Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File:                     Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier:          r3iHGgItpGd1NxNbDufqwuMak0ov1YOL0v8xT3WODyU=
Subject key identifier:   7E:D3:BE:52:ED:9E:9A:04:83:F4:59:11:76:DD:03:A8:4A:87:BD:84
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer:       /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial:       018F4C47392010C7F9BF0D768F5E3DB0CD15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number:          115B
Signing time:             Mon 06 May 2024 05:01:27 +0000
Manifest this update:     Mon 06 May 2024 05:01:27 +0000
Manifest next update:     Tue 07 May 2024 05:01:27 +0000
Files and hashes:         1: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: 9e4XDwfl+kydxUfLT+kGY5x85uBaDM7cVesZ839ZGXM=)
                          2: ITOfT5x8HNaMTRqO1MyAG-MGFx4.roa (hash: m2VHu0FPkdzfZmXoWvUiZgMffAck24OTu44fsNVBiWI=)
                          3: kVFXe3tg4Y4dvkABOPiq4RSSVa8.roa (hash: mOtSxHVX7z/EJpQnwUSfMnsqQetG5BP19LDaATDXoe4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:47:39:20:10:c7:f9:bf:0d:76:8f:5e:3d:b0:cd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
        Validity
            Not Before: May  6 05:01:27 2024 GMT
            Not After : May  7 05:01:27 2024 GMT
        Subject: CN=7ed3be52ed9e9a0483f4591176dd03a84a87bd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:c4:d0:7a:d1:4d:5c:3e:cd:8b:15:de:b8:
                    1e:31:de:c0:7a:a4:6f:04:ec:51:2c:6d:be:0c:2b:
                    43:35:f4:bc:43:bb:ff:57:1f:73:48:52:52:43:47:
                    65:95:d1:66:31:87:b8:35:eb:5d:50:40:31:d6:a0:
                    18:25:38:2e:47:8d:7d:be:7e:e3:84:04:25:22:06:
                    d0:bd:c0:e2:a4:72:3d:2e:5a:4d:52:ea:2a:71:31:
                    70:b7:28:85:e5:4d:97:b6:20:38:49:70:66:68:7f:
                    c2:e5:c0:4a:da:7e:cd:b0:c2:e5:71:f3:20:b4:3b:
                    d8:40:0b:39:35:ac:b5:34:1b:51:cb:d9:4d:12:40:
                    3c:48:64:5f:45:5e:da:ef:7d:ef:50:77:d5:be:90:
                    66:0a:7c:04:6c:71:8c:af:4e:43:10:17:61:18:3d:
                    41:0a:da:34:c2:d5:f7:ca:a7:d5:8c:ce:8b:97:c7:
                    ba:a7:43:b0:1f:c5:e4:57:12:82:cf:25:7e:ce:ec:
                    39:c5:83:b6:35:8b:57:f8:c7:3e:4b:b7:c1:76:16:
                    40:06:73:74:be:07:db:ba:d5:2b:e0:9a:6c:41:64:
                    c4:0a:8c:46:b4:e6:83:e9:0b:8d:bf:60:ca:50:04:
                    f0:0b:70:07:d8:dd:86:63:94:86:6c:08:98:c1:c4:
                    0f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D3:BE:52:ED:9E:9A:04:83:F4:59:11:76:DD:03:A8:4A:87:BD:84
            X509v3 Authority Key Identifier:
                keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:1d:32:7d:de:71:3e:53:0c:18:7f:c2:74:90:f2:76:03:5a:
         14:0e:17:44:4d:76:88:ae:04:cd:ff:35:08:87:34:66:8e:30:
         83:cc:a8:13:aa:1c:17:9b:d6:cc:6c:79:ee:cd:34:0d:95:43:
         8d:e6:2f:12:e1:9d:ac:ef:93:6e:b8:64:5c:34:0b:2e:03:b1:
         b5:62:7e:13:c2:2b:8e:db:6c:c0:21:f2:86:18:71:20:fe:dc:
         74:ab:95:df:9f:d7:cd:8f:b4:06:4e:48:d9:fc:c6:4f:b0:d9:
         f1:40:9c:b6:36:90:9e:c9:2d:03:bd:fe:10:0c:35:bc:57:8f:
         34:ec:0e:53:76:80:4e:54:1e:87:0f:cd:0b:86:0c:00:86:50:
         b5:3a:76:1e:81:ba:80:1c:97:59:b6:b6:67:9c:1b:eb:b9:23:
         55:9a:de:a2:bd:4a:1e:53:e2:8d:ed:6a:7c:ab:0c:41:57:49:
         f2:01:7e:91:63:24:91:15:7f:72:39:a8:af:8c:a9:16:80:fd:
         9d:09:98:22:38:14:c5:d9:e2:5a:3e:cf:92:32:60:18:24:f1:
         40:2e:b2:6b:58:b0:21:c3:6d:06:79:37:a1:fe:7e:60:1e:97:
         51:a1:ba:27:82:94:e3:72:79:73:72:ec:3d:fd:f1:4a:78:19:
         56:af:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:10:45 2024 by rpki-client on console-ams.rpki-client.org