Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File:                     1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier:          4izyAVk8IuEpqefDkthBdk/vo553qe18AhI7222CurQ=
Subject key identifier:   D5:4B:23:34:DD:94:3A:71:63:89:2A:86:89:0F:B2:79:FE:01:DA:3F
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer:       /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial:       018F204963D2B99C952BD23486D1ED172190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number:          1141
Signing time:             Sat 27 Apr 2024 16:00:31 +0000
Manifest this update:     Sat 27 Apr 2024 16:00:31 +0000
Manifest next update:     Sun 28 Apr 2024 16:00:31 +0000
Files and hashes:         1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: 5EJa6/Y625UudT+nhtPc3cJ77YmsBbKLCNTXwrd4Qlk=)
                          2: RPHABjietdDN8oK_I9PbsQ9y97U.roa (hash: jtfwP0TrM39/iwRgAy73kzHXidvLRjBgTD87lL/ouc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:49:63:d2:b9:9c:95:2b:d2:34:86:d1:ed:17:21:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
        Validity
            Not Before: Apr 27 16:00:31 2024 GMT
            Not After : Apr 28 16:00:31 2024 GMT
        Subject: CN=d54b2334dd943a7163892a86890fb279fe01da3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:fc:4b:32:e8:3c:0e:a7:6d:a7:c1:62:58:
                    d2:9b:9b:73:2d:0c:61:ba:27:2d:70:1a:bf:ec:d7:
                    8d:d9:00:4b:e4:85:e2:db:fd:e0:9e:fc:68:1a:50:
                    56:33:90:28:1d:b9:b3:5b:30:87:8c:52:5e:b2:14:
                    a7:82:99:91:ca:a6:eb:0b:19:40:cd:3a:3c:bb:31:
                    5e:20:a6:a6:e7:47:85:96:e0:4e:06:57:84:57:39:
                    23:d5:2d:df:d4:32:de:47:7d:5a:a2:ba:da:e8:96:
                    df:bb:dd:58:6a:c2:55:4f:8a:e9:2c:05:fb:e4:61:
                    a4:11:95:60:35:c5:66:f4:7c:97:b4:5d:a9:1f:33:
                    e7:35:71:a9:33:9c:9b:8d:37:67:ab:f1:e9:8b:5a:
                    06:1e:bc:a6:ff:d1:97:dc:1e:f7:d6:5c:7c:37:73:
                    c2:14:49:2f:30:e7:b9:26:fa:cf:51:8a:6b:2d:24:
                    26:53:bc:b1:be:b5:cb:58:7b:4a:3a:95:b3:cd:13:
                    81:96:17:8c:bb:2a:42:e9:71:4c:4a:9a:d6:3d:6c:
                    8e:b7:0f:7c:de:b6:c0:82:e0:fd:78:18:18:2d:a3:
                    2a:75:10:47:46:21:c6:6a:66:f5:eb:53:39:71:52:
                    02:65:09:dd:73:99:f6:ad:bb:f3:d2:35:b0:fd:68:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4B:23:34:DD:94:3A:71:63:89:2A:86:89:0F:B2:79:FE:01:DA:3F
            X509v3 Authority Key Identifier:
                keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:1f:5a:18:95:09:10:6e:62:f4:64:a2:5e:82:f6:bb:b7:
         2d:42:f6:90:9c:6b:f9:1e:a2:89:ee:98:d0:6a:d8:8f:54:2b:
         b1:b2:22:43:d6:6b:af:45:c3:c5:f1:5e:3c:49:f4:25:9e:ad:
         a3:78:aa:98:80:3c:38:07:2f:c0:1e:62:04:23:bb:96:c7:4c:
         6e:0c:e0:0c:ef:31:22:1e:e7:eb:69:60:4a:b0:54:29:40:1c:
         e3:6b:9e:28:99:dc:5c:e5:02:fa:d6:3b:c2:d4:1a:53:0c:c0:
         1b:d9:aa:39:7a:ee:c6:cc:b2:69:65:6b:6e:98:91:18:17:69:
         a4:6d:06:69:b3:c2:11:23:a5:2d:0e:5a:5c:51:4e:96:1f:a6:
         5c:94:99:c3:84:02:ad:3e:af:f0:86:89:53:f6:9a:b4:76:ab:
         6e:b2:56:e4:ea:e8:81:7f:57:2c:64:a3:2e:d7:3e:a3:8d:18:
         07:1f:60:31:8a:ff:02:ac:f3:87:fa:89:ce:72:1f:ff:d1:3f:
         8f:09:02:c9:a6:41:f6:4f:42:2e:fe:40:b9:ae:3e:b3:ce:46:
         10:fa:c0:61:35:96:0b:fe:92:64:b2:05:1c:6d:6f:32:47:aa:
         95:03:6d:ec:be:7e:4e:a8:44:9b:7b:4c:05:a6:88:20:6e:21:
         80:b1:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:47:02 2024 by rpki-client on console-ams.rpki-client.org