Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File:                     G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier:          AcVliLU09D6PafGBSfIqiNZFbQiP1pIBCTZ1hxu5Gn4=
Subject key identifier:   D2:D1:D8:DF:29:FE:15:2E:3D:EE:5A:B7:41:66:E4:91:15:D3:B4:8E
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer:       /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial:       018F497F465430C8561D2ABFB16F31EF82E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 16:03:48 +0000
Manifest this update:     Sun 05 May 2024 16:03:48 +0000
Manifest next update:     Mon 06 May 2024 16:03:48 +0000
Files and hashes:         1: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: BRNYNQcGFb1WaNFKzJ9kFhMJ7K6Bsix8gGZOqTBxH4Y=)
                          2: y02pMvabXiUHXfszzuw4tsQ9f3Y.roa (hash: TnjAyIua6I2FKkaCX+4CimLwOool++Dsd02yEVGqYjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:46:54:30:c8:56:1d:2a:bf:b1:6f:31:ef:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
        Validity
            Not Before: May  5 16:03:48 2024 GMT
            Not After : May  6 16:03:48 2024 GMT
        Subject: CN=d2d1d8df29fe152e3dee5ab74166e49115d3b48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:55:2d:57:cf:a1:b9:f1:b3:1e:16:7b:11:
                    01:0d:e7:f0:ce:64:4b:cd:a1:01:94:1b:a1:d4:e4:
                    52:c3:d3:65:95:aa:2a:8f:78:a2:e3:df:fb:9c:3e:
                    8d:9b:38:c9:d3:ff:fc:16:65:72:b6:3e:0b:ad:3b:
                    62:1f:44:e4:ee:7e:0f:e9:72:20:3a:ee:94:d8:97:
                    7c:c6:63:5b:ee:9f:1f:08:d5:7d:65:51:a7:97:52:
                    da:3a:51:9c:00:ab:b2:b6:3a:24:5a:f1:cc:f9:b0:
                    b2:27:35:dd:11:e2:1b:9d:51:4a:88:9b:3f:59:6b:
                    e2:d1:21:de:68:00:bb:23:32:9f:2c:59:74:db:b8:
                    b8:2e:ae:70:8d:6a:7a:74:26:75:b7:2d:08:4c:87:
                    e6:ae:f3:c5:76:90:4c:87:b4:5d:c9:d1:48:79:2e:
                    dc:cd:0c:47:15:dd:e8:d0:67:f5:23:2c:53:2e:9c:
                    cb:8d:77:3c:a8:ce:2f:98:d8:36:b1:81:39:25:33:
                    24:59:21:97:1d:a6:cc:d0:d8:29:3c:74:5a:49:24:
                    5c:c6:2b:7f:a3:cc:bd:d4:7a:5a:7a:f3:f6:8d:f5:
                    51:5c:af:85:d3:1f:ee:6a:65:f6:ff:c3:d8:c3:93:
                    0e:ce:e4:46:99:0e:da:85:2e:c9:75:7f:72:b3:b9:
                    f3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D1:D8:DF:29:FE:15:2E:3D:EE:5A:B7:41:66:E4:91:15:D3:B4:8E
            X509v3 Authority Key Identifier:
                keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e4:89:35:71:01:ce:d5:fa:7f:d6:da:1e:a0:ff:78:4a:7d:
         87:b6:b9:8b:43:04:fd:cb:dd:5a:6e:28:cb:7a:e4:9e:c9:57:
         f6:11:c2:70:dc:ab:5b:b6:d4:1d:0f:95:5e:26:9b:8a:fb:e8:
         38:8b:f4:6d:61:ca:cc:e3:aa:89:6a:02:0e:8d:4e:dd:d5:72:
         74:ab:bb:45:72:dc:7e:e6:af:e6:f5:64:5d:4d:e4:47:6b:ce:
         22:96:c3:69:68:a6:5c:3d:96:c9:e5:58:d3:c7:a6:8a:2f:8d:
         37:e8:db:2c:4a:ad:84:18:1b:ab:19:76:84:a7:ca:e1:e4:11:
         42:6d:38:45:47:3a:ed:df:40:d8:ee:20:bb:c4:15:05:f3:aa:
         f0:fd:76:b0:48:3c:0f:d1:85:fd:2a:1e:65:05:50:dd:92:aa:
         c0:00:4a:2f:6a:d5:e2:34:b0:8f:75:c6:93:c4:0a:74:8d:71:
         73:cc:cc:9c:af:de:5c:d3:35:0a:91:c5:63:f0:0c:b1:da:e9:
         ea:c8:17:0d:cc:32:46:57:47:65:c2:76:5b:a7:a4:bc:d4:32:
         14:a6:65:c0:f1:a1:12:76:dd:79:8f:46:51:86:fd:79:06:be:
         11:75:38:be:b4:fa:ae:c5:24:49:45:50:f8:71:7a:53:71:9c:
         7c:38:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:57:15 2024 by rpki-client on console-ams.rpki-client.org