Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          erZ0I1OJUGWKLtAEb0U5q3zbq3JUdbcCqmQV1/L71PA=
Subject key identifier:   60:1E:3F:D3:B1:51:84:55:B9:61:8C:30:C0:B3:73:ED:50:81:59:C7
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       018F98AA3167F114EF4BB2F13998B832E07B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          115F
Signing time:             Tue 21 May 2024 01:00:41 +0000
Manifest this update:     Tue 21 May 2024 01:00:41 +0000
Manifest next update:     Wed 22 May 2024 01:00:41 +0000
Files and hashes:         1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: vUeLWcCA17v4R4VtFH/aJn0VPEyGxoRA4SZnp9/Svx8=)
                          2: vZxgW84d8J78rD3YPkL49VbM1ZM.roa (hash: TERCE/Zq16saZtJJxiL1yuyIOOGu2P5wPS8lfEW+NZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:31:67:f1:14:ef:4b:b2:f1:39:98:b8:32:e0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: May 21 01:00:41 2024 GMT
            Not After : May 22 01:00:41 2024 GMT
        Subject: CN=601e3fd3b1518455b9618c30c0b373ed508159c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:53:6f:9c:2f:9f:ad:9d:c9:85:a2:0c:3e:
                    b8:51:28:88:cb:8f:79:74:c5:d8:c5:84:ed:95:76:
                    22:1b:c1:f1:52:1a:7b:29:a1:68:11:9f:c8:15:d3:
                    2e:e0:65:74:c0:38:bc:bf:7a:3d:96:3b:7d:1e:3c:
                    81:65:e3:62:c3:b5:95:ca:fa:99:2b:eb:c8:cc:3e:
                    eb:d6:2c:8b:66:73:aa:21:09:13:18:83:5e:36:a6:
                    ba:f9:20:20:1e:af:c6:fe:8b:e8:00:b6:b0:cf:aa:
                    ca:1d:57:b1:63:06:1f:8e:85:25:6a:a9:26:bd:59:
                    4a:ef:a2:d0:c6:94:60:52:c4:92:1e:87:7e:e3:f4:
                    ea:89:fc:ce:a1:77:b1:d2:d0:c4:26:36:a2:d0:49:
                    87:a1:24:12:09:9c:90:5c:db:6a:da:46:07:4b:63:
                    fa:4e:8e:02:65:df:51:c6:67:31:16:54:49:17:6c:
                    a0:c8:0e:10:22:40:f5:8b:a8:2f:52:77:ab:f7:48:
                    67:92:e3:55:10:be:b3:07:15:fa:b0:96:dc:9b:05:
                    9c:6d:ea:16:a6:68:a7:c4:66:0b:cb:4b:fb:ac:a2:
                    88:3a:81:0f:7a:94:8b:2f:96:a7:8a:33:35:3d:4e:
                    a8:f6:24:0b:e0:ab:fd:fe:f6:11:ea:93:9c:40:51:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1E:3F:D3:B1:51:84:55:B9:61:8C:30:C0:B3:73:ED:50:81:59:C7
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:1d:cc:b5:57:79:d7:a3:3d:95:b1:c1:21:5a:be:60:f2:
         c6:b6:ab:dc:d0:07:75:62:dc:00:69:43:0f:73:8e:13:c1:a3:
         c4:e9:0e:6c:50:7e:f9:33:ab:7d:bc:4c:bc:35:d6:64:77:9e:
         aa:b1:9b:53:f7:25:a0:04:fc:fb:30:45:8e:7c:61:e3:b3:b6:
         92:8f:79:cc:fd:ab:13:b1:7d:e1:91:c8:a5:cd:a3:83:44:88:
         99:b8:67:3e:6d:7d:71:bb:08:90:2f:11:bf:b5:e5:5a:5d:50:
         05:cf:44:ad:93:bd:08:03:ed:5f:21:64:92:f9:8c:51:fe:4f:
         c5:28:dc:84:dd:ce:20:ca:e5:de:fd:78:0c:db:f7:44:55:30:
         88:cc:91:3a:82:c1:9a:05:a7:3e:ba:8a:40:98:12:25:6c:2e:
         4d:b5:1a:14:b5:cf:0c:87:45:77:81:28:f1:ea:0d:58:14:3a:
         3a:0e:3d:d8:21:a1:a8:7f:6c:49:29:20:c9:c5:c1:1e:c7:0f:
         80:cf:a9:f4:22:da:6e:72:2a:9c:41:1c:d2:d8:5d:1a:03:63:
         cb:00:62:04:9d:78:ab:89:91:5d:ed:54:02:e6:8c:ab:c4:b3:
         cb:b5:ac:05:86:c6:e5:5e:e0:5b:3f:7c:e1:83:03:36:eb:0d:
         56:c3:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:16:12 2024 by rpki-client on console-fra.rpki-client.org