Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File:                     4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier:          AIKF7y43ikpRGiKeSXIC4YPnMZbp+JDazVSw8WY46/g=
Subject key identifier:   6B:37:FB:37:A7:BA:A5:99:06:89:24:E7:FE:35:38:B4:21:1A:32:D7
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer:       /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial:       018F467C10DC0B9A3F4B82890DD625E08BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number:          1155
Signing time:             Sun 05 May 2024 02:01:26 +0000
Manifest this update:     Sun 05 May 2024 02:01:26 +0000
Manifest next update:     Mon 06 May 2024 02:01:26 +0000
Files and hashes:         1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: yTGYGDsuFccthB1cS4KdTIzj5yJFIq61XBuQbV7paC8=)
                          2: o7HBtAU1rmzeFohwhsT0F0j1Ofs.roa (hash: PVM1K1sqnxkWM1CoWjMLZJhvyh/i95PXaPiLyypE1+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:10:dc:0b:9a:3f:4b:82:89:0d:d6:25:e0:8b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
        Validity
            Not Before: May  5 02:01:26 2024 GMT
            Not After : May  6 02:01:26 2024 GMT
        Subject: CN=6b37fb37a7baa599068924e7fe3538b4211a32d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bc:f3:2b:4b:e3:05:20:cb:80:a6:58:bd:99:
                    ce:51:9e:66:30:25:91:2b:88:a6:a4:a0:03:7e:35:
                    4c:76:81:76:cb:e1:ff:6f:89:76:d5:db:73:64:5e:
                    b1:a0:6d:d4:5b:81:20:e7:5f:d5:fe:42:37:6b:aa:
                    30:54:eb:43:c1:c5:90:92:7c:96:58:32:00:c3:64:
                    46:35:9f:31:90:cd:dd:4b:d1:bd:f2:12:63:ed:78:
                    9b:0d:1e:07:a3:70:2f:e1:71:ad:24:ba:5a:86:ab:
                    c1:d9:15:03:59:c0:e6:33:e1:f5:0b:6e:a1:87:02:
                    5b:e4:cb:54:b5:91:63:3f:9d:cf:a1:0e:27:25:fa:
                    8d:5c:e0:db:e2:f0:a9:87:62:fd:ca:b3:8c:9e:82:
                    32:94:c9:fa:24:8e:df:7c:7b:2b:e1:fa:46:fb:34:
                    26:31:81:19:d4:91:93:32:f5:0c:b9:d9:4f:2c:af:
                    4b:8d:64:59:c8:61:5f:d9:49:95:d8:14:40:6c:0e:
                    73:93:60:3e:d5:76:33:0d:44:bd:f7:2f:9a:51:6d:
                    9b:51:39:69:8e:4c:82:94:97:d4:c3:b9:2f:bd:ba:
                    9d:c3:c7:67:6f:bb:35:f2:6b:44:fb:fd:4b:a4:45:
                    dd:7e:35:26:b6:72:59:94:22:0e:95:53:2c:db:0f:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:37:FB:37:A7:BA:A5:99:06:89:24:E7:FE:35:38:B4:21:1A:32:D7
            X509v3 Authority Key Identifier:
                keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:c4:70:9c:62:3c:52:24:fe:77:5b:72:31:04:37:38:98:
         31:a5:aa:36:45:a4:90:8f:76:7a:12:03:03:07:3e:e9:31:45:
         2e:87:ed:53:88:10:98:b4:69:43:48:93:04:37:a9:41:38:a1:
         c1:a3:e0:a1:26:d4:ba:c0:c2:21:ab:e5:7b:21:46:62:29:48:
         0b:3e:cd:64:6e:04:1b:01:fe:10:46:6a:77:b7:91:ca:e6:83:
         af:02:e7:8b:28:b4:7f:47:9c:a4:dd:2c:3d:7e:cf:79:c1:88:
         26:a4:cf:ec:34:05:d4:1a:a9:f5:14:f4:7e:ed:bc:4f:db:1d:
         18:d3:f8:a0:9d:8f:61:c4:b9:40:fb:29:28:b1:e7:45:d7:52:
         e7:33:e5:4a:9a:c9:a1:f6:9c:4a:6a:27:27:4f:e4:f8:98:06:
         8b:d9:5c:dd:03:6f:44:37:03:15:9e:b0:11:e7:aa:a4:d8:72:
         69:66:a7:c2:ff:d1:47:2b:d9:d1:2a:e1:fd:a1:24:17:b7:0f:
         a4:2a:d6:79:69:99:9d:4c:9f:46:c7:90:4e:40:bd:5e:77:1a:
         27:bd:75:52:57:1a:f5:f9:11:49:06:26:38:b0:c9:46:a7:86:
         75:0b:4b:18:e7:63:94:77:a7:1f:3c:bb:b5:ab:69:28:33:31:
         ea:ac:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:03:29 2024 by rpki-client on console-ams.rpki-client.org