Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File:                     1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier:          yOdRC9V0V2RMtUw1b9POPS4xfku8x9+4TYplYU04Nvs=
Subject key identifier:   FB:27:EE:52:9B:EA:88:85:BA:DF:CB:A5:A7:54:BC:8B:2B:CB:C8:35
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer:       /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial:       018F4231B2604ABA9429B4114F5690C5E990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 06:01:44 +0000
Manifest this update:     Sat 04 May 2024 06:01:44 +0000
Manifest next update:     Sun 05 May 2024 06:01:44 +0000
Files and hashes:         1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: j+kXHBLJEeTQsmC3nBNzmNzcTO2pDoMFfoWEkFWPrn8=)
                          2: 9BqSIquEwoNaumgwEvYlm3iw-vc.roa (hash: Y894CGrwZc1CTviUNFmlIjdLgiGIS3soYbHkj2rVJNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:31:b2:60:4a:ba:94:29:b4:11:4f:56:90:c5:e9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
        Validity
            Not Before: May  4 06:01:44 2024 GMT
            Not After : May  5 06:01:44 2024 GMT
        Subject: CN=fb27ee529bea8885badfcba5a754bc8b2bcbc835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:32:33:c2:61:6d:24:6d:8f:88:3f:1d:1e:
                    d2:37:7f:26:c3:56:a3:9f:58:f2:0c:43:11:67:75:
                    56:c0:fa:44:96:05:83:b6:d1:1a:a0:f3:a5:ea:88:
                    0e:01:7f:9f:51:0e:2a:bd:f0:e4:49:ba:a2:95:12:
                    cd:9a:ff:f6:8e:9b:68:6b:19:a2:58:00:7d:24:08:
                    89:34:e7:07:b8:74:d8:60:ca:a7:03:47:6c:8d:a7:
                    a9:2b:8f:30:1e:c9:7d:a6:53:67:53:99:84:25:ee:
                    8c:30:98:d6:8d:52:86:f7:db:c4:9c:a1:9c:6d:55:
                    e8:79:5b:98:86:c6:a9:4b:22:d2:5b:18:0b:4e:0d:
                    c4:ed:08:84:48:75:09:27:22:02:0d:b9:f9:42:d7:
                    4f:a6:0c:20:41:9a:a3:9a:68:b5:65:d1:6a:fa:f7:
                    3e:cf:9e:8c:2a:a0:2c:fc:9b:28:74:f3:9d:ab:15:
                    78:93:f5:dd:4f:ec:64:de:1b:1a:1c:2c:36:e9:0f:
                    8c:7a:a4:19:7a:22:d9:1d:3d:06:9a:f4:69:16:24:
                    04:f0:98:e8:a0:26:82:60:24:3f:3f:83:b7:6a:d2:
                    5d:34:9e:45:d7:cb:b9:2b:e3:87:c5:76:ea:8b:66:
                    b5:2b:28:60:7b:5a:54:c2:07:ea:4a:62:a8:17:a0:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:27:EE:52:9B:EA:88:85:BA:DF:CB:A5:A7:54:BC:8B:2B:CB:C8:35
            X509v3 Authority Key Identifier:
                keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:69:ed:9b:cc:f0:ff:f0:23:c2:a6:ce:bf:4d:3f:87:64:a6:
         4c:c6:13:7f:2d:e4:36:78:f1:45:62:d8:6e:0c:e7:b5:44:f2:
         c6:ae:23:c4:5a:0e:af:25:22:b1:5b:cd:b9:4c:6a:3e:c1:c5:
         cb:db:2d:bd:cf:bb:c6:32:e1:a1:08:57:68:c3:dd:a6:78:6b:
         b8:6c:60:97:1c:2a:75:80:69:d5:cc:c2:f6:7f:ed:79:7e:b4:
         d6:11:57:8c:bc:5d:74:79:12:77:76:0b:f5:78:1b:a9:b3:4d:
         70:27:e7:6b:84:c8:96:da:6b:99:39:54:2c:4e:31:53:98:65:
         15:ce:a1:5b:a2:0c:26:b9:16:32:77:6e:5d:9f:d4:47:a0:47:
         ad:19:f8:91:26:8b:61:05:ee:8d:33:8a:50:b7:5b:04:a8:17:
         6e:c3:fa:3f:48:8f:e4:82:60:ec:2a:f1:a2:09:7b:ba:a1:03:
         38:0c:04:df:80:66:8a:80:27:1f:d1:9b:fc:6d:c1:c3:16:e4:
         c3:3e:64:e5:92:b6:bb:ec:77:f8:84:44:63:94:a3:df:cf:91:
         21:17:7e:77:05:0e:a8:72:84:29:b8:d9:b2:b8:c4:7d:07:0a:
         4e:f7:44:92:19:6d:ec:1a:a7:fc:0c:20:e1:78:1f:52:8f:14:
         5b:83:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:07:00 2024 by rpki-client on console-ams.rpki-client.org