Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
File:                     0d2oMnacMWgfglaFFHNorzoR9vg.mft (raw, json)
Hash identifier:          ylT5mvQIkkXL5L7J54ejDT9+zypyZREb9ETAhIgbHKs=
Subject key identifier:   1C:1D:E5:EA:D2:A5:1B:CF:DE:AD:13:1F:E3:A7:D9:C4:97:49:A6:08
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Certificate issuer:       /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial:       018F46E9F232E3AD497D0EEA438DC88000A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
Manifest number:          1157
Signing time:             Sun 05 May 2024 04:01:28 +0000
Manifest this update:     Sun 05 May 2024 04:01:28 +0000
Manifest next update:     Mon 06 May 2024 04:01:28 +0000
Files and hashes:         1: 0d2oMnacMWgfglaFFHNorzoR9vg.crl (hash: u9KIM3HmXmHeMBaoDr+a1GGipJbIT7KnJ+5ZEBtK3MQ=)
                          2: E25C0n5JGINXhbybGvJ978azomI.roa (hash: Rjrv7enDEiPOlYADuB2KS28ah9u5Aax/bw/GNO0Sf7o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:e9:f2:32:e3:ad:49:7d:0e:ea:43:8d:c8:80:00:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
        Validity
            Not Before: May  5 04:01:28 2024 GMT
            Not After : May  6 04:01:28 2024 GMT
        Subject: CN=1c1de5ead2a51bcfdead131fe3a7d9c49749a608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:e6:10:f9:83:8d:dd:ad:41:29:f6:ef:15:
                    54:8e:a1:a4:24:9e:a7:c9:3a:8c:de:b8:d5:0f:68:
                    ff:4b:ab:fe:6d:5e:9b:ca:46:52:17:d1:6a:54:d6:
                    86:f8:d9:f9:06:99:2f:f2:1e:0e:25:f0:63:86:27:
                    a2:68:39:54:1e:bb:88:89:2e:0e:ff:b6:b3:33:63:
                    07:35:a2:1f:ad:0a:72:71:50:b6:6f:8b:ba:a1:77:
                    22:40:0c:32:c1:8d:d0:5c:b5:82:99:f0:12:42:c2:
                    68:c9:96:80:70:7f:ef:87:03:3f:20:cf:0d:0b:6d:
                    35:1f:2a:87:34:39:07:2c:c0:7a:a0:c9:35:dd:49:
                    92:67:60:48:f6:18:25:c3:3d:7e:91:7e:a5:08:7b:
                    19:be:fc:f7:9c:e5:e3:fd:7d:93:e5:77:b1:da:4c:
                    61:e4:33:6b:b7:20:0f:61:34:42:c2:44:8a:90:5a:
                    0c:65:16:c6:0e:86:6a:9e:9c:32:17:fc:3a:49:20:
                    c3:97:18:c1:0e:74:48:6d:e7:d1:0e:bb:36:6b:44:
                    0c:6f:52:4e:09:50:05:90:fb:87:5a:ae:a0:98:af:
                    92:2f:9f:73:64:b6:cf:cb:22:4f:fe:f0:02:2d:02:
                    b9:b5:e2:e0:df:00:7c:f0:c4:27:9d:80:c5:c8:d7:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1D:E5:EA:D2:A5:1B:CF:DE:AD:13:1F:E3:A7:D9:C4:97:49:A6:08
            X509v3 Authority Key Identifier:
                keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:c9:c0:3a:d3:ff:ca:d6:d4:1c:9b:2b:1c:7b:5a:e7:90:
         c8:62:29:0d:e6:fa:c0:97:2a:75:80:6e:6b:c7:4e:5f:4c:ba:
         f0:e9:3c:46:05:94:02:7f:eb:38:b4:7e:35:93:1f:a9:34:14:
         ef:1d:8d:45:a0:59:6c:a3:88:70:9b:25:70:e6:b2:02:17:f0:
         8d:89:e4:73:fe:73:ea:d0:60:2c:5f:e8:e5:c8:41:6a:4f:cf:
         4e:58:35:63:15:3c:71:26:e4:55:2e:8b:62:5b:f8:27:bd:99:
         16:e0:9d:05:9f:aa:02:59:96:2e:92:a1:e6:89:ca:b7:a2:c4:
         19:b1:78:ef:ac:26:eb:6c:26:a5:42:dc:d1:f8:b1:2c:ae:40:
         b2:d1:1a:c2:5c:de:38:ea:8f:e0:1c:f8:56:76:5f:4f:49:e5:
         5f:99:d6:bd:f1:e7:59:d1:12:5b:8c:21:dc:c5:da:e0:81:57:
         88:aa:05:0c:62:87:4a:a3:31:88:9e:2f:13:19:75:1e:b1:9d:
         57:97:09:bb:14:65:33:63:e4:68:06:6b:ec:d4:ed:92:b4:c9:
         6e:1c:a5:14:48:24:8d:30:a8:04:54:92:82:b3:63:67:36:50:
         d2:e4:c2:b0:0a:a6:56:61:42:4e:a7:3b:77:31:a5:2b:76:01:
         92:79:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:03:40 2024 by rpki-client on console-ams.rpki-client.org