Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File:                     F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier:          4RFw7DaXmgpKdCMYnQhzebAZCXYowADSezerYiO/FcY=
Subject key identifier:   15:F9:E6:70:BE:AB:E2:40:9D:20:2F:15:BA:18:85:61:2D:3A:78:56
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       018F43B25550B0002FFDFD2A0B8EC09D8F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number:          1162
Signing time:             Sat 04 May 2024 13:01:51 +0000
Manifest this update:     Sat 04 May 2024 13:01:51 +0000
Manifest next update:     Sun 05 May 2024 13:01:51 +0000
Files and hashes:         1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: K85nd9hatpS3G4AB63atTbxLaCXDg1BUQP9QVPqFVAY=)
                          2: xTkTxy2Vgj7Q2dDygns3RB9-ko8.roa (hash: joYIAObdVWuMg18vFZSSwWRvoSOzSZizKVwQB31Qorg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:55:50:b0:00:2f:fd:fd:2a:0b:8e:c0:9d:8f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: May  4 13:01:51 2024 GMT
            Not After : May  5 13:01:51 2024 GMT
        Subject: CN=15f9e670beabe2409d202f15ba1885612d3a7856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:7b:86:2e:0f:1c:05:b8:e1:df:29:5d:c1:
                    6a:13:d9:1b:16:cb:37:b2:04:2d:15:76:23:03:74:
                    df:7b:a1:f5:b1:e2:d3:49:0b:7d:d5:f2:bd:5b:dc:
                    5c:99:51:0d:b0:8e:7a:ad:ae:75:f6:27:da:a7:ed:
                    ce:87:d4:16:d7:94:03:c3:18:f8:86:3d:50:33:f9:
                    39:0d:5a:1e:e3:9f:e5:7f:db:44:90:73:c3:da:e4:
                    17:5a:d4:ce:ca:33:8b:3d:5c:d9:4d:60:79:7c:e7:
                    09:3e:65:e1:4e:5c:53:1d:fc:f7:04:7b:6a:d1:f9:
                    e0:6f:c8:65:4d:58:c3:26:db:fa:b2:e8:4d:85:a9:
                    b6:f0:ae:05:dd:af:1c:6a:67:23:f2:60:7d:74:f8:
                    e5:23:af:b8:a7:1c:36:15:12:9c:76:bb:0d:f9:68:
                    07:b6:f2:47:84:45:78:a3:19:5e:bf:97:2e:ca:b6:
                    69:f1:76:ea:e5:78:54:39:e4:6d:c2:0e:f6:d7:fb:
                    89:67:fc:53:25:9c:7c:7b:b8:ad:03:37:2f:fa:ed:
                    9e:13:59:38:92:d3:01:d3:e3:d7:b7:60:a0:ff:b5:
                    71:ab:a3:47:e4:e7:97:4b:e2:c2:2b:13:dd:fe:3b:
                    de:d5:f3:af:e7:b8:c3:5b:64:b5:2a:91:df:e2:86:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F9:E6:70:BE:AB:E2:40:9D:20:2F:15:BA:18:85:61:2D:3A:78:56
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:d0:f5:4c:6f:86:b7:e3:76:1a:c8:9c:f3:b1:f1:8b:ec:
         a7:6e:fe:9a:cf:92:77:01:78:71:f2:1a:eb:87:30:93:0d:ce:
         c1:f5:c6:d0:29:8e:a5:47:4c:9e:67:cf:ef:38:e9:4b:a9:7c:
         37:11:e0:88:2f:bf:30:cf:1e:3a:df:4c:ff:56:9e:23:5e:23:
         e4:20:7d:1c:08:b9:ca:9c:cf:19:0e:24:c8:88:92:66:76:cd:
         8c:66:54:05:4e:bc:54:f7:e8:8d:2c:23:3f:b8:e5:04:07:d6:
         1e:2e:52:34:e7:d7:65:b3:bf:8a:0d:d6:fc:ce:76:01:00:7d:
         db:02:e9:8c:c5:61:93:5c:9d:b6:85:d8:45:a4:fd:84:11:d8:
         0d:7c:dd:e0:ee:f8:6a:ba:0b:a1:99:6c:aa:07:91:1b:16:67:
         b3:9d:9f:a0:eb:39:30:05:56:9d:a8:c5:3d:e1:ad:05:f3:ef:
         f3:07:f1:2b:ba:f6:c4:ed:63:f3:ca:aa:48:82:0c:dc:fe:ae:
         91:fd:ae:ac:a8:09:09:66:30:4a:b4:3d:ec:3d:91:c3:cc:01:
         d7:04:99:72:39:30:63:8f:c8:fb:2a:4b:36:4e:0c:76:5e:29:
         67:fb:3a:f3:56:69:4d:2d:a1:e5:01:5d:1e:50:c1:1d:fb:15:
         d0:18:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:51:18 2024 by rpki-client on console-ams.rpki-client.org