Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File:                     1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier:          uMe4SWhY7GPCjcuxMDFMykcBLCjIiDIBpYrdkXJ5nP0=
Subject key identifier:   3A:11:17:97:BB:D3:46:46:AA:CC:99:B3:4C:7D:5F:11:BF:8F:B9:B9
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer:       /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial:       018F3A09ACEB33314D3B37DD0E3B8F47349E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 16:01:03 +0000
Manifest this update:     Thu 02 May 2024 16:01:03 +0000
Manifest next update:     Fri 03 May 2024 16:01:03 +0000
Files and hashes:         1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: PusoKf/LuRAs/PQ9LL9DMkz8oTg2ShMGdAixnbGCY4I=)
                          2: F-cdflVdpJfULyMH3EO8CgxDpKE.roa (hash: N7fnV09mXN+/24PCpkRcRpvyTxSRkZ8qbtGYXDZgJaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:09:ac:eb:33:31:4d:3b:37:dd:0e:3b:8f:47:34:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
        Validity
            Not Before: May  2 16:01:03 2024 GMT
            Not After : May  3 16:01:03 2024 GMT
        Subject: CN=3a111797bbd34646aacc99b34c7d5f11bf8fb9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c6:c6:b3:4a:1a:56:67:e3:d3:3d:9b:9b:75:
                    3c:d1:0b:33:e7:80:29:38:ec:83:c6:7e:26:5e:33:
                    09:11:81:85:83:fd:51:84:8a:b7:a7:67:fa:d2:d1:
                    2d:df:68:c6:81:18:c9:c5:2a:59:a3:7b:f5:da:a2:
                    80:f1:11:ee:c8:65:32:ae:0c:c4:d1:04:74:3e:21:
                    dc:c6:8a:d2:a9:89:1f:34:ad:ad:94:14:ce:a0:1e:
                    37:df:e2:8b:76:0b:b6:49:cf:34:3e:33:8b:af:5a:
                    61:78:30:fc:b7:19:80:4e:81:4b:72:2f:9e:f4:f6:
                    ea:45:e8:4f:b8:51:4b:11:84:35:7d:c2:e8:9c:c0:
                    10:f7:86:37:7d:3b:4b:5a:f3:9a:d3:18:9e:e2:fd:
                    82:eb:33:cf:21:dc:79:ea:80:e0:6c:d0:f4:d2:72:
                    9f:24:84:79:85:61:68:08:a6:19:76:f9:df:51:0f:
                    a0:f7:ba:87:65:9b:d0:8a:5d:b7:18:3e:06:db:9b:
                    74:d5:ef:a7:29:ac:8e:86:13:bf:88:14:9f:9f:16:
                    08:7c:da:d7:81:75:06:b2:20:76:0a:8d:ea:aa:cd:
                    52:31:5d:ef:7d:51:82:a6:3a:9d:9e:b8:bd:da:9a:
                    53:38:6d:d7:b9:ce:5c:db:b4:90:99:60:a1:cb:b1:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:11:17:97:BB:D3:46:46:AA:CC:99:B3:4C:7D:5F:11:BF:8F:B9:B9
            X509v3 Authority Key Identifier:
                keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5c:c6:59:62:63:ea:f1:64:0b:77:6a:0e:60:b8:b0:5e:9b:
         18:68:a5:73:a7:10:3b:30:9a:80:81:32:77:e3:c2:39:00:5b:
         be:79:a8:8a:d1:74:3b:95:3b:b9:7a:ee:a7:96:4f:26:52:eb:
         24:57:67:bd:44:89:eb:a8:96:f9:33:e4:8a:d8:77:b8:56:fb:
         66:a3:61:2d:05:da:fd:1d:ab:e8:4a:a5:19:fd:9a:97:41:08:
         7b:80:3a:b3:2c:0b:93:a1:72:9d:ab:fc:9a:ec:0f:54:e6:9d:
         60:c9:01:7d:40:2d:2b:87:d5:9a:fb:62:db:ef:ba:7a:c3:d2:
         e8:88:8b:03:9e:25:ce:14:e2:ba:52:bd:b0:6f:a9:03:b7:44:
         f3:9b:99:21:1d:04:48:e1:34:73:ae:a7:1c:5d:a6:6c:c5:bc:
         22:6e:13:24:44:e9:d9:1f:19:70:a4:cc:79:5d:57:e3:0b:a4:
         ae:c3:3b:b8:2d:21:8b:b8:0f:11:4d:5e:4d:5a:83:0a:13:9c:
         9d:49:da:c9:7c:19:f4:cc:f9:02:ff:a1:aa:bd:d0:20:a4:82:
         d3:02:11:93:fb:ea:94:91:06:8b:0e:bb:ac:59:2e:e4:13:bd:
         85:c8:33:c2:ab:8c:62:5a:70:a8:aa:c9:4d:6a:90:6b:40:2d:
         5b:e7:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:55:30 2024 by rpki-client on console-ams.rpki-client.org