Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft
File:                     0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft (raw, json)
Hash identifier:          8ceehap9P4+5XIvH3IMiw1irWHph2JZ2U7oTxJz7fIs=
Subject key identifier:   D9:8D:C8:72:EE:35:B6:BE:3A:55:F5:79:08:89:96:20:70:8D:7B:16
Authority key identifier: D2:67:41:D3:1D:28:D3:86:5D:D5:38:1D:FB:D0:BE:A2:F6:6F:F3:23
Certificate issuer:       /CN=d26741d31d28d3865dd5381dfbd0bea2f66ff323
Certificate serial:       018F3964F57B96D6D71C07E9E60F01CF86F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft
Manifest number:          1153
Signing time:             Thu 02 May 2024 13:01:08 +0000
Manifest this update:     Thu 02 May 2024 13:01:08 +0000
Manifest next update:     Fri 03 May 2024 13:01:08 +0000
Files and hashes:         1: 0mdB0x0o04Zd1Tgd-9C-ovZv8yM.crl (hash: L5ppDoQ7+m5BovKVG9Qq9ARe27nnAdbu/zjZpbrZ/iI=)
                          2: Tz3g_aMxCeLFhKoBdrf9NIMK-jE.roa (hash: kdawtKqIQJrbA8ctck4YmwB9z0kd9ZXSurUrUrkdWPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:64:f5:7b:96:d6:d7:1c:07:e9:e6:0f:01:cf:86:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26741d31d28d3865dd5381dfbd0bea2f66ff323
        Validity
            Not Before: May  2 13:01:08 2024 GMT
            Not After : May  3 13:01:08 2024 GMT
        Subject: CN=d98dc872ee35b6be3a55f57908899620708d7b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a6:d9:51:15:1c:aa:a1:95:6b:ae:6e:b3:28:
                    c5:b1:9d:3f:9d:b1:cc:75:7f:e2:b3:ad:bc:76:af:
                    f0:12:9f:fc:b0:34:9c:3b:23:d8:0e:f7:64:a5:9a:
                    3a:d1:e0:7a:20:10:6a:b8:ff:7a:14:73:63:5d:d1:
                    21:a0:98:11:3a:f2:1e:00:ea:73:a0:42:43:49:c2:
                    1a:2c:3c:f6:a5:ce:b3:67:14:85:33:74:e8:ac:9c:
                    f9:74:b7:b4:5b:37:57:75:1e:36:1c:0c:73:6c:f8:
                    7f:ed:84:7e:ae:7d:19:df:61:06:1f:41:52:23:d2:
                    ff:92:bc:49:44:fe:b3:fa:d2:b1:4c:e0:bd:42:59:
                    f5:c1:b0:81:f2:12:2a:db:ec:3e:f8:90:01:67:3f:
                    79:b0:ec:00:f5:75:e1:da:2a:70:fa:e0:f3:52:c3:
                    88:8f:4d:1a:ca:37:e2:c1:f0:79:a0:41:ef:5b:a9:
                    1c:47:ac:74:b5:d9:37:b8:0b:81:1c:2f:df:4a:bc:
                    6c:78:f5:8e:5d:1d:b8:5e:6b:8c:80:81:96:ec:eb:
                    12:92:e4:f2:3d:3e:c3:7a:1c:35:5f:57:73:1e:29:
                    42:d1:da:c8:c9:f3:6a:27:50:ab:fe:b3:85:4f:d9:
                    c7:58:ce:55:ec:53:06:0a:7d:7d:4c:6f:b1:05:73:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8D:C8:72:EE:35:B6:BE:3A:55:F5:79:08:89:96:20:70:8D:7B:16
            X509v3 Authority Key Identifier:
                keyid:D2:67:41:D3:1D:28:D3:86:5D:D5:38:1D:FB:D0:BE:A2:F6:6F:F3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:a2:2f:94:f6:45:25:2d:c5:40:24:42:28:7c:13:b7:6a:
         07:d8:73:e4:40:f3:1e:e7:b3:f9:64:f4:7e:df:8c:df:60:e4:
         d7:83:8a:1b:7f:e0:b5:f7:18:cd:63:6e:e8:e7:f0:75:e8:51:
         1c:4b:41:7e:17:f1:92:3f:9a:b9:76:68:27:08:11:31:f2:06:
         9d:5f:3f:b9:39:e1:f9:31:77:8f:7f:b2:7f:ff:ab:0a:20:bc:
         fe:56:2a:47:4b:cb:7a:4a:91:13:27:f6:a5:5d:39:10:07:90:
         d4:21:1e:dd:2a:bb:f2:1c:11:df:f2:95:74:c0:b5:91:bb:0e:
         84:92:a8:c9:73:24:59:70:5b:54:fb:62:58:a4:6c:93:07:10:
         39:f6:e8:52:1a:63:db:7e:91:67:78:c0:37:e7:ab:ea:78:5e:
         94:51:16:61:18:97:a3:c8:f1:5e:7e:c6:c2:91:9a:ff:a4:f9:
         fc:e2:4d:e0:06:e3:cd:c5:e8:26:46:48:de:65:d0:46:33:6d:
         29:cd:18:be:14:ec:e6:89:ca:ed:6d:0e:52:ed:b7:f6:ac:07:
         3d:9a:5e:8c:49:72:5b:ec:e7:ee:3d:93:f7:1a:ee:5e:38:4f:
         60:a8:81:7e:d9:8e:e2:85:6a:b5:07:a8:47:96:7b:89:98:5e:
         aa:d7:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:13:10 2024 by rpki-client on console-ams.rpki-client.org