Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File:                     I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier:          nxAwbOQeyaxIezSZokZrEn9yq8FZ3ekC9Sro98L2DIU=
Subject key identifier:   46:AE:40:82:B6:D1:2B:5F:C5:96:AC:CE:62:A4:3A:FE:7E:79:12:A1
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer:       /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial:       018F4B6D3C30BD571C0206C8DC254C0AAC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 01:03:20 +0000
Manifest this update:     Mon 06 May 2024 01:03:20 +0000
Manifest next update:     Tue 07 May 2024 01:03:20 +0000
Files and hashes:         1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: Qi56qjduTnQ41Cv3KTg3BQZOoXTFT5biLxV/xylC6S8=)
                          2: iZiyV0ORJ-KY6APD5s66sF-gxYU.roa (hash: WNmagUtZ/t/Dk8tHKJWccrMbWHQCN8dns0Xs9HXTUrw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:3c:30:bd:57:1c:02:06:c8:dc:25:4c:0a:ac:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
        Validity
            Not Before: May  6 01:03:20 2024 GMT
            Not After : May  7 01:03:20 2024 GMT
        Subject: CN=46ae4082b6d12b5fc596acce62a43afe7e7912a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:c3:5c:28:fa:d8:7f:4d:25:f5:f3:23:75:
                    37:3f:1c:84:0b:55:1d:34:28:4d:02:7c:37:21:ce:
                    59:de:ea:cb:55:5b:a0:46:9b:38:74:cc:d2:e7:f9:
                    49:d5:13:33:a6:9b:0c:ef:a7:07:bc:de:10:d7:ae:
                    8e:5b:90:73:3a:8c:28:75:03:2c:af:82:44:5b:0a:
                    59:12:2a:90:f6:79:36:59:36:dc:09:d3:67:f4:ac:
                    a0:f1:dc:c7:cf:5c:12:14:2e:aa:29:62:50:b1:f1:
                    81:d5:80:68:81:d2:fc:e4:c2:ec:e1:f9:57:1a:d2:
                    f6:46:0a:3e:f7:11:3c:96:ac:7c:86:6b:e4:24:e8:
                    a5:89:61:ec:36:84:66:b8:4a:38:78:98:66:a2:d9:
                    90:99:2c:d3:b2:8e:d0:d9:36:6b:59:e0:80:69:14:
                    97:c8:9d:1b:e3:61:4c:69:d3:4d:93:d8:a5:ce:dd:
                    d8:79:7b:79:be:5d:c5:73:43:31:24:63:d4:ad:90:
                    34:a2:03:d8:fb:f0:90:12:0e:45:81:80:0e:a6:a6:
                    29:22:ae:7f:f6:7e:01:6c:5b:2e:ea:8f:14:61:7a:
                    89:04:2a:50:57:e0:6c:71:e7:44:a2:3b:74:20:61:
                    49:ce:c9:f4:d4:ca:ea:5c:2d:fd:39:bf:77:17:5e:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AE:40:82:B6:D1:2B:5F:C5:96:AC:CE:62:A4:3A:FE:7E:79:12:A1
            X509v3 Authority Key Identifier:
                keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:37:7f:0f:88:75:b6:48:22:cc:ae:fa:0a:d4:62:40:2c:e8:
         93:07:74:c5:81:0e:91:ad:37:64:c8:fd:58:0e:80:2f:a1:a0:
         92:8f:2c:01:ca:2c:ca:52:61:39:1f:19:57:2e:6e:c5:d9:39:
         b0:4e:9f:3b:c7:22:9f:b5:91:5b:cf:1c:e0:15:51:5e:71:5d:
         3a:58:c1:66:fb:82:10:b9:00:12:10:e2:f5:3c:ee:d4:63:65:
         0f:87:70:49:cb:3a:63:c5:12:36:b5:a9:1f:1d:5a:a6:d1:22:
         7a:aa:b9:17:93:15:41:ad:8f:91:49:78:d5:d2:46:22:d6:61:
         0e:67:ac:dd:57:46:f5:02:69:93:32:af:9f:eb:00:9f:38:6f:
         c1:d8:2e:3a:0f:12:7d:a0:10:b0:20:8c:18:1c:8b:ca:60:4b:
         58:96:7c:36:0e:39:8f:42:1e:8e:f2:f5:f3:8b:be:46:68:3d:
         6b:6d:9f:23:fd:b4:7e:af:f8:3a:fb:b5:cb:c2:79:ba:71:99:
         e0:2c:34:47:4e:4d:35:80:b2:bf:cc:a8:38:df:87:04:60:dd:
         c2:87:17:d9:7c:d0:66:99:a6:df:47:d2:4f:5c:3a:5d:df:70:
         81:92:14:05:46:a5:8d:2b:65:7a:ce:3e:1e:98:22:dc:dd:a1:
         56:83:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:15:45 2024 by rpki-client on console-fra.rpki-client.org