Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File:                     _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier:          K2qgabrxZlwGkA2DBGnkiNz/Xs7Qv0+MtZRh3HR3PWI=
Subject key identifier:   95:D7:60:13:3C:3B:42:DB:78:6B:1E:9E:60:91:B5:3F:31:12:FC:09
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer:       /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial:       018F9729A99B2DAD06E39AACEFC26FE5C7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number:          1181
Signing time:             Mon 20 May 2024 18:00:40 +0000
Manifest this update:     Mon 20 May 2024 18:00:40 +0000
Manifest next update:     Tue 21 May 2024 18:00:40 +0000
Files and hashes:         1: 0ZFaPFwdScIlfa8jNW1zbrrUqX0.roa (hash: K7zNhQZn/fWWJKMgMs4BrQSgn+chYNyAnGPUAzcReYQ=)
                          2: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: 2jFXKPQewP7zyuOrWOvjybrvxfC8LQg8/aAmjwdfA70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:a9:9b:2d:ad:06:e3:9a:ac:ef:c2:6f:e5:c7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
        Validity
            Not Before: May 20 18:00:40 2024 GMT
            Not After : May 21 18:00:40 2024 GMT
        Subject: CN=95d760133c3b42db786b1e9e6091b53f3112fc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:17:5d:8b:e7:16:04:80:a0:fc:66:f7:d6:
                    45:34:5a:5d:ef:06:2f:7d:dd:84:17:fe:52:99:7e:
                    c8:0a:19:5d:e0:01:20:d1:0a:dc:b9:af:96:92:9e:
                    56:91:7b:f4:72:32:e4:d7:cb:c5:14:2a:37:b6:74:
                    51:af:86:91:21:28:34:bf:10:db:a5:97:78:03:bc:
                    43:87:a3:af:e6:00:6c:d0:1b:b6:7b:d4:cc:35:80:
                    cc:c8:e8:77:02:4d:1e:dc:5b:65:0d:47:5a:8e:7c:
                    a5:83:02:c1:da:6c:0d:14:5c:05:12:a6:41:16:e2:
                    85:0c:c9:63:10:ec:4d:9e:4a:1d:43:84:a9:42:89:
                    da:79:0e:b0:e4:29:c5:78:6d:3a:22:c3:b7:82:80:
                    92:6a:21:6d:95:58:c6:3d:e7:0f:1a:67:83:1b:1f:
                    dd:b7:13:85:7d:55:1a:1f:84:9a:c0:d2:59:e6:9c:
                    cd:36:96:12:86:f1:fa:d4:05:c9:94:b9:f2:da:68:
                    c4:39:0a:6b:66:ef:63:8b:37:30:b2:6c:9f:2d:fd:
                    53:fd:8b:3c:f0:1a:41:cf:be:7d:f0:90:5a:aa:42:
                    09:54:e7:6f:75:f7:40:e1:f4:ed:b4:a2:2e:47:90:
                    50:c0:74:85:5c:b1:da:7b:3a:2b:22:35:bf:f7:c1:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D7:60:13:3C:3B:42:DB:78:6B:1E:9E:60:91:B5:3F:31:12:FC:09
            X509v3 Authority Key Identifier:
                keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:f1:51:2a:77:05:07:ff:8d:4d:3d:ce:a4:57:ba:f2:ba:
         96:d7:d7:74:d2:a6:e4:a4:6b:31:87:eb:f0:6f:ec:80:73:37:
         a4:cf:f9:c8:f6:22:f3:54:99:f7:ac:e0:10:43:34:49:d2:48:
         62:93:d3:6f:11:e3:86:fe:66:68:4b:25:fd:05:64:ba:92:27:
         2d:81:fa:dd:cd:85:bd:d0:66:41:a1:9d:5a:89:6d:c3:b4:01:
         f0:81:57:f9:3d:c6:3e:ac:8a:32:d9:66:ff:54:48:cc:b6:1b:
         fb:81:53:bd:52:68:aa:ce:45:10:fa:dc:d8:82:17:a3:94:69:
         b4:08:cb:fe:19:b6:f7:88:96:71:d1:66:08:46:26:7f:51:2b:
         0b:71:81:4e:2b:dc:1f:78:68:2b:ef:d9:54:4e:09:c4:30:e8:
         4e:38:3d:0d:38:74:f2:51:ff:c6:39:39:d7:0b:51:12:c7:cc:
         5f:76:5d:43:8b:44:e3:2d:2b:61:55:e9:6d:63:9f:1f:6d:1f:
         4d:cc:70:ad:ab:ad:a3:ae:01:63:90:5d:14:14:b6:b7:53:cf:
         a6:f2:02:53:19:86:9c:7b:c9:77:ad:0e:f7:49:f3:53:aa:70:
         9f:25:cb:e8:50:c5:ba:7c:ca:89:47:53:b9:1a:f5:d2:8c:52:
         97:d1:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:34:26 2024 by rpki-client on console-ams.rpki-client.org