Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File:                     _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier:          lUzl4hSynYrMRgwlGYevNA9VhyjUG1+O2jgc8wDWCCw=
Subject key identifier:   85:6C:CF:88:2F:8F:11:D9:04:D2:94:03:E9:6E:9A:BD:0E:6D:22:8F
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer:       /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial:       01901AEA028AB03BC29F9D3399A280028D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number:          1154
Signing time:             Sat 15 Jun 2024 08:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 08:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 08:01:01 +0000
Files and hashes:         1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: UxwXbVQGa9snSwOj08Bf3nnrX8Ou+vekiwFD8gC3Kwo=)
                          2: waF-Z2tmHU-QUDkDn9iZbxxfb6I.roa (hash: ZXxshP6+dzd/+gUJHJAzlroxH2761ylZK7k4PFEwl24=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:ea:02:8a:b0:3b:c2:9f:9d:33:99:a2:80:02:8d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
        Validity
            Not Before: Jun 15 08:01:01 2024 GMT
            Not After : Jun 16 08:01:01 2024 GMT
        Subject: CN=856ccf882f8f11d904d29403e96e9abd0e6d228f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:3c:4c:d8:95:18:64:8f:ab:22:e2:d2:bc:
                    cc:e1:24:60:4f:2f:07:83:95:38:95:50:a9:d7:aa:
                    6c:4e:24:3f:36:db:29:6c:96:9e:79:ea:31:41:4a:
                    6f:20:00:5f:21:e8:db:5f:80:66:95:44:7d:3d:dc:
                    f0:d6:ae:3f:cf:8e:41:7e:9b:25:23:0a:0b:7e:79:
                    80:78:8d:5f:5a:63:72:c3:c6:97:f2:8a:66:4b:34:
                    8a:c9:a4:6a:b2:a9:e4:b5:75:56:76:0c:d2:b6:ba:
                    79:9e:78:68:f7:53:55:26:3d:d3:0c:1a:16:9d:33:
                    18:d6:72:f8:74:2f:01:ce:33:4f:d7:52:d2:db:47:
                    29:4e:e6:61:b5:2a:d4:7f:ec:ff:9a:97:53:88:27:
                    4f:45:be:ff:b4:0b:b9:1b:59:26:fd:a4:89:0f:83:
                    2a:3e:d3:f2:2a:4a:b5:09:55:6c:e2:0f:5d:aa:49:
                    18:44:3e:d9:45:d0:05:e2:cf:2d:e6:67:7a:d1:78:
                    2d:e9:41:b6:63:5a:a0:c6:5d:2b:89:28:60:f2:a3:
                    aa:0f:1d:a4:86:62:ad:5d:0c:48:2e:08:60:c9:e3:
                    dc:f9:55:58:ba:61:30:49:bc:84:21:1e:c8:51:5a:
                    bc:7d:57:97:e7:e9:a7:b0:38:5d:5c:b1:5d:71:b1:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6C:CF:88:2F:8F:11:D9:04:D2:94:03:E9:6E:9A:BD:0E:6D:22:8F
            X509v3 Authority Key Identifier:
                keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:80:d7:6c:3c:b0:0a:0a:1b:4d:51:37:cf:eb:7a:fd:5f:
         e4:8d:22:b3:30:93:a4:14:e3:23:45:b4:89:a4:fc:21:94:fb:
         65:46:b1:3a:81:1e:c0:1f:60:a0:26:59:df:eb:b4:7e:16:97:
         29:c1:91:71:25:2c:55:c0:1d:44:50:98:10:d5:0d:79:50:d0:
         4d:b1:17:5d:94:c9:84:4b:cb:83:4a:eb:ad:33:94:d7:c1:ea:
         db:6d:58:69:55:a1:d2:c7:6f:89:fc:d5:7b:d1:d4:12:57:04:
         c1:b1:e5:5e:e1:7c:e7:ed:ad:c6:c5:4a:13:f3:3f:b0:75:7f:
         37:09:29:e3:3b:b7:f2:a5:72:54:96:dd:26:69:a1:8e:36:b9:
         d5:af:06:27:36:30:4c:2c:22:bb:c2:a2:76:cb:bb:b6:24:fc:
         18:4e:38:04:54:22:46:bb:d8:4e:a0:2d:00:9c:f6:99:18:ee:
         df:95:a6:f3:ef:a1:70:5a:26:6c:79:ae:47:8c:93:f4:3f:8f:
         3c:ba:51:2d:c2:11:15:23:fd:df:70:ec:e2:a2:e7:ff:c8:ce:
         13:a4:d7:ce:e7:3d:df:a2:6f:24:e4:27:4e:21:a3:bb:4f:1e:
         84:09:41:ce:35:9b:5d:51:c4:5d:bb:d3:2e:46:65:6f:19:0d:
         54:58:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:16:44 2024 by rpki-client on console-ams.rpki-client.org