Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File:                     13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier:          a36R8g5t/mid5EeaUeoKcUu3gDeY3Eo921tsMqLlGks=
Subject key identifier:   51:2D:3D:D3:E5:46:3F:59:BB:1B:5B:03:EA:0F:5C:9C:BF:0A:18:C8
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       018F42D5CA65586F028C3103808B9C430EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 09:00:58 +0000
Manifest this update:     Sat 04 May 2024 09:00:58 +0000
Manifest next update:     Sun 05 May 2024 09:00:58 +0000
Files and hashes:         1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: Xg7dKbRWnNtqwV3LxcszBXcmz5hDWTDq61kbqtkHP0g=)
                          2: ikYdLc0hUOEmgtagAIC5bUJ0DlU.roa (hash: GXSmBMt93j9Y2+A/gh8l44V6TJ/tphQrcRJ1RO2VLzU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:d5:ca:65:58:6f:02:8c:31:03:80:8b:9c:43:0e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: May  4 09:00:58 2024 GMT
            Not After : May  5 09:00:58 2024 GMT
        Subject: CN=512d3dd3e5463f59bb1b5b03ea0f5c9cbf0a18c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:99:65:0d:a2:66:93:16:a2:9d:6a:97:b9:
                    7d:83:a5:bc:e5:8a:38:1a:4d:72:02:50:0d:96:37:
                    8e:2d:c1:e5:50:ac:20:54:7e:b4:0d:d0:a1:33:b4:
                    4c:79:99:0b:bc:a2:b1:bc:8f:e9:5f:83:b9:dc:d0:
                    ae:d0:2c:5c:35:0b:3a:d4:fa:6d:01:97:61:12:7a:
                    c3:7e:66:ef:f8:f4:9f:ac:fa:cc:ee:fa:f2:1c:ad:
                    c0:59:66:15:07:86:7e:37:88:56:fb:8f:22:4a:74:
                    93:04:c7:49:d6:d1:32:9e:35:95:80:2f:81:a7:6b:
                    b7:0d:12:79:48:b8:c1:c3:1b:f5:63:0f:14:9a:d9:
                    a5:3e:e8:c3:6f:6d:08:9f:31:51:ca:ed:a0:a9:e8:
                    4f:23:30:30:99:2b:1b:29:a3:75:9d:b4:6d:37:50:
                    b1:eb:49:2d:ce:41:2d:70:b7:d0:ca:8f:8a:78:80:
                    1b:a0:4f:1c:94:fa:c4:f5:4a:57:6a:c5:39:56:8b:
                    95:db:83:25:2f:fd:3c:98:44:e0:17:82:3a:ab:a6:
                    d3:0e:db:fb:ef:79:aa:7e:48:93:20:ca:8b:bd:a1:
                    af:fe:78:03:44:11:b8:f1:60:21:6f:20:ca:81:73:
                    6f:98:b2:e6:01:b5:f2:af:01:5f:a7:d1:33:e7:df:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:3D:D3:E5:46:3F:59:BB:1B:5B:03:EA:0F:5C:9C:BF:0A:18:C8
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:71:92:46:d1:12:8a:23:e9:f2:4b:53:97:86:95:c7:d6:52:
         95:8e:81:2b:8e:22:da:15:6e:1d:b1:ae:bf:78:aa:f8:5f:89:
         6d:08:89:c0:01:07:3d:28:08:4a:8a:69:bb:1e:fd:e0:5d:46:
         10:6e:2c:b5:67:17:ab:2c:17:38:41:c5:88:e3:bd:79:69:81:
         30:1c:3d:37:da:c6:a8:62:b6:dc:1f:de:20:87:c1:b2:84:c1:
         ae:9b:2b:00:db:af:ac:c9:23:0b:1c:a4:2c:cf:b1:61:c9:a8:
         26:e5:c3:e1:52:5b:d1:1c:07:57:4a:4c:e9:87:18:e1:c4:dc:
         6e:31:b4:24:7e:ac:cf:37:e6:83:02:81:5b:b2:7e:2e:c4:c8:
         59:10:00:54:05:b4:07:89:e0:a8:67:c4:53:01:f4:eb:01:f6:
         e2:5a:73:95:f2:cc:8e:9f:28:8e:2d:0e:60:a0:96:c6:6a:68:
         e9:f6:81:55:57:08:12:c0:83:dd:a2:41:3e:9d:4f:88:7f:02:
         73:e3:32:6e:68:de:50:f6:36:41:bf:38:5a:57:ed:31:e8:95:
         77:86:87:25:7e:c0:03:08:47:1f:04:78:f7:be:d0:ea:a9:6c:
         13:8e:05:fc:ef:70:1a:cd:6b:99:34:06:1b:f8:58:6e:e9:85:
         15:01:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:26:43 2024 by rpki-client on console-ams.rpki-client.org