Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File:                     15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier:          sEIgonhrnWRgGiy5Z1V6zLtiOUYlk2bLbK5V6KtEtiY=
Subject key identifier:   8F:08:48:71:9B:34:83:A9:F7:CB:E9:4B:AB:EC:4A:3F:28:B8:05:49
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer:       /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial:       018F351A7B10417D27ABF0A3C27ACFC8A504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number:          0951
Signing time:             Wed 01 May 2024 17:01:18 +0000
Manifest this update:     Wed 01 May 2024 17:01:18 +0000
Manifest next update:     Thu 02 May 2024 17:01:18 +0000
Files and hashes:         1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: KmWdfLVr2kLV6awdC6SktMZQ58HCFMUt5qPop5xRaQ0=)
                          2: RQrFURx6CQVAbWVN6ED9Sls3lR0.roa (hash: uKuvy8xU4ud7UCOkGQxBTtVPnXIHCz3nFg4WzPtFhoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:1a:7b:10:41:7d:27:ab:f0:a3:c2:7a:cf:c8:a5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
        Validity
            Not Before: May  1 17:01:18 2024 GMT
            Not After : May  2 17:01:18 2024 GMT
        Subject: CN=8f0848719b3483a9f7cbe94babec4a3f28b80549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:f3:3f:bc:c3:97:e1:3a:1d:78:b1:aa:10:
                    6f:75:92:0c:2d:bc:e3:37:5d:3d:b9:4c:fc:fd:f1:
                    2f:19:ac:62:00:14:f1:75:4b:12:9c:67:21:4d:0e:
                    c1:5c:22:fe:10:c8:d3:47:94:a4:23:0e:e2:02:fe:
                    c0:77:5a:27:17:7c:d9:f9:d9:25:93:9b:7b:a8:f1:
                    54:e5:0f:42:7e:03:97:a4:ee:da:bf:dd:8b:cc:0f:
                    6b:f9:cd:7b:9a:64:f7:c0:1f:e6:09:93:12:7a:ca:
                    81:e3:6a:e1:cf:19:51:c5:c7:51:77:81:7d:bd:bd:
                    28:46:f9:0a:81:f6:1f:ca:7f:bb:4d:bf:e1:9e:fc:
                    62:da:42:c5:16:7c:7c:f0:fb:88:82:ac:ef:3b:0e:
                    cd:a7:b0:31:84:ad:35:f3:f6:e1:c5:5d:fb:7f:cb:
                    2d:fa:5b:a9:fb:b6:63:ea:06:08:02:c2:c1:f1:1c:
                    1e:08:96:49:7a:16:ae:ef:b0:09:21:31:d6:6a:59:
                    fe:b1:9a:a0:f1:6c:f2:5b:17:3f:9f:cf:72:f6:b1:
                    5c:90:57:cf:d1:54:a4:55:0e:29:df:19:29:4e:52:
                    d2:61:ec:0c:4e:ea:e1:ae:bb:a6:85:ee:af:4d:f5:
                    3d:61:12:bd:1e:5a:c9:2c:41:f8:93:1a:c7:81:69:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:08:48:71:9B:34:83:A9:F7:CB:E9:4B:AB:EC:4A:3F:28:B8:05:49
            X509v3 Authority Key Identifier:
                keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:7a:aa:ef:a5:0b:b3:ac:51:1d:88:62:84:c9:90:35:de:
         a5:5a:7d:9a:c1:1a:be:5e:d9:55:dd:a0:f7:6f:e2:9d:cc:d1:
         e8:82:05:03:e6:7e:14:35:b6:b3:63:5f:03:76:0e:08:0c:fc:
         c7:26:87:61:9f:72:94:66:b6:f5:8f:9c:19:66:1e:b7:bd:d7:
         95:94:53:3b:13:c4:df:12:26:e6:d1:fb:0c:94:c9:0f:23:b8:
         6f:a5:25:9a:24:d1:08:85:cf:b2:21:31:ee:0d:69:de:b3:95:
         ec:34:73:60:cd:52:4e:1a:b0:bc:e3:10:df:fb:5b:25:d0:13:
         b9:70:a6:d4:39:39:74:96:58:b3:6e:e9:7b:59:15:62:16:96:
         77:2b:cb:d7:d3:41:95:7b:9c:89:2e:32:73:1a:55:ec:ad:4f:
         4f:8c:9d:c8:c9:45:ec:b6:92:4d:39:f9:d6:7a:0d:db:2a:88:
         27:07:30:32:99:85:4a:b8:8c:26:92:91:b1:9d:5f:79:e1:fb:
         e8:e2:36:c9:31:0a:78:27:99:9a:03:17:15:4a:3f:d5:58:02:
         3f:ee:7a:bf:a6:46:e0:85:06:85:47:68:2a:4d:0b:e1:64:20:
         64:ec:d0:ab:b3:25:05:3c:dd:8b:78:db:43:d3:32:7d:4b:b6:
         fd:f2:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:49:01 2024 by rpki-client on console-ams.rpki-client.org