Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File:                     AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier:          brRw6DyNs30rPxsU19VXm4ZKVb92MMJ7TmeAk0DvkOM=
Subject key identifier:   1D:FD:1F:43:2D:D5:FF:10:2E:E0:21:5C:EF:5E:0A:D5:F1:35:C4:97
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer:       /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial:       018F58EFC2B6662E7595164AA06CEE71A07C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number:          1130
Signing time:             Wed 08 May 2024 16:00:58 +0000
Manifest this update:     Wed 08 May 2024 16:00:58 +0000
Manifest next update:     Thu 09 May 2024 16:00:58 +0000
Files and hashes:         1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: rJ0yaTnlDWnJyKSN/lHaQ5mkoFm7hHIiSZjcQKzX+xE=)
                          2: dMHpUm8VZEZVdiC1RHvrnwWe1JY.roa (hash: Of0wvORtLarxkVZANVpreqxiAHgzR72qblwvfzcbvnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:ef:c2:b6:66:2e:75:95:16:4a:a0:6c:ee:71:a0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
        Validity
            Not Before: May  8 16:00:58 2024 GMT
            Not After : May  9 16:00:58 2024 GMT
        Subject: CN=1dfd1f432dd5ff102ee0215cef5e0ad5f135c497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:32:6a:c5:bb:c2:ef:d5:8e:59:db:f8:e8:
                    2b:d1:fb:db:f5:c1:c2:ab:0b:e5:c3:52:0c:d8:49:
                    17:b9:e8:ce:78:ba:d9:1d:42:0a:1a:13:0c:35:e0:
                    ae:c5:dd:0a:b9:d6:ef:a7:19:1b:af:59:dc:18:43:
                    45:47:f8:3d:25:29:0a:d8:6a:d8:f7:df:0d:14:66:
                    f5:20:2c:2b:db:9e:fd:af:9f:02:13:ec:76:08:bb:
                    51:c5:9d:65:9d:83:73:a3:a2:90:92:9c:3d:bc:7a:
                    53:ac:b2:5a:ce:e4:12:cb:ea:18:1f:9c:a3:a5:4b:
                    5a:33:7b:e7:70:b0:7b:c2:c2:4e:e0:53:9a:5c:c8:
                    c4:b0:53:b0:dd:47:ad:12:8a:a3:d9:2e:21:ba:22:
                    00:44:90:cb:00:68:db:ae:e9:39:db:e2:b5:67:4e:
                    cd:71:5e:39:29:44:7e:65:61:e4:2c:e9:7e:7d:8d:
                    4e:e6:5b:b9:be:d0:72:92:92:d6:4c:38:84:74:31:
                    f3:66:10:8e:ab:1b:b2:2f:74:2e:d6:e3:40:2b:6c:
                    44:5f:c4:45:68:0b:52:ae:af:40:aa:46:db:53:3e:
                    0d:8e:e3:5a:5b:f3:94:7f:b3:b2:9f:04:bf:47:93:
                    3e:9b:bf:f1:1e:aa:81:2a:2c:02:c4:33:39:08:7f:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FD:1F:43:2D:D5:FF:10:2E:E0:21:5C:EF:5E:0A:D5:F1:35:C4:97
            X509v3 Authority Key Identifier:
                keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:16:30:24:fc:f9:94:ce:0b:a2:6f:3d:a5:35:a4:c8:71:
         ce:64:b8:e1:6f:f6:f0:f4:57:78:27:35:bf:8d:a0:cd:97:e2:
         03:a6:ce:d0:24:bf:d7:65:ab:ce:52:c1:24:82:53:e3:74:e7:
         53:a7:21:c1:23:c6:e6:5d:b8:1d:30:02:02:18:f5:14:e3:86:
         4c:2a:29:15:1e:19:78:20:93:48:bb:a6:64:f4:11:81:13:d8:
         08:09:57:78:8e:13:c5:de:65:50:94:b0:0d:37:1f:3e:7b:c3:
         9d:28:6f:61:92:3b:f3:77:7e:b7:bf:64:fd:f3:8c:c2:8a:23:
         be:ed:d0:45:bc:29:f3:f2:93:c2:8e:f1:56:15:07:9b:33:67:
         8c:ff:91:34:c9:33:ef:2e:55:17:e0:78:93:b9:3b:ce:57:46:
         47:12:4c:ab:a1:11:62:5a:ee:01:3c:de:fb:cd:ae:86:f0:f2:
         32:c7:7b:d8:5f:e0:63:ed:ad:af:f1:e5:60:b1:72:01:61:59:
         cc:3d:fc:5d:65:ba:d2:78:4f:7f:ae:6c:dd:01:aa:5e:46:9b:
         8e:3f:43:4b:d0:54:84:07:45:8a:d2:f1:be:02:21:63:15:3a:
         38:1f:69:7c:ce:3d:45:f2:f8:dc:81:d7:93:9b:58:7d:d8:00:
         68:f9:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:55:22 2024 by rpki-client on console-fra.rpki-client.org