Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File:                     13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier:          w/mljGyf5F+2EWqQ7LA3vhuh2SH11eS/FKXr0Orvdfs=
Subject key identifier:   64:7B:E8:44:D1:9E:00:84:8E:E2:44:A4:7D:87:49:A1:CE:0F:AB:3D
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer:       /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial:       018F43B29AFE7C726B7FE3BFF7EEB3BC5F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 13:02:09 +0000
Manifest this update:     Sat 04 May 2024 13:02:09 +0000
Manifest next update:     Sun 05 May 2024 13:02:09 +0000
Files and hashes:         1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: AWxW5QLLd6tkI7Mzkj1nW5orQa5X8hctPZ194OOtnlo=)
                          2: IUBJvFS27qrECyNF00KRX1aVGN4.roa (hash: gNWeJSJuWyE542A9KLKMArXuJs54XHfxngFgSJDFLGo=)
                          3: W4PjWzdJ1yTsQU04Mf3bVVM8EQU.roa (hash: AHjQpFEhiCqLpTiIIrh887U+y6ULQC4Hl7OMByB3dcU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:9a:fe:7c:72:6b:7f:e3:bf:f7:ee:b3:bc:5f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
        Validity
            Not Before: May  4 13:02:09 2024 GMT
            Not After : May  5 13:02:09 2024 GMT
        Subject: CN=647be844d19e00848ee244a47d8749a1ce0fab3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:81:3b:d3:dd:f5:73:98:2e:2b:56:5d:bd:90:
                    41:cd:a2:ca:29:5c:38:82:60:30:48:80:77:09:59:
                    6d:8d:e4:08:2c:13:64:43:00:50:8a:e9:c6:2f:ce:
                    15:c3:3b:77:8e:4e:f5:53:12:18:d0:07:e4:0f:55:
                    59:a1:c9:61:db:d9:89:b0:4a:cd:a7:37:7e:63:db:
                    a2:5b:16:b5:f9:21:2e:4e:af:4e:4f:40:ad:c0:ad:
                    8f:bf:00:2e:73:02:a2:ca:39:62:b2:ce:21:74:ab:
                    be:d5:ac:6e:3e:98:cd:72:5e:85:02:a6:de:e6:78:
                    00:61:38:da:ea:70:ae:f5:03:c9:18:5c:80:db:19:
                    aa:70:e9:45:38:a2:71:3c:3d:d4:cc:76:e6:1d:38:
                    1e:5a:f6:a6:1d:a4:d5:a4:3d:20:14:4f:88:17:bb:
                    c4:af:f7:06:42:0a:c6:7b:42:03:e5:48:d4:1b:19:
                    e9:35:8f:71:e2:23:52:9a:ac:3d:17:64:e4:f6:3d:
                    01:c7:87:b1:77:7c:b2:18:0a:de:18:74:da:78:fc:
                    c2:87:4d:22:de:be:c5:85:2d:86:96:6c:ba:2a:18:
                    dd:54:e0:97:e3:4e:1b:f3:a2:ca:d6:9a:87:06:4e:
                    8f:28:4b:58:27:96:9d:32:8d:cb:d4:b8:1b:4d:50:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7B:E8:44:D1:9E:00:84:8E:E2:44:A4:7D:87:49:A1:CE:0F:AB:3D
            X509v3 Authority Key Identifier:
                keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:60:e6:5e:85:32:51:3a:fc:84:ea:d8:40:d3:4c:b9:49:0e:
         a8:76:c0:6d:97:65:af:72:a5:30:92:d2:65:10:20:f1:b2:3d:
         4b:0b:2c:c4:4e:c6:5d:95:9e:d9:ac:e7:78:0b:a4:45:75:40:
         57:e8:a1:81:51:7f:c8:ee:15:bf:56:e4:f3:28:c9:b7:6f:2d:
         a6:75:d6:03:af:0f:ea:8c:81:0f:52:eb:a2:de:14:c5:61:c2:
         86:96:00:b5:78:29:8b:2e:2d:80:f5:b0:36:72:aa:57:e2:6a:
         65:8d:89:b3:bc:12:fd:d0:25:f0:ba:54:a9:75:70:f8:0a:62:
         94:5b:94:f6:f5:a3:d6:d5:e4:de:cf:9f:39:69:de:44:bb:09:
         b6:da:22:c1:66:ea:1f:83:5d:59:77:92:e0:36:04:f4:c4:63:
         2e:7c:f5:b6:ef:35:6f:29:91:bf:b5:87:3f:03:62:21:86:22:
         b8:d4:dc:65:80:44:e7:ed:d7:02:16:e0:94:b7:d8:74:88:fd:
         a2:ca:04:ef:b0:d9:70:8f:ac:ee:d1:e8:0b:6a:28:8d:2d:48:
         70:27:da:3b:be:6b:9a:53:2c:10:f3:56:30:8f:c6:8d:d8:02:
         2a:02:8e:3d:68:7d:f0:91:0d:f1:02:73:8c:14:cc:6b:cd:1c:
         38:61:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:46:29 2024 by rpki-client on console-fra.rpki-client.org