Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File:                     In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier:          Bj3rSSpsNOyUqKXnVNV9WXi/0MQfviNN3o6a17x53Kw=
Subject key identifier:   8D:49:F6:33:49:9D:8A:7C:D5:35:3D:59:E3:AA:51:62:3A:D9:48:2A
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer:       /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial:       018F381DD302AABBED8E0D201B8C5B7DC300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:03:49 +0000
Manifest this update:     Thu 02 May 2024 07:03:49 +0000
Manifest next update:     Fri 03 May 2024 07:03:49 +0000
Files and hashes:         1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: ZY7kG2rJDNIu/tSt6FLaePMAB88/4kxA+Ab8rLfCWYI=)
                          2: VzkacFc_Ux9761-MRYGZRET8GcA.roa (hash: bm+2/kioi+Y/5gpY4FLTWb1wog2KljMTpuqN97ezlM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:d3:02:aa:bb:ed:8e:0d:20:1b:8c:5b:7d:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
        Validity
            Not Before: May  2 07:03:49 2024 GMT
            Not After : May  3 07:03:49 2024 GMT
        Subject: CN=8d49f633499d8a7cd5353d59e3aa51623ad9482a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e4:bd:a5:b3:44:07:03:9e:91:45:e0:12:3e:
                    bd:de:fb:d6:66:c4:c5:96:10:7d:bf:a9:61:64:29:
                    15:bc:98:16:ae:1b:a3:41:3c:24:fd:86:5f:20:74:
                    94:63:51:b3:35:44:90:3a:1f:6e:11:19:6e:bb:bf:
                    d4:34:bb:da:2b:62:6c:1f:3c:d1:44:c7:26:a4:0a:
                    02:54:b5:91:ca:ab:c4:3f:b4:29:a0:51:fa:73:2c:
                    91:01:06:9e:4e:ce:22:bf:c0:8e:0a:f8:97:40:24:
                    f6:7a:c9:23:32:00:1c:fe:9b:44:58:51:99:8b:d9:
                    16:d8:ed:31:0c:50:70:21:de:a0:0e:9e:ea:02:80:
                    c8:f2:ea:bf:b3:af:66:a6:68:08:40:e9:33:3e:79:
                    d5:96:32:b6:8f:c0:bc:b9:b6:dd:f0:e3:8b:6f:1b:
                    9b:38:3e:1e:20:cb:f7:d0:37:43:47:fa:4d:a7:2d:
                    b4:5e:2b:60:c3:88:00:37:a9:79:73:6a:31:a3:2f:
                    7f:59:0a:d0:b6:31:b6:94:02:22:f9:f0:95:75:8a:
                    cc:22:a3:b3:b5:6a:12:0c:68:a0:fb:93:f0:57:99:
                    8e:ca:fc:f6:f8:9a:02:5a:a9:d3:0e:00:08:fb:fe:
                    f4:11:aa:b6:33:b2:55:dc:be:d0:4d:91:00:c5:43:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:F6:33:49:9D:8A:7C:D5:35:3D:59:E3:AA:51:62:3A:D9:48:2A
            X509v3 Authority Key Identifier:
                keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d4:de:72:3c:47:bf:b2:b9:d3:3c:0c:93:d1:da:37:16:ed:
         3d:cb:a9:29:41:f9:fc:d9:71:cd:83:25:79:9d:02:28:fe:e4:
         a6:1a:e4:52:3c:a4:9e:15:55:2a:35:d5:e6:f2:5a:3d:8f:46:
         f9:02:ac:d2:b9:8b:f1:d2:bf:11:80:38:67:da:f4:e8:94:6c:
         6a:36:54:a8:a2:55:98:9b:36:f6:8e:e8:f0:40:4a:4e:8c:c1:
         80:1c:7b:5c:3e:a1:ca:2f:75:ee:bf:33:4f:87:9c:fd:b6:b7:
         d9:dc:a2:e6:f0:1a:84:36:da:5a:24:ef:6e:df:c9:00:2d:54:
         57:fd:5a:3f:8a:90:c1:85:44:84:b2:57:30:7a:b2:97:93:a7:
         f9:04:53:53:39:d9:c7:aa:a7:75:37:98:7c:66:6c:e7:3e:20:
         99:d6:da:32:61:e3:4d:0b:6b:ed:83:5a:80:23:87:58:ef:6a:
         15:7a:25:73:10:43:fb:f1:bd:f8:90:1e:ab:75:22:9c:b0:eb:
         db:2e:dd:a7:1c:a7:11:36:30:81:0e:7c:7b:41:5c:04:20:bd:
         6d:19:51:03:01:95:83:df:47:21:ed:cb:23:f4:8a:46:84:57:
         78:8e:27:19:0c:ac:46:39:ed:dc:e8:8a:0a:3b:30:00:bd:a2:
         be:c6:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:26:00 2024 by rpki-client on console-fra.rpki-client.org