Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          ioHySAhu+kzptqeG0CBMJQXLTqQDiTVlqamImTdfdBI=
Subject key identifier:   E3:DD:23:EF:88:45:20:47:2B:A4:6B:3D:A7:3A:5B:AE:75:A3:B8:B7
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       018F4EA31888F8529AAAC7DD7B0A2D458DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 16:01:02 +0000
Manifest this update:     Mon 06 May 2024 16:01:02 +0000
Manifest next update:     Tue 07 May 2024 16:01:02 +0000
Files and hashes:         1: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: 7kfkc9ZHiOW9ZKBdOj2faebm8xExMw2nUcCgxK2bRU0=)
                          2: i5gxgXiZ8Zjrg3KOfokeB0RwPpU.roa (hash: ApFTMo6snQDax3dcI4Gma5H/8WtTNKz+KdtKfkqSQZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:a3:18:88:f8:52:9a:aa:c7:dd:7b:0a:2d:45:8d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: May  6 16:01:02 2024 GMT
            Not After : May  7 16:01:02 2024 GMT
        Subject: CN=e3dd23ef884520472ba46b3da73a5bae75a3b8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:5d:e0:ae:22:32:2b:64:8e:6d:f9:8c:36:
                    47:52:ea:2f:b1:98:a2:e0:e8:89:26:19:86:9b:6c:
                    0e:19:b3:eb:bf:81:19:91:4f:88:e7:f8:4a:8b:8c:
                    01:65:c7:48:06:d5:b0:5b:0d:59:2e:d1:cd:39:9d:
                    a4:96:f8:0b:df:b9:49:18:53:6e:44:48:a8:da:65:
                    c1:2f:b8:ce:c1:07:ba:f6:93:3a:4a:fb:ac:dc:6d:
                    48:d4:ff:64:06:c1:c1:a0:77:1a:52:68:09:81:88:
                    ba:28:f1:41:16:2a:50:0f:b2:5f:21:6a:b2:f3:ea:
                    18:bf:67:b7:78:23:53:27:88:74:0f:63:c1:ce:8f:
                    05:78:ef:bd:8e:06:db:a4:f4:04:8f:01:fd:02:65:
                    2d:d9:e9:0a:86:31:d1:1c:a8:07:3a:6b:c0:f8:b0:
                    a2:81:ce:fb:1c:65:b1:b1:5e:14:c2:1b:00:04:d1:
                    37:d7:6c:8e:6f:81:4f:dc:19:d8:68:87:2a:0c:e3:
                    c2:f8:21:73:1e:d6:29:33:ef:a3:d9:08:2a:50:8d:
                    25:69:58:e5:f1:30:e4:72:17:c1:2d:e8:f1:8f:11:
                    b9:c5:59:99:64:a9:65:ad:b0:10:a5:b2:37:34:44:
                    81:6c:ed:fd:d9:df:d2:09:ee:75:bf:0e:7c:b6:fa:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:23:EF:88:45:20:47:2B:A4:6B:3D:A7:3A:5B:AE:75:A3:B8:B7
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b6:d1:39:a8:c0:45:64:46:5d:70:c3:33:7f:a0:e7:07:5a:
         0e:97:e9:f3:05:45:25:87:f6:a6:69:cd:49:a5:f6:fc:6f:b1:
         45:7e:59:74:0a:0a:f1:24:1c:8a:66:56:ac:34:a6:70:b9:15:
         82:93:4f:fa:f6:c5:ee:e0:dc:a7:17:ad:aa:82:d5:08:71:9f:
         d0:04:f3:c0:42:d3:ed:88:37:01:f4:be:1e:19:9f:fc:b7:3a:
         dc:ae:53:1d:60:70:6f:25:ab:f7:e7:1a:71:5b:e3:83:a0:f5:
         41:ca:e7:5e:a6:57:9b:ec:4f:78:04:77:9f:2e:fb:d7:08:f3:
         66:59:c2:fe:cd:b5:e8:2c:4a:64:ce:84:27:69:0e:19:d5:e4:
         c2:db:a5:15:20:3b:da:9b:35:22:70:d1:22:96:96:38:39:1b:
         40:62:5d:16:e8:7f:52:0b:8a:fb:73:a4:7b:df:23:ec:18:94:
         79:fc:91:0c:e0:45:f4:d8:00:cb:b5:58:fa:fd:07:4f:26:1b:
         ae:1a:c5:7a:97:78:13:ec:32:7b:fd:c8:c4:91:4d:64:93:30:
         5f:7c:73:12:7f:49:b6:de:c5:8f:4c:f8:d6:b6:da:1c:cd:a1:
         d6:6e:6e:90:cb:1c:e9:ed:ac:b2:6a:28:b7:38:11:9c:9c:f9:
         17:95:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:01:58 2024 by rpki-client on console-ams.rpki-client.org