Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File:                     AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier:          q2g97THG1KbzGIVwQ0TdW6SJD2GNyQ9a6dpKzIV17/4=
Subject key identifier:   27:D8:40:90:1A:53:C0:B5:6B:21:59:D4:90:86:B8:BD:2E:CD:22:02
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer:       /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial:       018F441FD14AFC76BB82C7C7252B46B9F45D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 15:01:26 +0000
Manifest this update:     Sat 04 May 2024 15:01:26 +0000
Manifest next update:     Sun 05 May 2024 15:01:26 +0000
Files and hashes:         1: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: PVQIWfARovMkwQTUOxCHFOFgeSh4LrGILXdI6Nf41HI=)
                          2: nDE5f6FqOjztkIVF9dZj0IduaAQ.roa (hash: QZ25HyD6q/qYluhutYPlC31u9jD5KAF5gn2Mvn+SSN4=)
                          3: yvpjWtz46zsun1W2QybrjRRakTk.roa (hash: XQWdrjR0LoFDKoLC95zC6F9aO6E2j9FpmMx9mFkAAi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:d1:4a:fc:76:bb:82:c7:c7:25:2b:46:b9:f4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
        Validity
            Not Before: May  4 15:01:26 2024 GMT
            Not After : May  5 15:01:26 2024 GMT
        Subject: CN=27d840901a53c0b56b2159d49086b8bd2ecd2202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:c3:4e:75:9d:2f:de:df:6b:b4:3b:f4:95:
                    f1:82:ef:0f:9b:02:32:64:5e:74:7b:26:76:18:fb:
                    30:5f:d3:ab:39:0f:27:e9:b9:d1:74:94:f3:0c:90:
                    db:c4:a1:fe:fc:50:e7:cd:17:46:e4:6c:a5:06:5e:
                    7d:f6:e1:af:47:75:35:9b:5d:96:a7:1b:26:49:e5:
                    26:58:c4:b4:e8:c9:c6:c1:18:3e:38:e0:ce:c9:5f:
                    1c:da:19:6c:2f:c2:1e:8b:fb:ae:da:82:82:4e:99:
                    20:f0:89:66:18:9c:c8:f2:33:81:56:f9:ce:8e:18:
                    bd:e7:81:13:35:b5:73:87:6d:30:96:f1:fb:97:c7:
                    82:15:32:95:59:aa:ae:eb:7f:3f:1f:f1:40:6e:3b:
                    d4:36:7d:75:99:43:c7:d5:89:e5:a5:a8:2c:10:31:
                    09:b0:d4:a6:e7:52:5c:ad:26:2b:d3:e3:e5:e5:ad:
                    d0:1c:66:5f:86:d2:88:b8:69:9c:85:d6:45:e7:db:
                    b3:a3:6f:cb:11:c1:47:33:96:05:24:5e:c7:60:33:
                    c2:9e:fb:57:70:dd:f4:4d:3c:26:ee:00:99:1d:1d:
                    be:4f:b0:3a:51:33:fc:b4:3d:e7:53:95:6a:0b:66:
                    06:55:53:8b:58:68:30:00:d8:49:73:ab:e8:3b:b3:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D8:40:90:1A:53:C0:B5:6B:21:59:D4:90:86:B8:BD:2E:CD:22:02
            X509v3 Authority Key Identifier:
                keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0c:c6:ae:70:a5:b6:ac:c8:ef:ca:9a:74:81:6c:62:3b:d6:
         5c:6f:7c:2a:a9:16:9d:78:84:cd:ad:17:b1:c6:e5:50:bb:9d:
         91:29:f7:49:36:63:9f:78:05:b0:8b:25:d7:e2:cf:68:7f:50:
         34:db:5c:72:32:5f:46:43:ff:46:e6:17:2e:76:45:ce:79:57:
         d9:3a:b6:69:f6:73:ec:1d:88:3d:c7:e4:c2:3d:62:04:b3:59:
         30:c5:9d:02:97:db:56:28:10:85:c7:53:a8:71:7a:5b:0f:d1:
         62:a1:6f:0f:a3:4f:66:b3:30:0a:61:5b:44:e1:3a:d4:ae:cd:
         9a:0a:ce:38:aa:1b:83:f6:f2:0c:52:94:52:3e:36:0b:af:98:
         4f:da:c7:ca:db:d2:7b:b7:2a:85:39:96:c8:66:86:10:c1:1d:
         16:d8:9e:0c:29:e4:27:e9:f1:2b:25:91:cd:23:6e:85:b6:e2:
         7f:18:fe:e5:ee:9e:3b:64:a4:2e:ce:d4:f0:39:ee:13:6e:3f:
         b0:a5:8a:61:51:d3:c5:24:14:19:78:f7:1c:07:40:13:2b:66:
         8a:ac:8d:70:dc:b8:91:ca:23:8f:a3:0e:1b:f3:cc:c7:c9:91:
         43:09:e7:21:e7:18:dc:ec:ad:7c:d5:fb:5f:5e:5b:81:f8:a8:
         55:3c:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:09:11 2024 by rpki-client on console-fra.rpki-client.org