Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File:                     9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier:          a6rOTo5XXetLEsguIZxS3pwUEyYT1aZbZ0sQl/uVfxI=
Subject key identifier:   C3:CB:71:EA:C9:D6:02:75:4C:A6:51:8E:91:38:8C:EF:8C:19:CC:49
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer:       /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial:       018F41C5730A3B849719AEB0B8BE5D346A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 04:03:29 +0000
Manifest this update:     Sat 04 May 2024 04:03:29 +0000
Manifest next update:     Sun 05 May 2024 04:03:29 +0000
Files and hashes:         1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: WiaOSSva+JSKxB4rVcBiQBh6ZcvQscotR/gZzByDKvM=)
                          2: MizR5OqCddJnF1z0-0QS_fm9Ng0.roa (hash: fx7592aOnJagezMugf1OBIWJwROP8rXCcarJj0jFWa8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:73:0a:3b:84:97:19:ae:b0:b8:be:5d:34:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
        Validity
            Not Before: May  4 04:03:29 2024 GMT
            Not After : May  5 04:03:29 2024 GMT
        Subject: CN=c3cb71eac9d602754ca6518e91388cef8c19cc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:ec:9f:04:d1:87:50:86:e0:55:69:9b:68:
                    7e:52:12:b5:0e:90:90:ec:6d:bd:34:1a:a6:84:3f:
                    8a:b7:83:ee:ee:c7:9a:56:ed:fe:60:c5:3c:86:90:
                    41:2c:ea:5b:22:71:e0:97:ce:fb:9c:fb:ac:c6:23:
                    1b:82:b6:1b:12:79:18:a1:0f:ad:6f:4d:70:0f:38:
                    02:cc:88:9d:fb:b8:08:99:55:04:58:15:60:3c:d6:
                    2c:36:4e:26:e7:52:ca:f4:81:fb:cd:d9:9e:88:58:
                    88:4c:88:af:ff:bd:34:0f:19:0f:62:97:d4:e7:0d:
                    f9:f9:be:cf:b3:7e:58:f8:bd:9d:f4:b1:63:d6:e8:
                    ee:ef:33:d2:91:85:9b:94:46:2d:02:74:43:27:16:
                    32:8c:0e:e1:5e:c6:0f:16:a8:ed:92:e6:1f:55:9a:
                    ba:87:6b:e2:46:ed:4a:ec:7a:8f:2b:4e:dd:13:7d:
                    5a:03:1b:7b:2a:1e:a3:98:55:0e:a8:db:0b:b4:d7:
                    9e:d4:e8:72:50:c3:d5:29:75:99:09:e9:64:bb:c6:
                    40:f1:58:13:58:7e:0d:2b:6f:17:16:02:bb:61:e2:
                    ac:43:1a:ab:a8:50:35:5b:14:cb:3a:77:e9:8d:55:
                    b5:4d:57:90:b0:bf:a7:c9:b6:b4:50:9e:99:2e:58:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CB:71:EA:C9:D6:02:75:4C:A6:51:8E:91:38:8C:EF:8C:19:CC:49
            X509v3 Authority Key Identifier:
                keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a0:ad:1b:8f:3f:4e:bb:17:16:06:a4:9b:80:d9:ab:a8:64:
         75:63:31:36:d5:6b:57:ee:a1:b4:01:63:72:7e:31:fb:c9:49:
         eb:bc:6e:71:d9:7a:8a:29:1f:cc:65:49:fd:67:5c:70:5a:90:
         d6:49:a3:eb:b6:0e:36:ed:ec:3a:c0:08:fd:1d:72:de:c4:17:
         13:be:a1:3e:a0:05:62:2d:93:e1:a5:88:6a:26:01:62:73:a8:
         b3:b0:e4:ec:a5:26:2d:cb:14:3e:db:8a:a7:ac:3b:e2:9f:0d:
         51:97:69:21:7c:1c:e9:cd:84:73:cb:07:60:8c:fb:bb:c7:7d:
         bc:b0:8e:fc:14:3f:4d:1f:c2:cd:8b:dd:e6:87:5d:0a:81:8e:
         13:5b:11:2c:b4:ab:ce:cb:ee:9a:a3:e9:80:bd:ea:58:b8:2e:
         fe:09:12:fa:ed:48:a9:c0:0f:55:3d:ea:56:8c:d2:35:8b:48:
         37:8a:53:2e:d4:09:4f:e5:da:72:dd:48:4f:b1:4f:d9:13:1c:
         1b:63:ce:c6:7d:4a:08:ff:10:62:b3:9f:81:9c:fb:b4:df:62:
         fc:db:e4:03:72:6f:08:11:d0:59:20:93:3b:66:c5:29:a4:af:
         79:12:8c:55:ec:30:6a:80:c3:49:2a:85:b5:a7:48:18:b0:50:
         ec:68:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:10:22 2024 by rpki-client on console-ams.rpki-client.org