Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/F0aUiFaisK3zBKFtDTrWaFf3_Tk.mft
File:                     F0aUiFaisK3zBKFtDTrWaFf3_Tk.mft (raw, json)
Hash identifier:          3MXnbOoiIFhHUMLywvsU1qGVbmLJtAO0s8LCIrxH2/w=
Subject key identifier:   25:AF:C7:F7:2A:D9:E6:01:55:7C:E7:ED:6E:04:9C:E3:89:6E:2E:31
Authority key identifier: 17:46:94:88:56:A2:B0:AD:F3:04:A1:6D:0D:3A:D6:68:57:F7:FD:39
Certificate issuer:       /CN=1746948856a2b0adf304a16d0d3ad66857f7fd39
Certificate serial:       018F47FC559EF4B6EAE4A54CAAE4A496D66E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0aUiFaisK3zBKFtDTrWaFf3_Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/F0aUiFaisK3zBKFtDTrWaFf3_Tk.mft
Manifest number:          1154
Signing time:             Sun 05 May 2024 09:01:10 +0000
Manifest this update:     Sun 05 May 2024 09:01:10 +0000
Manifest next update:     Mon 06 May 2024 09:01:10 +0000
Files and hashes:         1: F0aUiFaisK3zBKFtDTrWaFf3_Tk.crl (hash: jA0RnV4SypDfkENwGDZ0bhJol/2igVHqSMU6uNTRoBY=)
                          2: wGhlx2kVYMpXPic2WrAahI_dI38.roa (hash: zkgbW+jo9fVGo4ZAyKQaOwBcBu1Oyczx//a3ZkoAw5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/F0aUiFaisK3zBKFtDTrWaFf3_Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/F0aUiFaisK3zBKFtDTrWaFf3_Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0aUiFaisK3zBKFtDTrWaFf3_Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:fc:55:9e:f4:b6:ea:e4:a5:4c:aa:e4:a4:96:d6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1746948856a2b0adf304a16d0d3ad66857f7fd39
        Validity
            Not Before: May  5 09:01:10 2024 GMT
            Not After : May  6 09:01:10 2024 GMT
        Subject: CN=25afc7f72ad9e601557ce7ed6e049ce3896e2e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:a0:7b:96:d3:3d:52:2e:94:c1:1e:8c:4d:
                    8c:68:36:cd:7a:25:05:25:10:15:91:06:32:05:1e:
                    1e:b4:4c:f5:48:99:8e:86:54:84:71:41:9f:b2:60:
                    58:b1:a3:9c:cd:47:1c:80:06:75:89:0a:c6:09:2d:
                    cd:87:95:66:5a:2f:11:98:85:df:55:6e:e9:c1:62:
                    e8:d8:16:cc:94:eb:2e:00:02:91:0e:9a:85:30:93:
                    84:b5:10:40:ae:d2:4a:f0:65:35:25:44:12:c6:64:
                    3c:94:ec:9c:be:06:e1:26:2a:4b:45:3a:0f:05:78:
                    a0:cf:06:e1:c7:43:03:8e:24:18:fe:1f:ed:bc:dc:
                    63:a1:b0:d3:1b:a9:f6:03:9f:6b:80:d9:9a:74:6c:
                    f5:56:af:e8:d6:e6:b2:35:19:dc:ad:d6:7b:9c:b6:
                    8a:97:5a:be:0e:4a:fc:c6:48:ca:79:7a:a5:c3:12:
                    c1:d0:16:c1:7d:9e:6d:94:7a:34:51:3d:31:bf:90:
                    1f:88:a5:f3:13:eb:8c:ff:86:bc:b5:b3:44:d7:c3:
                    62:fd:e9:2c:54:cc:bc:27:39:b7:9d:40:2a:a3:5e:
                    42:f1:17:8c:40:64:33:e2:d1:35:18:1f:1e:4f:14:
                    3b:cb:f3:3d:0c:da:e2:f4:86:ea:f9:13:54:bc:6c:
                    77:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AF:C7:F7:2A:D9:E6:01:55:7C:E7:ED:6E:04:9C:E3:89:6E:2E:31
            X509v3 Authority Key Identifier:
                keyid:17:46:94:88:56:A2:B0:AD:F3:04:A1:6D:0D:3A:D6:68:57:F7:FD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0aUiFaisK3zBKFtDTrWaFf3_Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/F0aUiFaisK3zBKFtDTrWaFf3_Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/F0aUiFaisK3zBKFtDTrWaFf3_Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:f5:96:33:56:43:c1:43:0c:2a:a4:47:43:78:7f:8d:0f:
         4a:bc:df:f4:5d:f0:bb:97:b1:5a:ec:83:f9:18:47:65:23:0d:
         3f:90:7e:42:bb:ce:05:0e:eb:86:29:34:a9:e0:a4:93:6e:9e:
         0b:83:da:37:c2:0c:ab:c8:c5:b8:bf:7a:f4:30:b2:ca:32:87:
         bc:0e:1a:d3:98:11:14:26:54:56:84:29:a7:2a:79:6c:9b:0a:
         37:24:2e:3c:93:e0:2d:5a:b6:4b:eb:03:ee:a3:fc:aa:bf:71:
         a8:e5:7c:09:8a:62:89:e2:7b:e1:54:6e:f7:a3:5b:6d:4d:1c:
         42:af:73:b5:b1:e3:50:45:c4:dc:27:ba:74:47:e2:2e:6a:6b:
         c7:a6:d5:7d:27:49:c3:f7:0d:98:d3:0b:61:7c:8f:52:45:f3:
         00:7d:0f:df:a8:35:bc:16:d9:70:df:6c:49:70:c4:a2:5c:dc:
         8a:17:60:7c:86:9a:ae:16:b5:43:cf:0a:0a:40:64:30:ea:19:
         1e:6e:7d:1f:f4:27:4c:d3:7e:04:43:f7:eb:28:32:eb:8f:bd:
         31:db:84:0d:27:07:84:2c:65:ee:8e:06:d3:ef:05:88:76:4f:
         c7:78:b6:c5:b0:13:28:34:c8:86:d8:2e:99:f1:58:17:d2:6a:
         57:30:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:57:06 2024 by rpki-client on console-fra.rpki-client.org