Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File:                     9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier:          F3qbYL1VemmrZG+i659Ot8rwRLBb8/7RJrOnwUsz+MA=
Subject key identifier:   4A:94:6D:3A:BD:8A:BF:40:CC:A3:61:85:92:0A:AB:16:DE:C3:7E:B4
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer:       /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial:       018F41C36AEBC08215A40E007506C69C0C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number:          1156
Signing time:             Sat 04 May 2024 04:01:16 +0000
Manifest this update:     Sat 04 May 2024 04:01:16 +0000
Manifest next update:     Sun 05 May 2024 04:01:16 +0000
Files and hashes:         1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: 50IiTxl+EmRPTsMTUEy+wCDDxGobCXrDqsN90BKJSxk=)
                          2: OC2ArZeCkW5fCZbVrfhbtoWwUHA.roa (hash: 9or06xxzzKXYd2M5UmA4YrVS1Qdx/q/ATnRIIkT21z8=)
                          3: grW0VjOUxJOsPGC_DkEveZ6FuD8.roa (hash: 4wFAA3Klt2IABPrvkjBj7mOCsKvnEqBCKviA6jwI5I8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:6a:eb:c0:82:15:a4:0e:00:75:06:c6:9c:0c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
        Validity
            Not Before: May  4 04:01:16 2024 GMT
            Not After : May  5 04:01:16 2024 GMT
        Subject: CN=4a946d3abd8abf40cca36185920aab16dec37eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:db:82:eb:8f:75:29:44:aa:2a:ed:49:47:
                    3e:f3:e6:1e:9a:ae:ea:ee:28:06:57:f7:5c:f6:26:
                    23:4d:77:71:59:8f:0b:46:74:1d:0c:42:12:f4:1f:
                    b3:f7:69:74:66:60:ef:ee:01:1c:22:81:f7:96:21:
                    56:b9:95:64:18:5a:46:d2:51:fe:9a:9b:ab:53:42:
                    c6:0f:60:00:4b:4a:1f:54:86:f2:ea:df:dc:4b:1a:
                    fd:78:6f:fd:93:d4:21:33:41:2a:0e:65:4e:50:5e:
                    bf:04:45:ac:49:8f:3a:c0:0e:34:6b:d0:ee:2d:57:
                    0e:83:97:e2:db:51:1f:c9:b3:8e:70:c8:07:fa:67:
                    ce:32:fb:b8:bd:0a:50:f7:e9:23:4d:50:a0:ec:74:
                    6f:7a:1f:f1:09:c2:c0:1e:9e:64:51:68:d5:4f:ed:
                    27:5a:09:51:30:80:95:ee:cd:77:43:7b:37:1c:96:
                    24:95:01:dc:d9:76:34:31:2e:df:71:3c:c1:c1:62:
                    3e:0d:d1:09:a3:f0:93:f9:a0:3e:2b:ce:47:d7:46:
                    aa:aa:a1:ae:5f:72:6c:c1:a2:a7:63:5f:6b:9e:cb:
                    2f:e4:78:bb:1d:2c:d7:88:5f:c1:54:dd:4c:14:eb:
                    72:c3:49:1d:57:b4:cc:08:62:c8:c8:83:8b:fc:f8:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:6D:3A:BD:8A:BF:40:CC:A3:61:85:92:0A:AB:16:DE:C3:7E:B4
            X509v3 Authority Key Identifier:
                keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4d:be:9e:fd:b2:91:13:ec:ee:6c:fc:e5:6c:b7:97:03:55:
         ed:d2:62:00:14:97:7d:b9:7a:47:c0:b8:08:e4:7e:1f:2a:9a:
         b4:91:39:a7:6f:2c:b3:e5:aa:c2:19:9b:4e:63:c6:80:58:20:
         fc:8a:84:47:f1:cf:25:c4:a8:53:9b:98:9f:db:c9:f5:ec:36:
         38:79:8d:41:46:fc:13:10:87:6a:3c:5e:0a:fd:89:23:2e:09:
         9e:1d:b3:1b:24:ce:23:4e:07:3e:f9:6a:af:ad:8a:69:93:42:
         ad:53:c3:07:a3:36:a0:7b:b3:4f:3f:07:65:f1:b9:e7:5c:19:
         24:b0:72:f4:fd:a6:1c:11:60:ce:d0:00:b7:be:23:10:d5:05:
         98:3f:bd:e7:01:f4:8a:c3:3d:51:c3:43:b5:c4:5d:fc:66:bc:
         ed:58:f5:87:89:9a:97:7e:33:0c:0e:07:e6:95:f8:82:ff:93:
         bf:9f:46:d2:7d:89:11:b5:48:af:96:2a:c8:97:34:a6:6e:f0:
         cf:4e:c8:9a:ca:44:f6:db:d9:b4:f7:bf:88:c3:ff:05:21:56:
         f7:c8:94:71:26:23:a6:97:ea:ab:fc:df:c4:7e:93:17:69:78:
         ab:b1:9b:2b:e4:29:f1:2c:aa:91:e2:d1:02:b2:f3:7e:eb:8a:
         9d:17:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:36:36 2024 by rpki-client on console-ams.rpki-client.org