Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File:                     A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier:          0h2k5gBZdo5bBpS8vruqmRCYhnqfeju4TCDHbkvBs7s=
Subject key identifier:   B1:79:AF:86:FD:87:09:8E:B0:76:31:78:34:69:E5:E0:33:16:31:04
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer:       /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial:       018F57033A9499967419D68918C558A02AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 07:03:00 +0000
Manifest this update:     Wed 08 May 2024 07:03:00 +0000
Manifest next update:     Thu 09 May 2024 07:03:00 +0000
Files and hashes:         1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: kvWNWreKf6oFxNur5NEsIlMOhzd6uJxiwdq5H7mM+vg=)
                          2: fYbTnOlCQh378dWEbud-_NfORts.roa (hash: aCNT2qqGFUHsFnlMLmPu4gi2gWv5F3xCWZ5fRmUnVnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:3a:94:99:96:74:19:d6:89:18:c5:58:a0:2a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
        Validity
            Not Before: May  8 07:03:00 2024 GMT
            Not After : May  9 07:03:00 2024 GMT
        Subject: CN=b179af86fd87098eb07631783469e5e033163104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e4:46:db:92:d1:90:56:19:42:0f:a8:10:32:
                    5b:7a:fa:a9:6c:17:bf:03:e4:c2:ed:a1:76:10:d8:
                    37:ee:dc:c9:5e:9b:1d:da:3b:bc:e0:3c:68:8d:fc:
                    44:1a:07:0a:20:c9:bd:bd:89:b2:32:d3:84:be:26:
                    d2:54:c3:41:39:8a:02:9a:48:ec:a8:be:08:29:43:
                    0f:c3:45:ca:58:98:85:8a:d2:a3:20:0e:38:15:60:
                    fe:4e:aa:cf:c5:2b:fe:08:50:0b:e4:69:5b:fd:1c:
                    03:63:ea:e3:50:97:3b:0a:cd:eb:c6:bc:c8:cb:14:
                    b9:aa:e7:92:7f:e8:df:f2:b0:e3:ea:f5:f2:76:62:
                    42:92:06:11:5f:48:bd:16:c7:3b:2d:11:01:c4:8c:
                    8e:11:42:3a:4f:8f:48:6a:aa:08:7d:09:ad:b1:aa:
                    70:75:98:70:6a:db:42:d6:73:e2:be:31:d3:e9:39:
                    6f:90:25:ca:89:55:1c:07:44:57:7d:10:0b:bf:85:
                    0c:9a:e4:61:72:e0:3b:b9:4b:c3:93:ab:fe:42:ff:
                    d6:37:ba:da:40:d7:ee:10:02:1a:68:8a:00:e5:0d:
                    c2:69:cf:10:f7:70:e4:ba:af:97:3b:50:c4:b9:97:
                    ef:95:32:15:21:30:42:75:2a:e9:90:90:b6:86:c6:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:79:AF:86:FD:87:09:8E:B0:76:31:78:34:69:E5:E0:33:16:31:04
            X509v3 Authority Key Identifier:
                keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:60:85:01:3f:bc:c5:c4:e3:43:4a:02:da:8f:22:33:31:28:
         1d:8a:a7:11:ce:b5:50:09:1c:b6:62:34:f0:ac:01:29:ad:c8:
         36:e9:ce:8f:21:32:2d:35:31:a8:a3:9b:3f:76:cc:c4:17:2d:
         1f:a5:00:5a:79:91:b9:97:d1:f4:04:96:b2:09:11:d0:aa:71:
         93:f8:dc:ff:bb:55:a4:30:72:b1:48:94:23:50:af:20:c1:b7:
         a7:2a:5f:34:22:01:c1:ce:ac:d9:5f:07:12:d8:b0:3f:f9:e8:
         a3:b1:d6:cf:9e:47:fa:11:d8:b5:cf:fc:9f:c2:d0:8c:34:a8:
         75:c8:41:3b:2b:3f:36:5b:f1:6c:a4:ec:45:6f:81:54:0f:ec:
         78:5d:bd:f5:0d:c1:0e:8d:a8:a1:b4:b2:e9:47:d9:c5:28:d1:
         4c:02:42:af:14:cd:6f:30:d2:b6:82:e1:d1:fe:ea:63:84:b2:
         db:9f:d8:bc:65:39:e3:e8:8b:d2:72:8b:eb:9d:92:9e:58:30:
         eb:30:d6:2e:bd:36:af:73:0c:06:a2:a7:a3:6e:95:0b:38:fb:
         c4:65:f6:01:54:fb:38:04:1f:98:8d:55:8e:bd:0e:01:44:42:
         8a:72:ff:9d:a7:85:9d:07:18:91:c8:19:44:12:0a:0e:4b:38:
         34:a8:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:56:10 2024 by rpki-client on console-ams.rpki-client.org