Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File:                     1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier:          KA66dY71DbTMN59oCxok/E44JxydIUu23oywCJWV9zU=
Subject key identifier:   78:84:6B:99:1A:75:35:B4:E2:7E:EB:02:D2:E0:06:FB:4E:83:99:A3
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer:       /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial:       018F396571E4AEE559423E9F4EE24045C6E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 13:01:40 +0000
Manifest this update:     Thu 02 May 2024 13:01:40 +0000
Manifest next update:     Fri 03 May 2024 13:01:40 +0000
Files and hashes:         1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: b7Naz8yQcJ8pgF8Z4XnwdPcKumgNyRCIUTnkIl2SreU=)
                          2: Go24FMyJ8r6Lg4d1hM4_mxr36K8.roa (hash: kE/vfTeTzloUebKXowPwNHjS+4aff10gi9f7LFhwj5c=)
                          3: n5JASCkWUx4SgnsseQ3nVkN1mlY.roa (hash: pBu1gKTg6Fwzt9vpYlkOxUt+OBvggWXTZNMpjSUCC8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:65:71:e4:ae:e5:59:42:3e:9f:4e:e2:40:45:c6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
        Validity
            Not Before: May  2 13:01:40 2024 GMT
            Not After : May  3 13:01:40 2024 GMT
        Subject: CN=78846b991a7535b4e27eeb02d2e006fb4e8399a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:08:7a:dc:bb:31:15:1b:65:9f:0b:3d:5c:
                    dd:b6:ab:63:89:b0:94:b6:9d:15:85:18:a9:63:77:
                    72:07:b0:76:fc:69:b8:9c:f1:53:de:af:b9:75:55:
                    f7:1a:2f:a5:7e:76:c2:00:8c:96:26:e0:f2:e2:ea:
                    98:f3:ac:e4:1b:6b:fe:f1:35:65:d9:27:53:22:58:
                    78:18:15:fb:bd:90:13:a7:bd:ed:b7:bf:63:47:38:
                    4c:82:f6:ad:72:00:68:c4:92:0d:dc:fd:5c:2b:96:
                    5c:9d:b7:93:5a:ff:91:c4:32:75:bc:fd:dc:2d:a0:
                    00:2d:1e:43:4b:c2:d2:1a:6d:2e:c9:c2:0c:9e:60:
                    f4:d0:79:0a:58:a5:2d:0c:b9:66:06:da:55:77:c5:
                    1b:45:8d:92:18:af:93:69:80:64:f6:7a:de:f9:35:
                    c4:dc:ec:aa:c8:8d:ca:96:fb:90:39:4e:4e:da:8d:
                    03:b4:61:fc:71:b4:5e:48:4a:06:ac:88:bd:b7:5f:
                    da:31:61:07:eb:25:32:6e:56:78:63:d4:b2:99:ea:
                    3a:a6:51:27:ef:09:dc:c3:0a:7b:14:dc:c9:00:9e:
                    3d:81:c2:f3:0e:12:65:8e:7c:cf:76:09:b8:76:45:
                    ce:73:d8:49:c0:9f:78:90:e2:0c:6a:c0:9b:b0:7e:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:6B:99:1A:75:35:B4:E2:7E:EB:02:D2:E0:06:FB:4E:83:99:A3
            X509v3 Authority Key Identifier:
                keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:de:8d:b8:0c:2a:aa:8b:27:86:5e:c1:b0:8c:32:9e:ba:
         28:6c:fb:7d:d8:10:94:b6:e4:20:ec:e7:7c:cc:66:48:6a:dd:
         c4:94:be:f8:c8:76:bc:d3:18:4a:93:40:ea:eb:f9:d8:b6:5e:
         ee:03:6f:14:a7:6b:2c:96:e3:a4:12:7f:a2:fc:fb:8e:ed:42:
         95:70:11:35:47:d7:c6:78:39:14:db:db:74:f0:43:94:23:62:
         97:54:3b:ee:10:9c:d3:32:0e:6d:3b:d8:05:3a:3a:74:c5:29:
         31:4e:eb:2d:4b:95:cb:52:c9:f2:4f:ef:ed:fd:b9:64:8c:18:
         79:47:8b:f3:5d:83:68:bd:c3:19:69:e9:a4:54:45:d2:73:1c:
         6c:a6:06:95:33:63:a7:e2:b8:ff:0d:c0:15:cd:bf:78:e3:bd:
         79:e7:de:e5:d3:f4:04:2c:ba:60:8c:ee:9c:f8:16:86:3a:76:
         49:22:ca:f4:9f:4e:0d:89:77:f4:cf:68:73:db:d6:47:d1:8c:
         d6:4e:35:d4:b3:0c:e4:87:7c:8d:6c:48:d0:d9:8c:d6:50:88:
         07:32:a8:5f:44:0a:b7:91:29:07:ba:d4:2f:4a:36:5c:b8:b0:
         15:4e:64:a7:de:cc:9d:33:b3:bf:a0:eb:c3:6c:f3:62:db:e0:
         13:20:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:38:23 2024 by rpki-client on console-fra.rpki-client.org