Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File:                     48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier:          ep4sAxQqUMb56byUbcd8sdudNGAQEcJZyTajs4nZmQc=
Subject key identifier:   B0:6B:F9:D9:D5:32:59:4D:D0:70:B0:F6:03:D8:1E:C0:DE:68:A8:37
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer:       /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial:       018F3440135E5D156CA8200069376C5B5D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 13:02:45 +0000
Manifest this update:     Wed 01 May 2024 13:02:45 +0000
Manifest next update:     Thu 02 May 2024 13:02:45 +0000
Files and hashes:         1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: 9NH2UMqdHD8Y6FBmYWp8+GOk0ggMFoDUQTQcdQ+mvbA=)
                          2: HXWf38Jiyjx5HpR2GCvxfk6JGgc.roa (hash: T5dBuNwCG3P98qrGOBVhUbrKza0kEQYGGAjwCTDHlLA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:40:13:5e:5d:15:6c:a8:20:00:69:37:6c:5b:5d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
        Validity
            Not Before: May  1 13:02:45 2024 GMT
            Not After : May  2 13:02:45 2024 GMT
        Subject: CN=b06bf9d9d532594dd070b0f603d81ec0de68a837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:fd:21:3b:8a:05:17:16:e7:f7:8b:38:1a:
                    8b:a7:48:2c:89:e9:c0:32:7b:df:a0:cf:dd:be:19:
                    4f:8c:57:fc:a0:57:01:4b:6b:30:03:6e:bb:de:3b:
                    ee:2e:d4:b2:84:79:5d:6b:48:8b:d7:1a:60:23:53:
                    36:7f:04:e1:33:f5:19:db:c7:90:46:38:b0:34:d7:
                    8f:3d:2b:22:72:dc:2b:a9:76:26:f2:69:88:97:6c:
                    1d:68:0d:6a:23:41:77:55:94:42:fc:dd:f9:04:0c:
                    3c:e7:09:e0:2e:b6:57:fc:69:ce:7e:82:2d:5a:44:
                    5c:00:30:af:46:a8:9f:04:6a:d0:bd:f4:43:a3:fc:
                    01:85:29:ee:c7:56:f8:bb:68:ad:fd:1c:ea:f9:8d:
                    b5:a1:c9:4d:d5:15:0e:8f:71:49:54:52:a7:d8:3e:
                    25:23:5c:df:9f:5a:e6:ab:a8:e8:57:0e:7f:9c:17:
                    32:f3:16:b4:81:81:c2:da:9d:c5:11:38:e9:18:fa:
                    20:1f:55:61:46:e0:7b:95:14:8b:b6:1f:f2:af:84:
                    55:b0:7f:10:e0:7e:f5:7e:2e:fa:2b:54:7b:90:ce:
                    d5:d0:a8:5d:4a:6e:a7:54:1c:4d:c3:09:d1:88:22:
                    74:d4:ac:ce:43:ab:bf:4a:b4:ef:95:ae:ac:b2:6d:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:F9:D9:D5:32:59:4D:D0:70:B0:F6:03:D8:1E:C0:DE:68:A8:37
            X509v3 Authority Key Identifier:
                keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:47:47:3e:a2:9d:ac:f6:37:1d:72:be:81:6a:9c:b3:b5:ba:
         f5:c2:8b:08:0c:0d:f5:52:f2:bd:bb:73:46:85:65:e9:56:45:
         f9:b5:e7:29:44:61:2a:e7:01:3c:c5:e4:2a:b4:2a:d4:81:4f:
         06:bc:c5:d6:a6:f6:e0:69:29:40:0a:58:5c:68:2e:62:24:47:
         dc:0c:c0:9c:29:e3:fd:29:b1:c5:5f:9e:2f:7e:19:ad:1d:14:
         38:01:d0:91:84:9e:c2:cf:fb:e4:75:e5:8f:7d:ea:b5:ce:5c:
         b7:da:b4:a3:77:2f:f9:e8:fb:a7:1a:f3:46:21:6c:07:2d:f9:
         fd:5c:70:10:f6:c5:f5:28:94:57:08:3a:ce:4c:03:18:c9:43:
         a5:7d:22:cc:5f:db:1d:e6:cb:de:3b:32:c2:34:43:04:88:52:
         8f:f5:75:ff:e7:db:0a:8b:4c:02:53:b5:d6:38:80:97:ad:06:
         44:16:cb:27:78:0c:c5:06:05:13:84:73:8f:9d:38:20:37:07:
         83:31:5a:8e:0f:94:a1:bc:12:a8:c7:88:f8:3b:1a:7a:5b:45:
         5e:2f:86:2c:55:14:ad:82:2c:42:3a:75:bd:b8:87:d7:ed:bd:
         1b:d5:fa:86:45:e1:24:75:a3:62:6b:cb:67:ac:19:b5:d5:01:
         6e:7d:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:50:36 2024 by rpki-client on console-fra.rpki-client.org