Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File:                     L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier:          U89nRWRFEUToNNLAoMrkUKLZmo8pStSK+4Ed9CMxl6U=
Subject key identifier:   D7:97:70:A9:03:06:99:7B:8E:0D:7D:6D:60:75:17:5A:D6:ED:23:72
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer:       /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial:       018F8891DEFDB898C134125B0E9528D823B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number:          115E
Signing time:             Fri 17 May 2024 22:00:12 +0000
Manifest this update:     Fri 17 May 2024 22:00:12 +0000
Manifest next update:     Sat 18 May 2024 22:00:12 +0000
Files and hashes:         1: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: uHBrB9tFRBWsa+cVkz/uRSxLTQPHcKNmTHYvjyGisf0=)
                          2: nXcd68FA6wzEBrKowRhwqwGa0wc.roa (hash: COA2j9H9lF4n8M+o6lTXEow6KedsZ5b6uvstYrcIQWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:de:fd:b8:98:c1:34:12:5b:0e:95:28:d8:23:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
        Validity
            Not Before: May 17 22:00:12 2024 GMT
            Not After : May 18 22:00:12 2024 GMT
        Subject: CN=d79770a90306997b8e0d7d6d6075175ad6ed2372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:c1:20:37:9c:c1:68:cd:d2:89:3e:77:b8:
                    36:ed:05:91:7f:0b:36:62:ca:61:76:f1:c8:6c:02:
                    84:56:41:5c:4f:3e:85:63:0a:7d:0f:5b:8b:5a:b3:
                    6c:a4:8f:2d:db:3f:cd:82:f1:d6:23:56:92:9b:31:
                    34:d1:aa:31:d8:fe:a7:d2:ee:e6:38:85:de:25:5d:
                    66:3a:a5:4b:5f:9d:b5:5e:bf:43:01:b0:f5:88:30:
                    d5:a4:07:7a:b4:e4:2d:a0:60:3d:ee:14:fd:74:fa:
                    73:11:7f:84:0f:48:1a:e0:44:84:57:7c:8f:cf:6f:
                    98:2f:be:7c:52:0b:39:09:c9:63:6f:60:b2:a2:23:
                    41:9f:5f:1d:4c:8f:12:ef:eb:d4:51:d0:a5:6b:72:
                    77:ba:33:b6:98:5b:d2:23:a9:e5:ff:ad:89:90:fc:
                    ea:05:55:97:42:cd:7e:18:3d:16:35:7f:dd:6b:91:
                    f9:e4:34:b7:66:e7:1a:fc:16:cf:24:cd:41:e6:16:
                    02:92:82:64:97:fa:53:47:f2:db:a7:83:83:94:3a:
                    77:12:a2:fe:58:c6:e7:48:b2:47:9b:8b:43:3d:f2:
                    43:07:40:47:ce:d2:c7:36:a8:8c:38:6e:74:ae:c7:
                    ce:23:97:4a:85:e3:44:f0:c3:b6:19:30:f9:4c:d8:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:97:70:A9:03:06:99:7B:8E:0D:7D:6D:60:75:17:5A:D6:ED:23:72
            X509v3 Authority Key Identifier:
                keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:f8:55:37:11:e4:b5:df:61:b5:43:55:d6:4a:08:78:76:
         27:a7:df:43:f2:4c:86:b9:aa:d1:63:c4:14:33:f7:2d:ff:fe:
         c2:79:1c:66:27:11:17:5b:d2:3f:ab:e5:e4:d3:a3:15:91:06:
         20:d5:8b:32:8f:1a:e8:8c:f7:d1:62:c5:6b:22:fa:5c:f9:93:
         ba:cb:2c:29:a6:9b:08:ac:5f:3f:01:0d:8c:a9:d0:d9:0c:72:
         74:c6:50:c2:45:7b:b1:23:56:3d:22:46:f6:90:44:79:13:8e:
         52:4c:f8:61:56:6e:7e:68:2a:12:a4:23:ba:05:90:99:ba:61:
         ce:90:10:59:b6:f4:3b:3d:c6:29:97:16:8d:ab:3b:9b:c9:98:
         e3:d7:b5:34:cd:68:a3:73:a9:3c:ac:6f:72:1e:69:bc:f5:13:
         a9:ec:b0:55:60:50:74:df:e4:c9:58:b4:2a:f7:d7:ab:39:d7:
         a0:00:de:8c:17:a4:a2:ad:86:53:9d:1b:22:de:40:4c:ae:d9:
         8f:cc:e1:d9:36:4d:6d:3d:ae:3f:1f:ad:94:92:09:3e:6a:cc:
         f3:e5:b4:36:42:71:75:ce:31:d8:6b:25:be:39:11:3d:19:a2:
         2d:e8:8c:5e:84:eb:19:9f:1f:2a:35:ae:f9:57:fa:4b:a8:d2:
         38:7f:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:32:58 2024 by rpki-client on console-fra.rpki-client.org