Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File:                     1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier:          4g2bRGsGNi3IFJHn0nyIcwFywcGraNL68umPCY6EKLI=
Subject key identifier:   0E:E7:A1:1A:B7:A7:7C:C1:18:28:37:69:46:7D:C3:BC:EC:7E:07:CA
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer:       /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial:       018F4AC6992ACE55ADC1B5C412859A77CCDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 22:01:20 +0000
Manifest this update:     Sun 05 May 2024 22:01:20 +0000
Manifest next update:     Mon 06 May 2024 22:01:20 +0000
Files and hashes:         1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: PQsHG6Nj7M/ZiW4x54/XI810Fys+QiSeKVISTrLGTDg=)
                          2: Xa5ydu3u3Qyctd1Y2WHFk183DRY.roa (hash: FJYVV1QSFRHUEcK52SnZMsTJSL02MEaCOJBQas3uLyE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:99:2a:ce:55:ad:c1:b5:c4:12:85:9a:77:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
        Validity
            Not Before: May  5 22:01:20 2024 GMT
            Not After : May  6 22:01:20 2024 GMT
        Subject: CN=0ee7a11ab7a77cc118283769467dc3bcec7e07ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:af:f2:ac:87:04:fa:2f:b1:4d:6b:26:8a:
                    b7:92:e7:bc:c2:ae:ce:6e:84:c9:07:95:71:ee:bd:
                    3b:c3:5b:e8:60:83:08:bc:f8:d6:08:a4:47:8f:c1:
                    cf:cc:c9:2b:1c:2b:18:60:9b:9c:e5:8d:da:e0:b2:
                    b5:37:6e:72:44:60:0a:30:3b:78:15:02:e7:2f:e7:
                    b5:8c:a8:f6:05:64:c2:d5:6c:23:fc:f1:23:08:b4:
                    91:2c:4c:50:a6:ed:85:c6:41:85:d4:ec:13:0b:6f:
                    bb:41:c7:c3:6b:60:26:d1:1b:20:0a:6d:52:71:5a:
                    23:86:e7:d8:a6:4c:fd:b7:73:e0:83:d1:8f:84:67:
                    31:2c:78:33:dd:a6:a5:ff:53:28:29:22:48:dc:92:
                    44:55:e9:4c:51:fb:90:ac:90:5e:2c:82:6b:88:cd:
                    da:f2:ff:72:86:f9:39:b4:98:22:32:14:e8:58:68:
                    01:09:40:e3:3b:12:40:4b:22:01:ea:44:ed:e8:6b:
                    40:16:2a:d5:7c:32:57:b6:69:79:51:65:74:7f:98:
                    e1:a3:44:2c:4e:86:2a:51:9d:26:3d:0b:31:35:62:
                    38:92:96:ac:d5:c1:ae:80:f5:67:97:6d:7d:6f:ce:
                    fc:ba:b3:8c:c2:16:61:60:87:49:c1:42:b6:2e:0f:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E7:A1:1A:B7:A7:7C:C1:18:28:37:69:46:7D:C3:BC:EC:7E:07:CA
            X509v3 Authority Key Identifier:
                keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:02:13:ea:20:c2:e9:5b:8d:6c:a8:9c:c6:bf:54:a8:f6:2c:
         36:c7:e8:e9:01:c1:c0:39:0c:38:00:f2:ed:18:01:be:f7:c8:
         8c:4b:1f:ed:ed:26:cf:ae:af:09:e7:d7:9d:8f:e3:de:a5:4c:
         20:64:46:0a:bb:d8:d4:10:13:8a:22:0f:2c:c5:0a:7d:b3:38:
         d2:1f:5e:03:f3:67:9a:90:65:5a:43:03:ac:37:4b:9c:af:dd:
         9e:08:05:80:dd:4c:93:12:44:7d:f9:ec:ad:76:9a:80:16:63:
         d7:9e:1a:7d:8b:49:b2:7b:49:39:10:ee:f0:87:f1:f5:75:e4:
         1d:8c:ea:c0:59:4a:7f:ae:d5:ae:95:ff:07:d2:b5:a9:db:87:
         04:87:4e:84:9e:f0:35:2d:6a:d6:95:02:73:d2:66:da:3b:61:
         38:a2:ce:74:fc:73:2f:1b:1d:e9:8e:d6:d8:da:d4:3a:d1:da:
         85:87:f8:77:6f:b1:33:7c:24:59:e9:05:17:e7:9b:29:7c:33:
         e3:3e:fa:65:d9:2f:29:f6:0b:76:3c:d8:08:6e:ad:77:04:8c:
         89:1b:b8:d1:67:91:d7:ad:31:0d:63:54:fb:76:9f:da:27:d1:
         9a:78:00:51:0a:d9:cb:90:20:5c:a6:f1:aa:3c:95:64:6b:1b:
         5d:65:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:44:49 2024 by rpki-client on console-ams.rpki-client.org