Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File:                     FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier:          P01G+dH9uXtMG9bmpNlcj48RAlaGQp+JfZ9JCslZjGo=
Subject key identifier:   B2:7A:69:61:D5:42:8F:75:B7:D0:55:16:91:D6:7F:43:1F:F3:C0:2A
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer:       /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial:       018F373FF0F54050FF4D5064C514D7DAAAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number:          1153
Signing time:             Thu 02 May 2024 03:01:28 +0000
Manifest this update:     Thu 02 May 2024 03:01:28 +0000
Manifest next update:     Fri 03 May 2024 03:01:28 +0000
Files and hashes:         1: FYAwcsICtH_F1mmvuzYTwVdnao0.roa (hash: BSFaaft4YEJ/75pArKH+UKX8uoafnE+oE7ilDdlEB9Q=)
                          2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: qWu8+/EDWkemAMYd8NBztiDDrY2kkzHXLaVdIixa9Ls=)
                          3: JRd6Ua_p67SL01cf9t9AIv_Aq_w.roa (hash: z2kkBD+LCEoa9UOSGi2jDHZvlZfJ421S5Wz56UpjOAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:3f:f0:f5:40:50:ff:4d:50:64:c5:14:d7:da:aa:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
        Validity
            Not Before: May  2 03:01:28 2024 GMT
            Not After : May  3 03:01:28 2024 GMT
        Subject: CN=b27a6961d5428f75b7d0551691d67f431ff3c02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:d0:25:a5:76:c7:ff:06:e0:87:51:d4:e4:
                    63:5f:a8:10:27:9a:5c:b8:63:47:1b:33:fa:76:38:
                    f8:a7:66:d7:9c:5d:e8:d7:88:f6:9c:eb:1e:d5:5a:
                    f2:e2:d7:53:96:4c:d3:18:f0:7f:27:55:bd:63:80:
                    70:ce:94:5f:ef:f1:d7:e5:36:78:ea:dc:0b:26:6c:
                    d8:c7:a1:e5:ae:d0:dc:c3:db:f9:29:73:0f:55:5c:
                    46:bb:60:e2:c9:bd:08:e1:6e:d8:1d:cf:bf:dc:89:
                    28:ec:c3:7b:97:80:fd:fd:14:ec:1d:95:89:04:d2:
                    0e:36:c3:b7:82:54:20:45:31:96:07:01:fd:d1:19:
                    ed:0c:99:c4:f8:e6:40:95:7d:65:00:8a:6c:60:75:
                    f9:1e:eb:0a:d7:7f:40:b1:db:fe:89:eb:e5:27:93:
                    22:30:b9:8c:86:d9:7d:c2:e8:b1:0e:cb:6e:c5:31:
                    14:48:64:a0:a6:25:c2:87:83:3f:02:7e:84:37:46:
                    5a:0a:62:83:23:5d:51:6f:70:b3:fe:64:06:e9:4f:
                    88:d5:13:85:2f:06:2b:34:99:29:a7:38:aa:0a:db:
                    1a:06:39:14:8c:ce:e0:9b:69:1a:af:60:ce:36:26:
                    6f:e8:5e:16:c7:1a:49:cc:1f:85:47:dd:37:f0:8e:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7A:69:61:D5:42:8F:75:B7:D0:55:16:91:D6:7F:43:1F:F3:C0:2A
            X509v3 Authority Key Identifier:
                keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d3:a2:8f:97:ba:c2:90:21:f7:e4:21:9e:9c:af:dd:bd:b2:
         d4:57:da:e0:d1:25:51:00:b4:a4:10:3f:91:93:50:50:a1:87:
         e6:f9:15:14:63:ed:32:45:dd:00:ed:e3:30:77:0d:f8:92:e2:
         43:ba:91:d1:2f:e4:5c:83:be:01:32:14:c4:7d:e8:c9:2a:be:
         01:74:ab:c9:21:34:45:30:fb:79:70:d6:69:b9:19:39:ff:7e:
         f3:70:0e:31:55:41:5e:70:81:2d:d6:c8:38:38:35:40:3e:9e:
         fc:6a:5c:58:da:3c:59:9d:56:4c:49:cf:2d:df:8b:e5:32:8f:
         b3:b7:1c:35:2e:b1:af:c1:ff:fc:15:51:a0:1d:f0:83:9e:47:
         9d:42:39:60:38:ad:69:6f:5b:d5:0d:bf:1e:22:1c:d9:a8:bb:
         08:97:a4:1a:75:2a:58:d7:9a:86:1d:eb:15:8e:7f:67:d4:66:
         52:20:4e:53:55:09:e5:8b:11:b3:d1:81:9e:03:e6:81:cd:3e:
         95:26:ad:13:be:b0:f9:fd:e4:56:fd:84:73:6d:8b:37:0b:21:
         85:e9:e9:29:87:7b:4d:d2:7a:dd:c4:1f:b2:54:3b:96:13:2c:
         4b:67:f2:ea:bf:05:e6:ae:5f:30:0c:66:46:30:39:36:17:1f:
         b9:fb:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:39:44 2024 by rpki-client on console-fra.rpki-client.org