Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
File:                     6LVvnuGP2_rzCg2leYLicnPby0I.mft (raw, json)
Hash identifier:          VQFoHisxs2Uivbx+g5w4ctxBVD9fN1yez4lhIUrotYs=
Subject key identifier:   DF:2A:03:01:1E:BD:DD:88:E6:28:A5:7D:F9:2D:0D:B9:23:77:B2:A3
Authority key identifier: E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42
Certificate issuer:       /CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
Certificate serial:       018F3DE7A7B468F561A418AFB5F880377FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
Manifest number:          1155
Signing time:             Fri 03 May 2024 10:02:22 +0000
Manifest this update:     Fri 03 May 2024 10:02:22 +0000
Manifest next update:     Sat 04 May 2024 10:02:22 +0000
Files and hashes:         1: 6LVvnuGP2_rzCg2leYLicnPby0I.crl (hash: h7SqYiV4ev4ni7/Bm/KeZF5a1ejTWqI/gyIOu0NgQRs=)
                          2: _JgFMpmqs5dOKHO3ZPavceV351Y.roa (hash: ZuEkz+6ouJ/pebp7wlnGIC8sdIKhcNrm8ct+8I8vRwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e7:a7:b4:68:f5:61:a4:18:af:b5:f8:80:37:7f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
        Validity
            Not Before: May  3 10:02:22 2024 GMT
            Not After : May  4 10:02:22 2024 GMT
        Subject: CN=df2a03011ebddd88e628a57df92d0db92377b2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:fd:58:7b:7f:b2:98:76:98:f1:a4:42:30:
                    a3:3c:8b:9f:e4:90:d7:8f:a5:c6:5d:e7:23:cb:8a:
                    75:80:09:65:0b:4d:83:2b:39:8e:69:da:35:b1:e2:
                    5c:1b:e2:e0:7a:7b:cb:6d:9e:e7:b6:27:25:37:05:
                    7e:fc:bd:43:27:14:3d:a3:93:38:d5:0d:e3:e1:d2:
                    d8:80:5b:00:95:7b:44:ca:d6:17:b2:df:67:b7:0c:
                    f3:4e:d2:10:e8:7a:42:2d:ab:d1:74:2a:b7:36:f4:
                    9a:02:6d:28:16:1a:cd:5c:a4:dc:d0:66:ee:b0:76:
                    4c:ec:d2:d7:2b:33:5a:e6:9a:13:55:9d:d9:3f:8f:
                    c2:4b:a2:12:1b:8f:67:f1:26:5c:29:97:97:01:3d:
                    70:af:d9:99:f5:c7:86:d9:68:2f:a8:c6:03:25:70:
                    b2:79:a0:1d:45:cc:10:dc:62:3a:4f:f9:7d:fd:f4:
                    58:77:45:98:e2:3f:9e:13:e6:c1:8e:ce:96:ae:43:
                    da:aa:e4:c1:70:50:9a:31:1f:89:6a:36:50:40:da:
                    8e:79:e3:70:b0:95:c0:14:52:af:49:c9:3d:b8:ed:
                    5a:0d:e0:7f:92:3a:e6:a8:86:1f:58:3e:68:16:bb:
                    25:4b:d5:11:c2:b9:31:16:5e:ec:11:80:fe:1e:82:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:03:01:1E:BD:DD:88:E6:28:A5:7D:F9:2D:0D:B9:23:77:B2:A3
            X509v3 Authority Key Identifier:
                keyid:E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f8:92:20:54:72:54:ae:eb:a8:2b:64:7c:45:3b:db:40:f0:
         b0:39:f0:03:e1:0a:4c:28:0d:40:b6:3c:cd:45:05:27:2c:30:
         1f:7b:ae:ae:19:f1:27:ad:69:b3:8c:da:d4:9e:d1:c3:6e:7c:
         6c:74:70:f1:4b:89:a9:b0:b6:0f:9b:00:c1:5c:cd:e1:84:1a:
         b6:c1:02:3e:cd:0d:41:41:24:95:29:78:53:26:c0:35:e0:80:
         89:fe:cf:51:50:7d:01:a1:94:a0:4c:44:f1:96:f2:54:13:6f:
         8a:00:aa:c3:fe:9f:2e:bb:bb:5d:ea:34:04:35:99:a6:1e:58:
         e7:f5:8d:fc:0f:b1:44:15:57:bd:9f:75:8e:e2:84:c0:62:b6:
         54:8c:91:a9:f3:95:ef:08:b8:ad:73:3f:94:1e:84:98:4e:3d:
         ff:b5:3a:a8:d0:48:f8:80:9d:7a:e4:68:ff:00:e5:a3:4d:78:
         43:7f:0d:5b:6b:68:37:4d:70:dc:33:82:9e:b2:59:41:f4:4a:
         aa:9e:a0:8e:7a:7f:8f:47:ba:29:cb:a3:56:84:f3:a1:89:2b:
         4f:df:b5:32:07:36:94:8f:fa:21:d3:df:11:16:24:08:79:5f:
         6f:eb:42:d1:b9:ed:0b:7e:91:7d:f0:fc:1a:cd:65:25:89:cf:
         34:e0:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:25:30 2024 by rpki-client on console-ams.rpki-client.org