Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          wjWiI58nk1iulWOY0mWHvON3zQlnE1SwE50Af+TGzAs=
Subject key identifier:   2E:83:E5:E1:FE:BC:E8:99:D0:C8:CA:36:A1:B8:17:64:3F:9B:4E:46
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       018F313D0DA65DC6E63271B45E5B12C1E071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1151
Signing time:             Tue 30 Apr 2024 23:00:35 +0000
Manifest this update:     Tue 30 Apr 2024 23:00:35 +0000
Manifest next update:     Wed 01 May 2024 23:00:35 +0000
Files and hashes:         1: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: AMYU26pcoK5MrCc+hWmC0+RIUkB9Vm7/GPd+qnv9uD4=)
                          2: Nu1X3B7Aken878NVsIWYhkrsals.roa (hash: QiPuUtoIFrTjeSHmiqXYTehR/W/G0U6UCpG3n/Lr+LM=)
                          3: awDf4S2orXiUCqTAIcseU7kv-h8.roa (hash: ydzIlEZ1bAg6MnrOxRorNIzQRYWq+DpMhJ9Y5vfD4eo=)
                          4: ntGFXPt57g7F155iNRh-oCXExso.roa (hash: sdgQG+z4eP2bDj2Xs+vVCCiVDzBM1eBpfCnGsFqlYno=)
                          5: qFfxJosJOxIGCYdAY4yVezelrKk.roa (hash: CAZLD+aIpb0IXLS/RQHDQ0d+Djz3PXq8+Ej63AoUJag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 17:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:31:3d:0d:a6:5d:c6:e6:32:71:b4:5e:5b:12:c1:e0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Apr 30 23:00:35 2024 GMT
            Not After : May  1 23:00:35 2024 GMT
        Subject: CN=2e83e5e1febce899d0c8ca36a1b817643f9b4e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:fc:6b:a0:e1:27:de:73:f1:0c:e7:38:5d:
                    5f:93:03:bc:07:70:88:71:17:97:4d:f3:59:61:99:
                    c0:81:5c:c5:c2:b7:24:3a:b5:34:35:03:d8:46:72:
                    79:05:f6:e0:8e:72:d4:2d:c6:75:a0:19:68:c3:07:
                    57:fe:0b:15:eb:02:33:40:59:cb:f4:00:ce:33:6a:
                    05:a7:7c:58:33:21:da:6c:0e:25:9a:e3:71:42:14:
                    ce:eb:4a:03:2f:b5:28:b0:21:a0:e9:e7:ee:b5:91:
                    f2:1d:98:af:0e:dd:4f:7c:74:4a:df:8b:6f:c1:3d:
                    2c:24:bf:18:b2:c2:a4:28:8e:47:a3:9f:97:ca:1b:
                    ac:d3:93:a1:2d:72:a1:73:25:38:4c:37:17:8a:b8:
                    35:a2:b5:a6:81:55:d5:f6:b9:9b:a5:80:d4:5f:3a:
                    e9:5f:d0:0c:9b:a5:52:4b:f1:19:e6:aa:69:91:dc:
                    2d:a1:30:ea:3b:29:e7:ee:36:6e:82:8e:b1:e8:4a:
                    cd:fe:c3:fa:11:0b:56:c0:10:17:fc:2f:d2:ac:92:
                    18:2c:59:b5:96:55:8d:eb:f0:b0:44:6f:b6:4f:7a:
                    af:6c:ca:ea:16:6f:85:6d:72:5e:d5:ab:67:c7:2c:
                    84:53:58:0b:14:f3:d8:fb:1a:c0:15:15:39:24:2f:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:83:E5:E1:FE:BC:E8:99:D0:C8:CA:36:A1:B8:17:64:3F:9B:4E:46
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:19:22:12:dc:ff:66:4f:08:40:fa:0a:41:6c:c3:07:bb:
         67:ee:ca:7c:8c:da:83:d7:02:17:a2:8f:89:1b:d8:ba:6d:24:
         35:49:62:0b:70:e9:67:b7:f7:c3:c1:5d:28:25:7a:e3:6b:f7:
         17:b5:1c:b9:47:77:6a:e3:63:94:06:c6:b4:b5:55:b8:d3:9a:
         83:bb:f0:1b:9b:dd:d7:f2:59:0f:cc:76:a0:b4:65:1b:9d:6b:
         20:af:48:06:40:d6:c4:70:e1:b2:24:fe:31:d1:ed:70:d1:a0:
         2e:9c:70:8c:92:fd:3c:11:c4:67:a9:cb:eb:f5:d4:94:aa:e4:
         31:ab:10:c0:1d:4f:58:4f:87:64:91:d4:21:4a:61:81:35:49:
         b5:fa:f5:43:00:05:d9:d8:0d:af:bb:bf:4a:63:a1:0f:8a:43:
         b9:84:4d:6b:28:d6:1b:a7:69:88:0a:3e:a0:ce:ac:7e:67:8e:
         74:08:a8:03:8a:b0:12:16:f4:99:04:a7:16:76:22:2e:0b:e7:
         d0:d6:f5:4a:b0:cb:6c:13:2f:33:90:2a:bf:87:ce:af:3c:35:
         93:8a:63:58:6d:0c:a7:c3:5c:49:20:7e:33:89:7a:e8:46:a4:
         bd:82:3f:cd:36:e7:fa:fd:1a:90:7d:be:e1:42:5f:cb:5f:ad:
         5d:bd:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:42:37 2024 by rpki-client on console-fra.rpki-client.org