Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File:                     DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier:          nMLgcbXas9sCe1yLgTkTfWeDHWxeJLRikxs8jRADDVY=
Subject key identifier:   18:C0:40:55:DD:C3:55:A4:F9:1B:35:46:7F:87:72:5D:7A:E6:4F:B7
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer:       /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial:       018F4C0FD4D7280EC1332848FEAFC72C552D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 04:00:56 +0000
Manifest this update:     Mon 06 May 2024 04:00:56 +0000
Manifest next update:     Tue 07 May 2024 04:00:56 +0000
Files and hashes:         1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: o6uHpEtNznfQGvSysCKIKeJjLWShyLCrTWm/fnVmNEQ=)
                          2: kYZXW9paXnWYcfgTdGhdj1jTtAQ.roa (hash: hwwEud6JDZI44E7SOu5DKZFn/2v0WU7+I4KwuYJfhUs=)
                          3: uNlMMjl4ZZ1byf4Z1-KLwOFt8GU.roa (hash: Be1JH4DmyNgj8BZkynXpglv52McgijbEXisuB6StDCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:0f:d4:d7:28:0e:c1:33:28:48:fe:af:c7:2c:55:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
        Validity
            Not Before: May  6 04:00:56 2024 GMT
            Not After : May  7 04:00:56 2024 GMT
        Subject: CN=18c04055ddc355a4f91b35467f87725d7ae64fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:39:e6:25:b6:74:dd:b7:98:c8:c9:23:5e:d8:
                    e3:6e:ae:82:75:19:7e:4d:f6:7f:54:66:9c:a4:fb:
                    50:c1:5a:8f:60:ba:58:ba:90:fe:61:7d:37:11:6c:
                    46:2e:6d:82:c2:c3:89:cf:8d:50:43:4a:86:c8:2b:
                    95:7a:bc:44:cd:7a:c0:a5:55:8d:3f:32:02:37:cf:
                    0e:a6:21:ce:a5:70:d4:c7:c4:5f:a8:b7:93:ec:bd:
                    0d:f0:42:96:2d:35:88:88:6a:e5:e3:69:70:49:40:
                    44:48:a1:83:20:26:03:81:71:0b:17:96:4e:74:ac:
                    51:9d:b4:af:44:59:37:b6:92:eb:bd:53:0c:13:e7:
                    50:fa:1a:e3:4e:4d:05:35:43:d1:46:ca:37:c2:70:
                    15:ea:ef:f5:3a:32:12:be:8c:63:3f:ad:0b:d8:94:
                    2e:c1:03:28:48:aa:59:44:8f:c0:e9:f5:81:58:78:
                    22:d5:11:f9:f3:29:86:58:58:7f:62:2f:bd:87:fe:
                    e0:cd:51:64:4c:40:3a:38:61:c0:ec:d5:85:e8:b1:
                    4b:5a:26:77:9b:66:db:c4:ab:72:28:56:7d:e1:10:
                    84:61:cb:92:2c:ed:ae:90:d3:af:cf:37:3f:43:7e:
                    38:6c:9e:e9:e1:02:91:0d:05:a5:2a:f2:b4:bf:be:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C0:40:55:DD:C3:55:A4:F9:1B:35:46:7F:87:72:5D:7A:E6:4F:B7
            X509v3 Authority Key Identifier:
                keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:06:9c:d1:1c:45:c2:6b:6d:98:27:68:e4:15:17:35:3f:95:
         8c:5d:13:af:d6:45:e6:09:1f:ae:48:bf:9b:a3:ac:1f:4c:6e:
         65:a6:b5:30:33:35:6c:50:9f:d7:a0:96:9a:6c:84:8e:55:70:
         d2:0d:9b:a7:3a:d5:ab:ef:a3:64:b2:0e:a9:e2:96:5f:eb:03:
         1c:58:f7:28:83:02:6e:25:0a:69:2b:c9:dc:bb:a3:c8:d7:d9:
         c1:5e:a9:39:c6:d0:d4:c8:82:e4:d1:c0:61:10:c9:08:cf:a8:
         98:0f:5a:a9:fd:a0:77:8a:b6:f1:5c:7b:bd:ad:85:dc:03:64:
         49:e3:2a:f3:7d:a9:e0:a8:4f:19:f9:59:ac:ee:14:2a:78:97:
         0e:16:7e:81:d5:d9:ba:0e:92:b2:b0:4a:21:46:11:ed:1a:4e:
         11:40:3e:ee:d0:e7:d8:d3:bf:b3:96:4f:f3:58:66:fc:9d:ec:
         02:93:b1:f0:68:97:21:b3:ac:42:8a:cf:32:9d:f0:5a:a0:f8:
         44:74:7c:d9:1b:df:9e:04:80:ee:98:e1:4e:53:84:15:52:c0:
         25:46:33:e4:fc:91:90:57:4d:4b:e0:61:1c:a3:c4:77:62:b9:
         9a:da:84:74:b2:68:70:93:f9:06:a6:f3:2c:5a:41:08:ed:30:
         20:bc:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:23:40 2024 by rpki-client on console-ams.rpki-client.org