Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
File:                     g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft (raw, json)
Hash identifier:          my+0/llrMVpknjDe1lrRjtVVT258cRjJmhZ391r4em8=
Subject key identifier:   A4:0D:7E:15:71:86:51:85:0C:1A:0B:27:33:8D:D1:B7:91:2E:01:F2
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Certificate issuer:       /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial:       018F9BE1FC8D05F89663B794E78339C26412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
Manifest number:          1183
Signing time:             Tue 21 May 2024 16:00:29 +0000
Manifest this update:     Tue 21 May 2024 16:00:29 +0000
Manifest next update:     Wed 22 May 2024 16:00:29 +0000
Files and hashes:         1: g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl (hash: EVx/2jiQHuLyeAQYfkuSAMsigeNxKYiyJVEPaEo/uTM=)
                          2: ryJGCtubQAfzHgJ4NfxS6xdoGag.roa (hash: LNvfL+DozLIQUbUhEQWwxFjOX1rMEyvG740v49nwy7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:e1:fc:8d:05:f8:96:63:b7:94:e7:83:39:c2:64:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
        Validity
            Not Before: May 21 16:00:29 2024 GMT
            Not After : May 22 16:00:29 2024 GMT
        Subject: CN=a40d7e15718651850c1a0b27338dd1b7912e01f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:d9:33:de:7f:dd:51:a7:b2:37:29:fe:27:
                    de:16:b3:fe:bb:9a:fc:b7:90:06:a0:1d:b1:53:0a:
                    9f:f9:85:60:89:5c:a5:53:01:71:d0:bd:19:fa:8f:
                    d4:3a:88:1b:f4:98:7b:49:3a:ee:9e:e4:22:46:6b:
                    f4:b1:7a:a8:97:bf:ab:f1:9a:ff:ec:8e:85:ba:34:
                    1e:33:9f:f2:42:68:99:90:b1:d8:70:9b:95:ed:77:
                    c6:38:a0:e5:52:4d:c5:60:77:b2:d8:18:dd:87:e3:
                    65:f9:55:28:94:57:46:69:43:b6:9f:f7:34:4b:86:
                    bc:ef:64:16:82:22:47:1c:38:13:56:65:90:b2:ba:
                    b0:1b:4a:e9:97:b2:45:e7:56:ed:de:98:0f:cf:c3:
                    99:dc:55:c1:de:88:8f:2d:24:00:4e:57:a3:c9:61:
                    d6:84:0a:55:99:c9:01:dc:c1:41:fd:45:3a:c9:8e:
                    99:af:5a:de:b9:b3:6e:24:6e:74:cd:16:de:ed:d1:
                    21:4d:5f:7b:87:35:20:b8:45:2f:56:ed:bd:eb:60:
                    30:92:ca:d7:1a:ef:db:ce:51:f6:2f:bd:11:95:b1:
                    b4:b2:f7:8a:07:0a:4a:58:f3:fb:97:73:5f:2b:53:
                    b8:c2:71:97:b6:c8:78:d3:55:f6:76:c2:d1:b8:9f:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0D:7E:15:71:86:51:85:0C:1A:0B:27:33:8D:D1:B7:91:2E:01:F2
            X509v3 Authority Key Identifier:
                keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:21:f4:83:1e:55:60:16:43:b7:b6:fd:70:b1:0c:b8:f6:e8:
         c1:13:ec:a4:bf:a2:8a:93:87:2a:b5:cd:49:59:ac:f1:60:b5:
         48:c3:c0:a3:98:c7:1c:98:43:35:8a:80:71:c7:5d:26:77:2f:
         fe:e2:d9:76:d2:f1:ba:f2:b4:bc:a1:6d:c6:6f:f6:80:b7:ab:
         76:10:37:d1:cf:1c:9d:ea:92:87:a0:04:c0:c4:c0:73:07:d3:
         95:14:e1:dd:c9:3c:15:fd:f1:33:ce:5e:27:48:52:22:5e:0c:
         6d:01:42:91:98:e2:7b:e1:17:48:62:99:e6:62:a7:f8:98:f2:
         9f:bb:42:ab:8a:67:02:b2:62:20:a2:aa:db:74:e6:c1:0e:86:
         e0:ad:eb:bb:a8:2e:66:bb:ed:61:8b:03:8e:a6:8e:22:9a:30:
         19:71:df:8f:60:65:5d:3e:54:d9:6a:d5:e1:8c:bb:1b:26:0f:
         47:cc:0d:86:05:85:8f:53:03:34:d3:5b:0c:36:01:4b:61:bf:
         dd:e3:e1:eb:c8:7b:74:1e:aa:3e:43:9a:b0:3e:08:58:dc:19:
         c7:ed:81:df:ee:f7:81:0a:36:03:44:cc:d9:ed:77:ea:dd:18:
         48:f9:ed:fc:75:ba:b0:b4:84:cd:d5:1c:b6:6c:93:df:01:cd:
         62:e8:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:01:38 2024 by rpki-client on console-ams.rpki-client.org