Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File:                     FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier:          5UTYe1WKjIy1/e5fkUESmSZjuygWwHk6qlK7Qb1xpbE=
Subject key identifier:   4F:86:44:20:2E:9E:C7:20:72:3E:1F:17:54:63:6F:02:50:9F:06:F2
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer:       /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial:       018F3A77FFBAF31EC100C7D8567DBD32595C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number:          1156
Signing time:             Thu 02 May 2024 18:01:33 +0000
Manifest this update:     Thu 02 May 2024 18:01:33 +0000
Manifest next update:     Fri 03 May 2024 18:01:33 +0000
Files and hashes:         1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: ow+rmH6ohIqK8tNPFRKksukzMV89CSse+fKY7sDTm1A=)
                          2: ZFOkOwryANr48fciRppCbKPT_9I.roa (hash: M+RqgF/IUqRNDOtOQ3wJdUgWeyPJFE39NqXHf2onjPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:77:ff:ba:f3:1e:c1:00:c7:d8:56:7d:bd:32:59:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
        Validity
            Not Before: May  2 18:01:33 2024 GMT
            Not After : May  3 18:01:33 2024 GMT
        Subject: CN=4f8644202e9ec720723e1f1754636f02509f06f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:43:ab:33:3d:df:db:9f:95:d7:67:73:ce:
                    27:81:74:44:59:b9:d1:b2:0e:0a:cb:9b:5e:ae:53:
                    c5:ab:bd:da:63:96:ed:8d:29:04:e0:26:02:fa:8f:
                    2a:76:ab:de:8a:a1:4c:f0:2a:a0:59:ec:b4:14:43:
                    2a:0a:2a:b4:7e:3a:be:4c:d6:86:03:5a:be:d5:b5:
                    f6:bc:c3:ba:f7:e4:b5:e2:77:9e:77:52:88:aa:5f:
                    b8:7f:01:76:86:2c:57:0a:7b:50:0b:28:5d:6d:e5:
                    3e:0e:2d:9d:4a:35:e9:1a:f8:fb:7a:5b:b5:20:eb:
                    8e:7b:7b:dc:0a:aa:ad:f2:04:5a:0b:47:43:61:e3:
                    cc:04:5c:15:8c:48:df:f5:c6:28:a3:4e:63:6a:bf:
                    e0:9a:58:ea:b0:86:e5:09:31:8f:5a:be:63:27:ae:
                    7d:ec:e8:f5:0f:c7:27:7a:55:6f:ce:11:4a:1b:6c:
                    fc:89:c6:3a:8e:f1:ce:9e:86:87:5d:06:d6:9c:01:
                    a3:80:8c:d7:15:84:3b:fc:1d:1e:01:5a:74:63:9f:
                    48:5c:06:0c:36:2f:8f:a3:01:1f:46:d9:6c:45:21:
                    ec:f6:7a:48:9a:d0:f1:7a:2d:d0:12:58:e5:00:2d:
                    5b:6d:5e:07:f3:fe:33:ff:cf:cd:25:dc:88:da:e0:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:44:20:2E:9E:C7:20:72:3E:1F:17:54:63:6F:02:50:9F:06:F2
            X509v3 Authority Key Identifier:
                keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:3d:e3:0d:96:7d:78:27:0a:8c:16:83:33:54:88:dd:8f:
         5a:f0:e5:59:d2:d6:24:86:af:23:d4:85:05:5d:e3:f7:c4:59:
         87:54:5d:c1:bc:b4:22:a2:43:f0:99:7a:79:ee:a8:d1:a9:d5:
         14:4f:46:f9:e9:f8:79:50:61:4b:17:c5:d7:68:87:9b:f8:dd:
         75:cc:f4:95:80:db:73:ef:b3:8e:8b:9c:b5:e2:98:bb:27:94:
         9e:75:08:dc:00:dd:20:a5:17:68:fb:fb:e3:7c:a8:8f:e3:bf:
         3c:21:d7:7c:9f:75:85:2f:a0:57:c8:c4:fe:7f:5e:64:87:48:
         31:2b:4d:8d:fa:cc:d4:36:04:f8:73:56:a0:5d:2b:61:06:e0:
         8e:c4:78:a0:55:25:ba:1e:99:9f:4f:41:d8:68:ba:a0:8f:0c:
         8a:94:f0:4f:8b:f9:e6:a6:33:c4:a9:a8:f8:9b:35:df:ff:97:
         e6:1b:2e:98:a6:a6:dc:6f:47:9b:d0:20:0a:d0:df:42:6a:a0:
         01:e5:5c:ab:01:dc:44:9e:e3:68:52:8f:34:ae:49:ae:1d:0e:
         a1:cc:ad:b9:e1:da:2b:68:f6:bf:43:0d:6b:1e:50:69:ed:3f:
         50:3a:de:99:18:97:df:c7:5d:bc:83:be:f6:e7:de:65:7c:2e:
         6f:a7:c3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:34:28 2024 by rpki-client on console-ams.rpki-client.org