Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File:                     ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier:          jVTS9mvYDMLSCKRHxHDN6UgVoz2aL6VGvk28jBbxG7M=
Subject key identifier:   F3:F1:72:93:F9:63:9A:A0:BC:99:C5:35:CB:7F:AD:97:D4:6F:F2:BB
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer:       /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial:       018F441F91A2B16131F8AB21997B7FFA3CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number:          1156
Signing time:             Sat 04 May 2024 15:01:10 +0000
Manifest this update:     Sat 04 May 2024 15:01:10 +0000
Manifest next update:     Sun 05 May 2024 15:01:10 +0000
Files and hashes:         1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: nROrIaNlpsYPZ6yCXJWOD3q3S/N6Qur4sE0XjTFfprg=)
                          2: czLRANj2ss-HfCR3FJfBvfk_IRM.roa (hash: 3GQqMWe0gHVJrT35KHOhK4B1iVY0RHIID02lQkpvAr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:91:a2:b1:61:31:f8:ab:21:99:7b:7f:fa:3c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
        Validity
            Not Before: May  4 15:01:10 2024 GMT
            Not After : May  5 15:01:10 2024 GMT
        Subject: CN=f3f17293f9639aa0bc99c535cb7fad97d46ff2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8c:70:20:85:46:ee:6b:ae:d0:ce:ee:0b:47:
                    ad:89:4c:7b:7d:c1:d0:8a:86:cf:d1:79:90:6a:24:
                    7d:90:3e:d1:fd:19:c7:62:3e:83:85:18:de:fb:0d:
                    2f:52:2b:95:c5:fb:c2:b5:a7:1c:d0:1e:14:c7:0d:
                    c8:12:71:0e:68:50:44:d9:22:4a:b4:b3:da:e5:f7:
                    b6:dc:73:88:62:38:ae:f3:ed:02:e1:cc:ed:da:5e:
                    e2:e5:e6:a2:dc:9b:8c:fb:c5:30:cf:25:83:eb:af:
                    ce:a8:8c:af:fc:36:19:58:67:92:75:1e:6a:0c:05:
                    05:b4:21:79:91:61:9b:28:96:a5:68:a4:d2:53:59:
                    d8:85:4c:0f:42:98:7a:fe:29:a9:7f:48:67:fb:70:
                    4c:e3:9c:5a:a2:24:44:6a:98:06:39:0d:83:37:4b:
                    ea:50:60:1c:ad:34:6e:c4:f5:7b:88:2f:0e:f4:36:
                    50:6b:f8:4f:34:17:c3:59:be:76:c0:92:73:64:b7:
                    41:b6:81:1a:fa:05:11:81:15:f0:e1:e3:1b:98:f5:
                    e6:c2:25:bf:a0:23:1b:a6:3e:cb:e3:30:87:8e:6a:
                    6e:62:b5:41:1d:38:e3:96:f3:3d:80:d1:fe:13:35:
                    76:54:58:28:9c:db:c7:40:1a:e0:de:b5:a1:35:a3:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:72:93:F9:63:9A:A0:BC:99:C5:35:CB:7F:AD:97:D4:6F:F2:BB
            X509v3 Authority Key Identifier:
                keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:48:32:13:6b:32:d1:48:d9:d7:bf:8f:73:19:e2:51:1e:84:
         dd:ea:58:04:c2:ba:72:ef:f9:b3:cf:a5:68:5b:65:c5:2f:22:
         3f:f4:b8:8e:00:f6:7d:24:28:0d:88:72:66:a9:cf:2a:ac:72:
         86:d0:7c:e0:03:4f:1c:c9:5b:25:a8:06:72:12:79:14:ff:3c:
         ab:d7:e5:75:a1:89:97:56:fa:a2:6f:d3:cb:62:60:19:0f:0e:
         c2:73:c7:b1:b2:24:ca:b0:32:c4:b9:df:ac:b7:ad:e4:db:19:
         d2:f0:26:d4:6c:c6:16:a8:5f:c2:ec:6f:5a:27:82:7b:a2:37:
         a1:9f:40:39:4d:fb:aa:d8:7e:5f:34:55:41:d5:15:87:06:cd:
         df:e8:76:29:5e:c5:e9:e6:5c:4b:4e:ba:06:39:46:a9:68:07:
         0d:fa:e6:81:dc:2b:e8:bc:c1:45:e4:35:f6:3e:31:8c:2e:17:
         06:a8:75:a3:2f:c2:7d:8e:a0:c5:02:89:0e:51:dd:ab:97:6e:
         31:13:bb:e1:22:27:3e:47:e7:ea:74:19:69:53:ad:da:0c:83:
         cc:34:50:c0:77:0f:4f:8e:19:30:e8:e6:eb:4e:7f:2d:ad:e2:
         ee:e4:b6:c4:80:9d:8c:80:06:83:fa:67:f6:bc:8f:56:ad:fa:
         e8:e0:a5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:17:29 2024 by rpki-client on console-fra.rpki-client.org