Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File:                     1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier:          DlRGNk6++vABlocZ60To44bwrIDXfDzXM53I4D16LSI=
Subject key identifier:   F4:08:0E:D1:B5:BB:37:6A:16:A6:40:F4:F0:96:C4:BC:67:50:CC:B6
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer:       /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial:       018F362FA0C32F2CE453A92360876BE35FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number:          114D
Signing time:             Wed 01 May 2024 22:04:01 +0000
Manifest this update:     Wed 01 May 2024 22:04:01 +0000
Manifest next update:     Thu 02 May 2024 22:04:01 +0000
Files and hashes:         1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: fJsNbJTUiwGEuOndVJ7zkIt+0eraWT7ULuM61y8iNx4=)
                          2: B_i3KyTIbQJzQB2bw8vw1GRDXLA.roa (hash: 1RTITM13iOT/YFDBRHU9+aCwpCdKIaaDOo3GimHOyZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2f:a0:c3:2f:2c:e4:53:a9:23:60:87:6b:e3:5f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
        Validity
            Not Before: May  1 22:04:01 2024 GMT
            Not After : May  2 22:04:01 2024 GMT
        Subject: CN=f4080ed1b5bb376a16a640f4f096c4bc6750ccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:50:0b:de:1a:80:02:c9:c0:88:4e:15:84:
                    62:3e:ea:6b:98:ac:00:5d:1a:d3:67:de:bd:a1:c8:
                    56:20:79:31:e2:a3:39:9c:4a:b9:fa:3e:5a:35:d4:
                    3d:76:9d:22:6f:0c:7a:24:53:80:d8:7c:9b:f2:2a:
                    11:aa:b8:ed:4e:53:b9:63:7c:96:e5:12:c4:35:b9:
                    6a:e9:0a:72:f6:6b:a0:71:41:ab:99:cc:1a:27:44:
                    e6:a1:28:bb:42:c1:a0:a7:26:b1:9a:bb:19:6d:31:
                    1e:22:a6:8b:bc:f2:7c:62:31:16:a1:09:3d:7f:d8:
                    26:6b:9c:15:8a:f7:92:22:94:85:3c:91:3c:a7:cc:
                    d8:75:3e:fd:06:ac:ae:a1:55:7f:b6:ce:ee:0d:c1:
                    2e:34:48:a8:9b:ad:75:04:ae:a3:c2:ea:ed:1d:53:
                    b6:de:23:f7:8d:45:1e:86:67:70:95:7e:fe:f0:34:
                    9e:a5:6d:5f:e3:4c:5a:97:1a:e2:67:e3:d0:a9:99:
                    9c:4d:e9:1d:47:4e:2f:10:62:6b:ad:ed:c3:59:80:
                    10:66:20:11:36:1f:ac:bf:d3:bc:01:db:e6:d8:28:
                    d6:e7:0d:1f:27:df:08:a4:ff:49:8f:e9:ca:bb:99:
                    99:8e:7c:aa:08:44:a2:a5:ee:b5:5c:cc:91:0b:6d:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:08:0E:D1:B5:BB:37:6A:16:A6:40:F4:F0:96:C4:BC:67:50:CC:B6
            X509v3 Authority Key Identifier:
                keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fa:36:07:13:bd:36:cf:01:e3:30:38:6f:01:35:1f:b9:1c:
         97:13:48:f2:95:80:38:8b:a6:21:98:a7:d3:3b:4a:44:39:06:
         84:25:7a:b9:37:bd:87:8b:ca:10:37:03:a6:96:3d:06:27:c0:
         fe:97:3a:67:50:1d:e9:bb:44:20:b9:7c:26:5a:43:33:17:a3:
         cd:8f:3e:6d:de:18:51:85:59:7c:b1:dc:98:53:d9:16:98:92:
         d8:3c:1e:3c:aa:ae:5a:7f:71:aa:21:19:38:f5:3f:7e:5f:e7:
         08:21:c3:39:b7:dc:87:84:dc:10:f2:a3:68:03:36:75:56:30:
         37:ce:1c:d4:0c:f9:00:56:2c:a1:fe:f8:23:8a:89:1f:e0:22:
         6c:a1:91:01:e8:54:fd:78:89:19:b9:1b:d3:fc:cc:ad:2a:bf:
         49:25:a5:79:26:e1:1c:2d:68:db:a5:13:2b:84:3e:3d:48:46:
         bf:61:7d:4b:6d:a4:8a:88:52:7b:4e:61:23:57:3a:5b:b5:18:
         47:de:ec:ce:39:57:61:48:4f:6f:66:3f:18:ca:46:4e:8e:fe:
         52:f6:88:bf:b2:85:92:9c:2c:51:70:7d:62:3e:e0:02:35:46:
         3e:e9:33:f9:ff:8a:14:cf:2b:a2:2c:f9:29:c7:6b:50:54:73:
         98:44:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:57:21 2024 by rpki-client on console-ams.rpki-client.org