Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File:                     1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier:          VezJFii3MD76bpY/KTftY8qMUDZwv+sReh/qcvIi2nI=
Subject key identifier:   27:B1:76:FF:5A:5A:6D:74:9D:31:E0:23:94:E7:4D:5B:31:83:34:DE
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer:       /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial:       018F3FD727FA0487FD22000B6E0F26551CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number:          1156
Signing time:             Fri 03 May 2024 19:03:36 +0000
Manifest this update:     Fri 03 May 2024 19:03:36 +0000
Manifest next update:     Sat 04 May 2024 19:03:36 +0000
Files and hashes:         1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: sT/UmXi1NEGX5uiRN2NPIkL1uOoJjc8OObNzWFu/B7k=)
                          2: oYKwWbsFdcq9f-ZzrwTeQ1IrbKc.roa (hash: eFUATRu+3/m0yJvgx9EgsppXb596wNYzeNqMSXvQ75E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d7:27:fa:04:87:fd:22:00:0b:6e:0f:26:55:1c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
        Validity
            Not Before: May  3 19:03:36 2024 GMT
            Not After : May  4 19:03:36 2024 GMT
        Subject: CN=27b176ff5a5a6d749d31e02394e74d5b318334de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:f3:ea:a6:c9:f5:66:ad:1b:59:35:99:72:
                    5d:e4:83:a7:ba:ec:f2:8c:cc:ff:24:15:14:de:2b:
                    c3:63:b9:a1:7e:f6:10:7b:a1:49:a9:b8:a8:47:de:
                    1c:d0:04:36:ba:7c:cc:92:52:5c:4c:cb:43:cd:75:
                    bb:c0:35:0c:75:ac:82:0f:18:19:59:ce:a9:10:a0:
                    6d:77:d9:7e:b7:bd:d8:9d:e9:f2:2f:6f:95:85:26:
                    90:3e:3e:6c:78:18:06:12:82:91:ea:bc:1d:4f:47:
                    0f:2c:29:d7:86:5f:7e:a5:f3:77:96:1e:d7:4a:85:
                    01:29:d9:31:44:a1:ff:d8:3f:fc:5d:0a:1b:e3:ea:
                    d8:a2:af:c3:50:56:76:45:be:e9:bb:69:52:54:8c:
                    a5:d6:d9:c4:6b:80:06:54:98:1e:a3:b8:08:c1:53:
                    d1:bb:84:92:2c:be:08:4b:74:19:aa:62:fb:32:cb:
                    ce:6b:b0:08:b4:65:56:8f:72:3f:de:25:d1:82:3f:
                    38:fc:72:1f:d8:ff:8a:41:59:c0:f5:48:b5:f5:80:
                    43:0e:52:49:6b:f3:88:97:c4:9c:d6:2a:34:2b:68:
                    39:a7:91:9b:44:1a:b4:2f:76:1d:f5:3c:82:eb:17:
                    32:62:21:83:1c:17:f7:5b:31:73:f8:c9:63:07:3f:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:76:FF:5A:5A:6D:74:9D:31:E0:23:94:E7:4D:5B:31:83:34:DE
            X509v3 Authority Key Identifier:
                keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:89:e2:1d:b1:2c:b3:30:8a:db:9a:11:76:71:de:b8:b8:7f:
         7f:0e:b8:90:8d:20:cf:19:80:64:18:f2:92:61:31:5b:f2:55:
         35:0e:29:6c:cd:e7:53:cd:42:fe:4b:7b:b9:c5:b3:c6:40:ab:
         8e:5a:65:13:48:bf:fe:d1:c3:37:72:75:7c:a8:02:04:eb:12:
         ab:e4:b1:44:4d:36:81:9b:15:9c:18:a4:e0:f2:8d:ef:cf:fe:
         68:7c:ed:22:e7:5c:de:50:36:81:3b:fa:47:47:82:d9:22:eb:
         92:2b:56:1d:fd:1b:17:e8:f3:3a:20:6f:7d:cf:76:ce:1e:cf:
         1e:d9:33:87:4a:70:97:2e:ee:e2:81:6a:f9:a7:44:57:9f:c1:
         21:2f:b2:84:0a:55:60:0a:fc:a2:bb:73:78:b1:d1:33:77:d9:
         8a:e8:11:c0:89:e1:e8:c9:d2:ca:de:a0:f2:a5:ef:8a:c6:bc:
         0b:d4:90:6d:6b:20:12:74:38:b7:4e:9f:79:0b:89:aa:2e:2b:
         77:3e:c0:80:a3:34:58:db:c3:85:13:d8:0c:61:80:8a:f9:d3:
         34:bc:fd:4d:2e:b7:44:8b:9d:a3:51:a9:41:ce:fc:3e:a1:e4:
         ee:57:8d:9c:5c:89:dd:26:54:f2:40:b1:99:96:a3:82:74:36:
         62:e2:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:23:47 2024 by rpki-client on console-ams.rpki-client.org