99:79:d2:72:4d:80:76:32:d7:68:16:a6:
         a7:96:ef:32:41:e1:9f:f6:56:15:14:6b:22:24:d3:ab:87:b0:
         bf:96:ba:bf:bf:80:eb:4e:46:df:10:c2:4f:d1:54:ec:a0:8e:
         9b:69:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:33:32 2024 by rpki-client on console-fra.rpki-client.org