Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
File:                     1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json)
Hash identifier:          tfLjLDzHRPFT+XYvkIh9WF14K5UcNdYYMy2/5PNU03A=
Subject key identifier:   4D:12:E1:89:D5:CD:A9:1A:12:6E:B9:A8:82:9A:C8:4B:E3:8A:DC:B4
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Certificate issuer:       /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial:       018F5136F6E25634AE967E80BA3ED7E7C780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
Manifest number:          0FC9
Signing time:             Tue 07 May 2024 04:01:47 +0000
Manifest this update:     Tue 07 May 2024 04:01:47 +0000
Manifest next update:     Wed 08 May 2024 04:01:47 +0000
Files and hashes:         1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: bueuSkcKL8rVCs2+XzBYNY+HLCb8w0BoO2h38Lu0D4M=)
                          2: 4X6g6U6pPuoPvMaOFM3V8Hrh-B4.roa (hash: Pq4T6iQVhTt4qvdUMvmFPGsBC+fYa925sr1vlF4LtL0=)
                          3: vR0qVQ0NTStXA1H_E_S0iM1Gj-c.roa (hash: 9m2QECHLLbQ5yo5AUyYKLyzC9kzMdw9dsuSPOwnuK0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:f6:e2:56:34:ae:96:7e:80:ba:3e:d7:e7:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
        Validity
            Not Before: May  7 04:01:47 2024 GMT
            Not After : May  8 04:01:47 2024 GMT
        Subject: CN=4d12e189d5cda91a126eb9a8829ac84be38adcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:49:e5:3b:53:1b:35:2e:91:a7:a1:37:9a:
                    b9:e6:a0:69:f1:99:d8:83:68:ea:b3:d4:61:ed:b2:
                    a6:cf:8c:8e:cb:f8:44:df:e7:4b:b9:9a:56:24:d5:
                    20:47:52:0d:0e:5e:f9:28:29:1c:c3:3d:25:21:03:
                    ab:7e:ba:71:bf:b8:59:4f:39:8a:ab:77:85:95:c4:
                    e5:8b:ca:21:ab:17:5f:5e:30:16:ae:92:7f:59:be:
                    93:9c:21:c0:fe:9f:1a:87:77:5e:60:4a:41:34:32:
                    3e:7f:25:3d:48:61:9e:ba:b1:6b:fc:63:24:0c:38:
                    4a:06:2a:4e:43:99:03:ff:4e:42:eb:1f:c7:76:2e:
                    33:c6:41:4c:01:ac:03:79:33:44:51:9f:59:89:e8:
                    0e:4e:94:09:87:3d:d9:a4:65:bb:5b:c9:2e:ea:96:
                    5e:52:a1:95:5b:f2:92:8b:18:97:a6:56:79:ba:29:
                    46:8c:d8:0d:73:00:cd:a2:31:5c:6b:a4:e9:f6:13:
                    b5:63:85:ef:25:e4:ef:de:29:09:29:9c:ae:73:e6:
                    4b:09:a8:b0:ee:ed:4c:3f:49:2f:d2:50:0b:8a:08:
                    53:0d:c1:8b:42:22:43:a9:46:d7:b4:7b:b5:51:a5:
                    28:dc:67:53:21:53:53:04:b1:b3:e9:35:d3:ec:fa:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:12:E1:89:D5:CD:A9:1A:12:6E:B9:A8:82:9A:C8:4B:E3:8A:DC:B4
            X509v3 Authority Key Identifier:
                keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:97:49:c5:60:7e:6b:e1:38:fa:a4:67:5d:d1:91:92:c3:
         3a:79:f0:08:62:5b:6e:7d:92:2a:d3:97:22:f5:a6:d8:80:a4:
         33:23:bf:4e:37:f8:59:d5:2b:a8:90:75:3f:a6:7a:5c:07:24:
         e0:45:07:5c:87:90:4f:12:5c:e6:b0:3e:8b:3c:a5:ff:ac:7c:
         be:50:80:9e:9c:ee:dd:9a:7c:24:84:07:97:fe:88:21:55:db:
         82:3a:00:f0:1b:e1:14:2e:ca:b6:70:02:86:92:ab:e0:56:5c:
         23:be:a1:f1:66:15:7d:59:56:3b:dd:6b:58:fd:a6:af:a7:3a:
         2f:d9:69:4f:51:cf:7a:df:aa:0f:56:94:d9:60:25:d5:ce:ad:
         aa:74:0a:de:64:de:e9:5d:2a:ad:69:9e:88:f7:2f:a9:d4:de:
         ed:e3:5e:8b:ec:98:54:a9:aa:9d:2b:d2:94:3d:9c:76:c1:9d:
         e2:5f:34:5b:ac:2b:bb:2c:c1:72:f1:53:ed:25:67:4e:eb:cd:
         b2:98:bb:70:e5:a8:2d:00:b6:33:19:e6:f8:48:2d:5f:13:f2:
         c6:b5:01:87:33:92:a8:82:2b:ca:05:2e:02:d8:f3:d6:3f:fb:
         cd:d1:07:7c:0c:51:de:1e:f1:ac:44:ff:60:4d:5a:82:ec:73:
         fd:be:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:38:19 2024 by rpki-client on console-ams.rpki-client.org