Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File:                     DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier:          sV5eps5Hlde3O996ghgcCRRJdCHiw2fCgt1fDe/ia/I=
Subject key identifier:   29:EA:CB:C9:07:A6:0B:30:8B:A9:06:B5:BF:93:C7:9F:22:54:6A:45
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer:       /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial:       018F5137209978DB60B72FB6E344B8580F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 04:01:58 +0000
Manifest this update:     Tue 07 May 2024 04:01:58 +0000
Manifest next update:     Wed 08 May 2024 04:01:58 +0000
Files and hashes:         1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: +sdO53ZGbMRRn2NAUld6VehpBnp3K0WAhVEC9ZiA6Gc=)
                          2: aO5WmXefR_sXjpzs5L7bVdpzl4Y.roa (hash: Kqrn7ZNaNLGdzugqqvocCqJPuwSYoCooRws+137qFz0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:20:99:78:db:60:b7:2f:b6:e3:44:b8:58:0f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
        Validity
            Not Before: May  7 04:01:58 2024 GMT
            Not After : May  8 04:01:58 2024 GMT
        Subject: CN=29eacbc907a60b308ba906b5bf93c79f22546a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:f4:76:f8:d3:93:c5:3d:1d:a3:14:5d:70:
                    22:e0:4f:1f:4e:2e:1e:74:62:ea:e3:07:44:d8:79:
                    96:49:62:70:76:53:60:6b:63:48:6d:1d:d5:44:f9:
                    37:fe:82:44:8d:2e:82:f3:45:0d:b3:c1:09:be:a2:
                    5a:7b:e4:25:18:a5:ef:dd:cc:b4:c5:77:00:1f:10:
                    8b:29:b6:9f:90:f0:af:36:aa:7d:e9:45:01:5c:58:
                    fd:67:0e:c2:b7:1e:ed:83:9a:b3:28:0f:ee:f5:6e:
                    e1:f7:c0:1e:28:99:90:af:58:51:ee:07:35:4a:43:
                    ef:37:81:b9:47:a1:81:4c:e8:2f:22:e1:92:0d:74:
                    0f:21:17:1d:75:f6:6f:6f:2c:3d:ca:1c:8a:3d:06:
                    34:98:30:5d:45:34:8d:75:8e:fc:22:4e:c1:4b:db:
                    25:3c:aa:b5:ea:6d:aa:32:35:d2:db:2d:3d:c9:18:
                    f7:c8:7d:12:14:6c:a1:70:86:10:60:f3:90:b3:1c:
                    7d:ea:c0:af:9b:a3:2d:7c:9a:56:e7:f3:58:dc:8c:
                    3d:db:d2:36:fb:e4:3b:1d:d9:9f:d3:df:d5:a3:ec:
                    42:12:7f:5b:98:0c:65:75:59:a1:dd:61:08:32:46:
                    95:ca:ed:28:0d:84:5b:3b:60:a2:9e:95:ab:6b:a0:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EA:CB:C9:07:A6:0B:30:8B:A9:06:B5:BF:93:C7:9F:22:54:6A:45
            X509v3 Authority Key Identifier:
                keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:11:44:35:a2:aa:a0:68:e7:42:bf:76:54:80:13:0b:8b:
         09:41:7b:07:8d:47:a3:5d:3b:a0:aa:22:00:f0:0a:a8:c8:c8:
         dc:e9:56:80:9a:07:a6:3a:39:d8:6f:5a:d6:48:fd:80:39:45:
         a6:ee:ff:dd:85:88:03:65:04:29:79:91:dc:0d:b6:7d:22:37:
         d6:b0:dd:15:9a:97:df:cc:72:d2:7d:aa:b1:93:29:d9:eb:2d:
         ec:74:8a:32:50:36:41:4b:dc:45:78:5b:14:e7:57:b0:f8:14:
         98:95:18:0f:0a:f7:0d:10:ea:c1:77:f4:2f:0d:d1:ac:61:35:
         d6:0d:e8:98:40:f8:1f:21:fa:52:94:f4:da:6e:e4:48:eb:6b:
         a0:0e:06:56:d1:cc:46:e8:03:17:3e:1a:61:9e:0b:cd:d5:1b:
         ca:df:4e:90:ad:ea:f3:c7:f9:dc:96:e2:6a:0d:44:15:75:17:
         ef:98:e1:ff:06:b8:98:30:1e:c8:ee:de:4f:98:fc:4e:d8:93:
         8e:21:9a:4c:c4:86:cd:f4:7a:6e:d5:ea:7e:0a:2e:4e:07:d1:
         e9:8a:83:66:2f:c6:75:1b:08:2b:98:38:5b:4b:3f:5d:cd:46:
         85:28:45:34:61:39:af:b1:a7:02:0b:76:90:96:ea:a9:80:99:
         00:14:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 05:01:11 2024 by rpki-client on console-fra.rpki-client.org