Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
File:                     1EdMHAbL_elGFNZcfQX2FKbiOZg.mft (raw, json)
Hash identifier:          Trg8ycc+6dw11OPML60yhsUAD6pUNE/UoNMVcELdDaU=
Subject key identifier:   61:CA:CA:BD:FC:58:44:95:9B:1F:52:29:1D:49:8E:24:F3:E8:71:62
Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
Certificate issuer:       /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Certificate serial:       018F3BF8ECFEE19D6303CF60FE30D9382DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 01:02:00 +0000
Manifest this update:     Fri 03 May 2024 01:02:00 +0000
Manifest next update:     Sat 04 May 2024 01:02:00 +0000
Files and hashes:         1: 1EdMHAbL_elGFNZcfQX2FKbiOZg.crl (hash: sj7KEOZw91jPY/3cbNPip3UglTQLJeeeo7bf5l74oiY=)
                          2: hmNlTK1-0lHVp_iVWuDLiGEzCUM.roa (hash: G2CmxWHayAuBHOZ0v1SpY6FsbaWvDTGFHkA4ZEi8iQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:ec:fe:e1:9d:63:03:cf:60:fe:30:d9:38:2d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
        Validity
            Not Before: May  3 01:02:00 2024 GMT
            Not After : May  4 01:02:00 2024 GMT
        Subject: CN=61cacabdfc5844959b1f52291d498e24f3e87162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:0f:df:44:a2:f3:90:9f:40:fb:0b:87:87:
                    73:32:84:27:ed:46:f5:7c:09:cd:f7:3f:3a:1d:74:
                    01:03:51:6c:2e:88:97:a9:8c:dc:5b:90:a5:77:57:
                    fd:dd:75:b6:ed:d0:26:1c:e7:69:90:3d:a8:d3:55:
                    37:4c:b0:97:80:04:e2:13:c9:88:ae:22:52:54:20:
                    96:07:9a:b2:d1:a7:b5:89:e0:bf:e1:82:4c:b0:20:
                    0a:56:9a:a2:22:b1:03:8f:c6:51:40:51:ac:1c:55:
                    59:95:8e:13:7d:cb:64:8e:6f:dd:2f:67:19:8e:8e:
                    5b:d5:20:92:d8:e6:7a:93:e6:2e:c1:4e:c5:1d:28:
                    24:8f:40:d2:46:82:cb:a8:54:d3:67:f2:00:9a:65:
                    d4:c2:dc:ac:77:7e:66:b2:dd:dc:df:0a:8f:0c:1f:
                    8a:e8:42:99:66:86:d9:6b:0c:ee:0f:82:58:d2:45:
                    81:bf:ea:20:97:51:07:e1:13:db:d4:5d:05:02:ff:
                    04:4d:d3:bd:91:0c:a2:6f:8a:f6:62:63:fc:2f:38:
                    95:fd:f6:4a:6f:e3:10:fa:35:57:e4:33:f7:36:e7:
                    ed:b3:3e:b2:f9:8a:68:ea:2f:07:97:24:2c:b2:83:
                    84:ba:99:d5:35:9a:83:25:f4:3c:9a:a3:00:49:fc:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CA:CA:BD:FC:58:44:95:9B:1F:52:29:1D:49:8E:24:F3:E8:71:62
            X509v3 Authority Key Identifier:
                keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:d1:c6:0b:d1:97:6c:80:cd:77:d3:c1:85:7c:ac:1f:f5:
         2a:47:70:da:c3:da:94:48:23:30:9c:9a:a2:6a:41:c1:03:be:
         38:18:04:6d:8a:3c:8e:13:c8:6f:31:c1:4a:02:b1:44:e9:5b:
         3a:39:d5:d1:54:ea:a1:50:ca:d1:31:32:53:2f:30:c5:26:a0:
         54:d1:ee:3b:b0:d5:44:58:17:47:6a:a2:b1:11:2a:93:3a:c9:
         83:6b:11:52:4f:c7:3f:dc:db:41:87:a5:47:0d:00:80:ba:0c:
         ce:e4:70:cf:d4:95:a7:fe:4c:6c:9f:f3:a0:c6:8c:79:e7:25:
         12:4d:26:0a:56:e1:a7:c7:5d:d4:0f:b4:27:52:a0:3b:58:8b:
         d9:b0:04:8d:ac:d8:a7:5f:7f:01:e5:a5:d4:51:af:32:61:f6:
         d1:bd:fa:37:66:5a:55:8f:b1:d0:ec:7c:ad:9d:12:ad:3e:78:
         f3:62:9a:6d:47:16:ab:c7:df:5a:f5:02:2b:c6:9e:f4:3f:4c:
         e1:f4:79:39:dd:d4:f7:1a:60:7e:92:f7:c9:a3:6c:64:2a:39:
         6a:38:a3:ed:0b:9c:33:f7:21:5c:92:11:12:76:2b:95:a7:65:
         ec:15:79:d8:2e:08:1d:d2:93:1f:7e:43:ef:d9:b4:87:b7:2a:
         41:65:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:42:53 2024 by rpki-client on console-ams.rpki-client.org