Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File:                     1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier:          z9LjERrOyTDN6n+UNh8ZOxaOCuBZdmiYsxtB+MqbxZQ=
Subject key identifier:   D2:C3:7E:D9:78:E4:C9:EA:64:69:B6:08:A7:98:01:72:94:7C:35:0B
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer:       /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial:       018F460DDACC595BD7842439B8E8A399D42F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number:          1162
Signing time:             Sun 05 May 2024 00:01:04 +0000
Manifest this update:     Sun 05 May 2024 00:01:04 +0000
Manifest next update:     Mon 06 May 2024 00:01:04 +0000
Files and hashes:         1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: ba5UK+bWwfjFaesPbrwki6y8hw6ylFZ1pHf8knMbf64=)
                          2: Bi6Mk3EJ3SQDPDq_rlNRbR6FTMo.roa (hash: h2pDgw6llcHz8Y1X0TiJe/20wzzOL/C/GiN7XpOTzlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0d:da:cc:59:5b:d7:84:24:39:b8:e8:a3:99:d4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
        Validity
            Not Before: May  5 00:01:04 2024 GMT
            Not After : May  6 00:01:04 2024 GMT
        Subject: CN=d2c37ed978e4c9ea6469b608a7980172947c350b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:da:85:c7:d2:9a:96:c0:24:9c:8b:dc:b7:
                    25:5b:cd:6c:0e:d6:01:bc:30:4c:89:97:21:d1:03:
                    73:e6:91:78:86:00:94:09:ea:29:cf:f9:ee:18:92:
                    28:40:c7:44:3f:22:c1:77:73:0d:cc:88:4b:d1:a5:
                    17:44:79:45:2d:b1:c2:11:ad:29:08:3e:ae:1f:0d:
                    12:92:ad:63:6b:ab:08:4a:05:37:71:52:97:c7:8b:
                    18:e7:78:9e:21:e3:c7:f3:00:01:f3:87:87:95:3f:
                    22:8a:cf:97:0f:a0:48:c6:0e:dc:28:de:1a:04:e2:
                    88:57:f6:67:4f:4f:d6:68:6f:e4:c1:3e:e5:f0:7a:
                    e6:b6:4a:aa:11:a7:b4:b3:8b:9f:10:61:76:bf:d7:
                    ce:57:23:62:be:d1:6a:d7:75:d9:d7:56:e0:b5:d7:
                    6a:eb:79:d0:20:98:6f:41:4c:72:73:9a:23:eb:98:
                    80:22:3c:61:51:84:56:7c:d3:9f:9e:0b:e5:63:48:
                    d4:dc:84:6f:54:6a:7e:87:7d:df:49:8f:87:50:2c:
                    dd:92:52:80:62:e2:b2:fa:33:f2:ce:a4:fe:d3:19:
                    82:cd:d1:15:c6:2e:9e:89:0d:c9:53:c7:62:ef:72:
                    15:d7:3b:e8:0c:e0:39:e6:ce:fe:b9:d4:7b:f6:73:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C3:7E:D9:78:E4:C9:EA:64:69:B6:08:A7:98:01:72:94:7C:35:0B
            X509v3 Authority Key Identifier:
                keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:32:66:92:33:d3:49:f3:50:76:b4:25:9a:3b:b3:8e:93:
         79:e3:8c:d8:d4:9c:a2:38:d5:ed:6b:72:f7:d9:39:f8:33:bc:
         24:35:41:cf:a8:8b:bc:79:c5:01:ae:8b:89:89:cc:98:43:b9:
         02:63:c2:87:77:72:7a:48:f7:e6:4a:f0:84:ee:66:00:c4:dc:
         a7:4f:8c:97:20:d6:31:c4:7a:07:5b:73:dd:ee:d9:c5:c2:0b:
         18:0d:6c:45:5b:ac:a6:5f:b6:fb:34:79:e3:66:82:ee:99:1d:
         ce:7f:28:a0:0d:02:aa:63:5f:72:50:4f:2b:24:c1:9c:4d:f4:
         f0:e7:82:ee:2a:84:5b:67:ce:8e:e0:db:cb:42:ec:5e:9f:b4:
         58:80:1d:3d:1e:5f:c0:b2:9f:8d:fb:de:39:53:74:b1:be:6c:
         dc:9f:57:7f:2a:48:44:02:cc:2e:2e:e3:18:30:88:ed:bc:e5:
         0d:3a:0a:ed:d4:0c:d1:e2:26:3c:88:c2:9c:64:c4:fb:2d:0d:
         29:fe:74:ec:51:26:5d:10:d5:a5:ff:09:20:02:6d:f7:11:11:
         77:66:60:9d:c3:69:5d:7f:76:51:4f:ac:e1:62:64:14:ff:b7:
         c0:65:a7:16:f7:59:8c:f8:38:ec:de:3e:cc:62:65:86:dd:53:
         a6:52:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:50:07 2024 by rpki-client on console-fra.rpki-client.org