Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File:                     1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier:          q1k9Ihk88AtmzxGQjsE+B0SGx9IL8lBV9K0ZLiz1ZnQ=
Subject key identifier:   B2:EA:1E:45:50:98:03:2F:32:D1:0C:8B:03:CA:7D:CE:CA:80:8A:FA
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer:       /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial:       018F3CD3FCFB6D71D8544FC8CFAF0476FF04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number:          0778
Signing time:             Fri 03 May 2024 05:01:16 +0000
Manifest this update:     Fri 03 May 2024 05:01:16 +0000
Manifest next update:     Sat 04 May 2024 05:01:16 +0000
Files and hashes:         1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: wtU/rzIwsg5Bd19BM5y4KgGSSqKwQ6eo7yk5YfjSGxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d3:fc:fb:6d:71:d8:54:4f:c8:cf:af:04:76:ff:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
        Validity
            Not Before: May  3 05:01:16 2024 GMT
            Not After : May  4 05:01:16 2024 GMT
        Subject: CN=b2ea1e455098032f32d10c8b03ca7dceca808afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:71:95:0c:34:70:b8:f5:f6:bb:46:5e:e0:
                    33:2b:76:60:31:08:ea:b0:c8:9d:a9:c9:3d:d9:89:
                    0f:d9:70:e9:0f:c4:fd:24:2b:18:f2:94:f2:9e:22:
                    38:f6:3d:e0:af:de:02:65:b0:54:cc:f6:c4:42:c6:
                    d4:4f:d0:a2:d1:f3:c8:85:b6:6c:61:ae:35:b1:86:
                    ca:25:b1:38:56:45:2f:8c:65:c7:64:be:a6:95:8b:
                    e8:2f:eb:05:14:ac:45:ad:f2:a9:63:ab:2f:b4:da:
                    fb:de:73:6b:62:09:57:60:9a:49:54:f0:40:5c:9f:
                    32:38:83:67:d1:4c:11:d7:3e:51:3d:8a:7b:4e:89:
                    7a:c4:19:c0:53:b8:52:96:68:15:c7:43:de:46:f0:
                    ca:a3:39:44:fc:e4:09:60:ce:a3:2b:28:48:06:22:
                    81:71:df:79:2d:a3:85:c1:78:98:a1:b8:40:36:9c:
                    f6:88:da:1e:78:e0:fd:eb:7d:55:7d:ca:35:0a:32:
                    a3:ac:c2:13:c3:5f:26:d1:1c:04:ff:cf:c0:49:e2:
                    6b:91:e1:42:93:79:8f:2e:39:05:ab:0c:86:7e:34:
                    25:dc:5a:2a:a4:e7:26:f4:1e:03:ea:db:f3:87:1e:
                    ca:fa:98:0f:80:77:f7:9b:e1:22:e6:aa:8e:35:6f:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EA:1E:45:50:98:03:2F:32:D1:0C:8B:03:CA:7D:CE:CA:80:8A:FA
            X509v3 Authority Key Identifier:
                keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:aa:c9:28:e1:99:10:af:a9:85:f1:a7:8a:10:e1:8f:ba:eb:
         79:e0:e7:63:3b:d4:8c:9f:dc:c0:25:1a:b7:b6:21:58:0e:19:
         56:ad:8d:33:52:ca:68:d5:8b:98:15:59:df:93:d5:01:3a:1b:
         3f:3e:9b:68:8d:df:1a:c4:12:46:8e:ad:98:29:08:bc:3c:70:
         04:fc:7e:87:a7:69:93:29:ca:b9:a2:c2:94:71:ed:2c:e0:d7:
         4e:b2:2a:5b:42:47:e1:47:73:5c:78:1e:17:11:62:8c:b2:18:
         bb:50:c3:d4:09:7c:9d:5d:88:d8:97:5a:77:ca:df:e8:50:ab:
         8a:d3:51:8b:94:0e:b4:ff:5e:ef:cc:97:2b:24:51:b0:78:02:
         d2:36:73:e5:29:8c:bc:11:24:ad:f0:16:9d:c3:79:ec:4b:52:
         55:69:ab:0e:f5:b7:18:49:d9:ca:2d:e5:68:57:c4:76:e9:df:
         37:2a:b2:6e:af:0e:52:69:eb:c9:12:82:02:2c:e5:52:3d:01:
         b0:26:9a:83:28:61:b4:01:2d:39:59:2c:06:ac:e5:ba:f7:fc:
         04:b4:36:b1:e9:0d:6a:fa:8c:eb:75:1b:d7:3b:82:ad:2f:3c:
         33:a3:99:d8:53:3d:70:56:86:c9:36:bc:8d:a3:7e:8b:a5:f0:
         39:fb:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:38:23 2024 by rpki-client on console-ams.rpki-client.org