Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File:                     43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier:          +OHos+QuNmQT/Uneyx9MGtAjBHVS0+6/Mt4+rXjj27Q=
Subject key identifier:   8A:CE:26:4A:71:1F:CB:2D:65:B2:A3:50:59:52:88:8C:12:47:02:9A
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer:       /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial:       01901EC6C8E1B1BF35B3142628BB2AA2A3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number:          1155
Signing time:             Sun 16 Jun 2024 02:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:02 +0000
Files and hashes:         1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: bvKx15ECHuUKNpqnZJOi4r/Q/BO5LIi/gJZC0Liqc4o=)
                          2: bcnXeI3HPbT9tqeLu2MyQifRtNA.roa (hash: xyLl5upVi7OYqR9KMSg2D+sX2GokIKwYHuQj3xDQIEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c8:e1:b1:bf:35:b3:14:26:28:bb:2a:a2:a3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
        Validity
            Not Before: Jun 16 02:01:02 2024 GMT
            Not After : Jun 17 02:01:02 2024 GMT
        Subject: CN=8ace264a711fcb2d65b2a3505952888c1247029a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:ba:09:e2:7a:c2:65:91:18:7a:7d:23:54:
                    a6:21:3f:05:0b:4b:e1:a1:35:bc:b1:1f:91:42:34:
                    c6:93:91:e6:67:11:4e:07:a9:aa:69:54:49:67:79:
                    90:70:56:c6:f4:86:e2:b4:bd:eb:a3:6c:89:d6:6f:
                    00:cb:8e:b3:e8:43:78:cb:59:d9:1e:2a:a5:4f:a9:
                    a3:bd:89:12:bb:6d:08:4b:fb:56:42:61:b8:92:06:
                    63:77:cc:2c:25:39:49:91:c4:08:f8:df:4d:52:1a:
                    fa:1e:aa:c5:6b:73:f9:12:68:58:f8:9d:a7:71:d2:
                    0a:14:0e:d8:5c:4e:99:df:4b:b2:0d:6b:5c:37:de:
                    0b:39:43:8a:fe:cd:47:f0:d0:91:96:d4:16:f9:4f:
                    eb:c9:88:b9:be:22:12:f7:bb:2b:1a:3d:cb:07:e2:
                    05:dc:ce:3e:b0:9e:22:8d:2d:bc:a7:e7:08:01:75:
                    37:76:5d:70:12:54:74:58:75:46:06:40:71:23:e9:
                    9e:d0:1c:70:ed:ec:93:4b:67:cd:79:10:d6:d8:63:
                    b3:d3:f5:ae:98:84:60:9b:2a:75:49:a8:05:d7:35:
                    e4:17:6f:68:39:23:0e:d3:83:db:2e:66:d4:0f:63:
                    06:51:c6:c9:49:bd:b7:30:fd:24:de:f1:13:30:54:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CE:26:4A:71:1F:CB:2D:65:B2:A3:50:59:52:88:8C:12:47:02:9A
            X509v3 Authority Key Identifier:
                keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:79:89:7f:f0:2f:39:7c:30:35:0c:6f:f2:b1:70:8a:b5:e1:
         d2:57:57:0e:79:2d:d6:6a:28:ac:73:c8:d8:a2:cf:92:fb:9a:
         1d:34:ae:71:5c:1c:da:69:99:f8:cb:16:21:d8:e2:0e:6c:6b:
         fc:e8:94:8d:76:9f:0c:a4:fa:4f:63:5c:c5:0d:e9:52:10:c7:
         5a:b3:90:4f:5f:5c:f3:80:d5:68:f4:35:ea:41:86:63:88:41:
         2f:ed:60:00:dd:a1:3f:fa:c5:12:ce:01:cc:4a:3e:df:82:37:
         f9:9c:ad:07:d6:3f:7d:30:3a:d4:b2:a5:dd:84:d4:8c:9c:d4:
         a8:b6:db:7b:8e:1c:1e:76:ec:98:71:85:0a:21:91:f7:81:8f:
         b5:55:98:89:57:ee:3a:f9:94:35:3d:78:91:34:69:a1:f2:f8:
         58:de:0c:a9:ec:a5:ef:79:27:6c:63:f3:cf:e2:85:7a:88:16:
         67:aa:39:71:c0:01:2e:e2:05:6a:22:f2:2a:ae:f5:71:97:1a:
         06:ee:5d:fc:fb:ae:c6:12:fa:4a:68:93:aa:d0:15:eb:75:d0:
         43:5e:1f:7b:ae:a3:52:27:66:1b:db:81:eb:d5:4a:d7:f8:aa:
         cc:49:fd:f9:61:2a:07:40:38:e2:3c:75:99:88:2c:bf:00:bd:
         8f:69:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:59 2024 by rpki-client on console-ams.rpki-client.org