Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File:                     1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier:          rvXnbAAO7JECp/uASYptJyuRKzOOOaIoBsRvhF/NdTs=
Subject key identifier:   59:AE:0C:05:2C:2B:C3:51:68:D9:C3:DE:FC:4A:EB:CF:7A:90:F5:94
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer:       /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial:       018F5703C189746047237CD50B153CD58078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number:          115D
Signing time:             Wed 08 May 2024 07:03:34 +0000
Manifest this update:     Wed 08 May 2024 07:03:34 +0000
Manifest next update:     Thu 09 May 2024 07:03:34 +0000
Files and hashes:         1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: gqMupb1o6lANFmiePxFHkHGqFZ+ft4g/PMUQEfDeCVc=)
                          2: uToYk_UUMDQDinnaqbWC356rtoA.roa (hash: 455zQVAcmn9fOIFQe6acCiQB7G58N9bjJ7YcQ/XoXBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:c1:89:74:60:47:23:7c:d5:0b:15:3c:d5:80:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
        Validity
            Not Before: May  8 07:03:34 2024 GMT
            Not After : May  9 07:03:34 2024 GMT
        Subject: CN=59ae0c052c2bc35168d9c3defc4aebcf7a90f594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:cf:d3:42:8c:82:55:93:80:80:71:98:c2:
                    9a:e4:87:51:01:1d:a9:4e:83:e4:b1:e3:3f:c1:cb:
                    24:87:a9:27:41:80:3c:64:b2:ff:4b:95:09:0c:ae:
                    b3:64:4f:c0:9d:43:7e:44:26:70:8f:07:2a:b3:d5:
                    90:a8:8d:fc:0f:bb:13:b7:72:71:ed:0a:71:14:fc:
                    c3:63:32:a1:d2:6b:cd:16:bf:7c:84:67:4a:45:2a:
                    00:26:e2:36:28:26:c1:6a:c1:ab:ce:09:90:90:9f:
                    46:ff:a9:8c:f1:bb:72:f1:f6:e9:7b:d0:df:ec:02:
                    4c:3a:63:59:3c:81:8c:e2:66:9a:fa:12:2c:9c:b7:
                    1a:7f:d2:f7:2a:0f:22:45:11:3a:f9:a5:ee:bb:2c:
                    e8:b3:b9:89:61:11:ab:41:53:64:98:48:f1:c3:90:
                    71:48:e0:9e:2e:86:87:6e:c7:ef:dc:5e:2d:1c:02:
                    03:45:5b:3c:c2:66:cb:cc:8b:c6:d3:18:95:17:c5:
                    a6:24:81:25:18:11:3e:fe:b2:8b:18:72:fc:57:3a:
                    77:56:a8:b4:96:ed:22:ce:34:ec:3c:80:14:5f:e4:
                    6e:47:92:91:25:e7:19:a9:48:0b:48:77:99:8f:a8:
                    5f:b5:d2:b5:78:af:56:55:ee:bb:b7:8f:b9:b7:e2:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AE:0C:05:2C:2B:C3:51:68:D9:C3:DE:FC:4A:EB:CF:7A:90:F5:94
            X509v3 Authority Key Identifier:
                keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9d:c4:ac:82:d8:d9:c7:ee:ec:91:36:9a:97:47:20:55:29:
         46:f5:2b:a4:b5:f5:b5:5d:57:7b:89:8c:f3:37:7a:fb:b3:06:
         3e:9f:16:7e:78:a9:68:d0:ba:93:7a:f7:83:1c:78:c7:10:f5:
         1a:c1:9b:7d:38:67:7a:c0:31:d0:8a:71:5f:ea:a5:a0:0f:f8:
         59:27:8c:bc:88:f7:14:38:1d:a9:17:f5:b8:ae:1f:0b:70:d0:
         4a:94:b1:de:14:ba:4b:7c:58:f6:55:36:57:dc:29:93:b5:ee:
         9c:ca:66:dd:03:1f:15:25:21:ec:09:f5:b6:f1:f3:cf:d8:79:
         6f:a5:fe:21:a9:f1:5b:ae:a4:5f:33:a4:50:0d:2f:c0:15:5f:
         10:b8:c6:e0:fc:59:78:34:b3:62:a8:99:b2:ce:c3:a5:40:49:
         65:32:d8:b8:51:d6:58:24:78:54:33:51:80:a6:bb:19:20:6c:
         4f:86:1f:9c:75:b1:ef:0e:46:d6:a6:d1:de:47:43:91:e6:28:
         8f:04:f3:a9:53:c2:2c:b8:55:0b:b6:62:5c:55:cc:a3:7a:d2:
         28:56:45:1b:e2:25:cd:be:9b:1d:d8:a2:d8:2b:97:bc:18:6b:
         ce:c2:c2:ec:28:be:66:b3:40:5b:86:6b:bb:16:f1:c1:83:3c:
         ba:68:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:07:18 2024 by rpki-client on console-fra.rpki-client.org