Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File:                     1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier:          9roQ9e4XDQjVeYwyPZXoKT4gTTSXywwb8sLRhDTNfs8=
Subject key identifier:   EF:C5:F4:25:32:C3:C4:20:36:4A:00:EA:9B:22:62:10:09:36:D8:0B
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer:       /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial:       018F87B6343EFC97664AAD94FF080225CD85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number:          0155
Signing time:             Fri 17 May 2024 18:00:15 +0000
Manifest this update:     Fri 17 May 2024 18:00:15 +0000
Manifest next update:     Sat 18 May 2024 18:00:15 +0000
Files and hashes:         1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: 1l5iTAFhdy5saexN4mH1ylcWe6pWV8dnKnPGpcjh2n4=)
                          2: BQv_IGPQJKhYXrsFgBoQ-CjtqVI.roa (hash: u5vOtjpYPE3IV7KgCuWSMK8fEs/UsUP9OuE8iAIwYOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:34:3e:fc:97:66:4a:ad:94:ff:08:02:25:cd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
        Validity
            Not Before: May 17 18:00:15 2024 GMT
            Not After : May 18 18:00:15 2024 GMT
        Subject: CN=efc5f42532c3c420364a00ea9b2262100936d80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:7f:90:85:b8:18:1b:e4:25:1f:ff:8c:8f:
                    d8:f9:e2:37:a1:db:48:cf:85:46:4f:40:46:9b:b2:
                    3b:c5:9e:67:80:57:8c:98:1f:b3:75:bb:b4:af:e5:
                    fd:30:af:65:94:ef:13:42:88:2d:ea:93:e4:c5:fb:
                    97:39:32:f2:04:fd:93:f7:c2:6a:ea:e6:56:fc:3f:
                    75:b4:b1:93:50:b7:fe:fc:76:ec:fc:73:ea:e6:aa:
                    f4:bc:76:f1:ac:13:24:c7:a2:13:66:6c:f6:3a:9e:
                    4d:5f:21:11:83:ab:1c:b5:6c:8a:37:25:90:eb:93:
                    55:06:2b:05:04:82:42:d1:66:a6:c1:bb:5f:93:b3:
                    86:db:9c:9b:a7:65:b0:c0:f4:69:5f:2c:67:06:3f:
                    41:f2:02:11:9e:b0:40:4d:b9:ea:8b:97:6f:ab:dd:
                    9b:ca:48:2f:5b:15:8b:fa:0b:a9:9d:5c:9d:ec:c7:
                    de:66:47:6b:36:35:5e:2f:c7:94:80:38:7f:a4:31:
                    bc:ce:07:fc:f9:b1:fd:e7:e5:a6:cd:75:cc:3d:cf:
                    8a:6e:b5:46:cd:8e:da:27:e2:8a:e0:9e:47:c0:d3:
                    d8:0f:83:3c:f7:6e:c3:ab:42:f0:28:25:66:c0:6d:
                    14:8c:85:5a:5e:32:c3:5d:18:91:2f:d2:d6:26:d6:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:F4:25:32:C3:C4:20:36:4A:00:EA:9B:22:62:10:09:36:D8:0B
            X509v3 Authority Key Identifier:
                keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:53:44:fb:e2:4e:b5:31:ee:42:c1:2d:55:7e:b5:01:08:
         fa:39:94:4b:e0:e4:73:45:66:a2:55:6f:cd:f8:21:23:51:25:
         c7:73:18:29:b6:37:db:ca:a5:6d:41:aa:9c:7d:66:16:c0:7e:
         4d:c4:fa:d8:64:75:fe:00:7a:b9:89:a5:6b:66:b2:2f:b3:fb:
         ba:96:31:28:fd:45:17:8b:2b:b9:da:83:d5:86:04:93:7d:c7:
         26:35:e4:0c:29:92:c5:76:77:ef:72:ff:df:a0:0c:1c:d2:95:
         f6:68:24:06:e1:7b:93:b9:ef:f7:6d:c8:63:d9:b4:d2:48:4e:
         df:cc:be:5b:58:a6:7b:4f:c7:54:ef:d5:4e:31:4c:b3:55:65:
         49:c1:af:ed:0b:64:77:8e:7d:83:c2:30:31:b4:ec:50:89:50:
         fe:60:de:c1:ab:76:a0:00:72:ed:c9:2f:0b:07:5f:43:55:b2:
         ec:56:fa:0c:fa:3f:7c:5a:30:67:9f:a6:f7:46:4b:0d:72:02:
         55:1d:51:4f:35:d7:5f:23:55:b7:58:f2:a2:a3:61:15:27:57:
         03:e1:06:1c:47:c9:16:b6:10:ca:50:56:19:4c:35:4a:cd:9a:
         89:7b:1b:74:64:06:85:6a:5a:ec:82:a9:4f:2f:44:06:07:49:
         b4:b6:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:15:55 2024 by rpki-client on console-fra.rpki-client.org