Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File:                     85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier:          HKkCkvSd1z3pHpCIT9x6LjPk6ZusWBKdJ30PwyQYESM=
Subject key identifier:   6D:65:A0:FC:CE:9B:EA:BF:98:07:AC:BB:DC:52:5C:D0:F2:CC:CE:46
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer:       /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial:       018F343F07EFE5348DDA0C9E920EA2E8BE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 13:01:37 +0000
Manifest this update:     Wed 01 May 2024 13:01:37 +0000
Manifest next update:     Thu 02 May 2024 13:01:37 +0000
Files and hashes:         1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: S0pNbIjn0t6arWrauRvX+9xY60AKhzxcj9erWqBE9+w=)
                          2: Fs6Hg0t_o9HZfLTCMAiKmY4DVtQ.roa (hash: ds2EqupyuF3wOC2V6KZ3dQXp6yiLE+h7vZ5zQ7l1udQ=)
                          3: _u3BRflzLICftITXD_e9Jl3HFEo.roa (hash: 66BjQGsXIcmriyk5izO4M84ehTuSTkDTRC87PRjzMUs=)
                          4: jN6jU32Jh9SRwO7GK4Gwq0erO5Y.roa (hash: IVEOvpAPMqeuXx/ahYTvB3I3FIazWgE5K1/5S4srxSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3f:07:ef:e5:34:8d:da:0c:9e:92:0e:a2:e8:be:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
        Validity
            Not Before: May  1 13:01:37 2024 GMT
            Not After : May  2 13:01:37 2024 GMT
        Subject: CN=6d65a0fcce9beabf9807acbbdc525cd0f2ccce46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:52:1a:47:31:0b:38:eb:7c:74:74:34:e1:3d:
                    47:25:24:19:1c:a5:07:3d:81:e1:65:f2:99:78:02:
                    1c:2c:c2:de:92:e6:fa:85:a0:35:5b:99:74:8c:fd:
                    a4:dd:22:4b:c0:23:68:d8:7a:01:06:36:42:0a:be:
                    16:63:b9:d1:35:f3:0b:b9:e8:5f:06:8b:a2:d6:0e:
                    4c:1c:16:47:c3:58:62:7d:1d:30:89:40:be:1a:21:
                    83:b3:ae:1e:c2:32:ce:bf:a1:8a:0f:8b:53:6f:b5:
                    e7:2c:70:15:63:a6:20:29:7d:72:c5:02:27:62:39:
                    4c:e7:21:51:ac:c7:ee:54:56:f2:49:3d:c7:b8:9f:
                    d7:c6:9b:be:e7:7a:1d:9d:67:9a:67:5a:53:8a:71:
                    3c:bf:1f:dd:fe:25:2e:37:c5:53:20:41:5e:38:97:
                    73:79:fc:20:99:72:fe:6a:84:ac:1a:aa:8b:e4:aa:
                    cf:92:9e:e2:28:59:38:24:85:81:49:a5:df:cb:a6:
                    3e:71:43:f6:8f:4b:c1:a2:bd:dd:c9:e4:1a:00:4c:
                    90:9f:c7:89:98:38:55:a7:7e:20:97:fa:bd:ce:db:
                    7b:3d:c9:e8:bd:6c:62:fd:74:e1:3a:b4:f3:5c:0e:
                    37:bf:fd:37:ed:60:5f:c0:e2:75:ac:ae:0b:f1:9e:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:65:A0:FC:CE:9B:EA:BF:98:07:AC:BB:DC:52:5C:D0:F2:CC:CE:46
            X509v3 Authority Key Identifier:
                keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:c6:db:6c:37:a7:66:2d:21:2d:e8:a8:59:17:1e:86:08:
         19:2b:ce:4f:25:ea:99:29:b9:16:1d:f1:f9:57:2c:c7:75:36:
         1c:a1:04:e3:35:19:e5:09:11:12:44:29:ba:f2:a9:cd:a4:a0:
         85:a5:54:be:87:e9:ae:24:78:cf:0a:37:83:77:64:07:a6:2d:
         51:00:b8:20:ef:2c:fc:8a:de:ce:f9:cf:8f:5e:7a:ed:59:25:
         ff:60:7c:60:ac:d5:e5:ea:e8:12:ce:d7:af:86:77:b2:7a:8d:
         2c:b1:08:c7:7a:48:a7:10:64:56:65:d0:38:1c:53:b4:6d:53:
         8d:aa:b0:cb:a6:5c:c7:3e:fd:79:2b:b9:6a:f3:a0:c0:ab:8a:
         46:8e:4c:4a:37:62:f9:02:6b:f3:99:5d:e7:3c:ee:bb:4d:78:
         86:dc:9b:e3:3f:65:64:f6:e6:91:fa:6a:5a:45:95:35:48:fd:
         86:4a:de:51:34:7f:8c:35:ad:5a:2f:f2:0e:29:14:87:20:90:
         4f:19:51:06:54:20:ce:fe:6e:59:7a:6f:c7:97:cf:78:1c:a4:
         df:cc:54:d8:56:e6:21:f4:5e:cb:45:00:49:ec:21:c7:27:f9:
         6b:36:6b:b9:ca:6f:b3:d9:66:5b:cf:07:ac:bb:67:64:f3:b9:
         56:da:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:48:41 2024 by rpki-client on console-fra.rpki-client.org