Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File:                     Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier:          jByJqQAeb6y8LHsew7L9eZfX8pranhmrqg9zUgDsAw8=
Subject key identifier:   B5:A9:1E:9B:BD:E1:32:61:C0:79:FA:C9:0B:37:22:CE:82:71:EE:43
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer:       /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial:       018F53CA178F266B0DE320250C3EF2D0299B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number:          1159
Signing time:             Tue 07 May 2024 16:01:44 +0000
Manifest this update:     Tue 07 May 2024 16:01:44 +0000
Manifest next update:     Wed 08 May 2024 16:01:44 +0000
Files and hashes:         1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: B7n7ZGlbxxfGeWeP+xQyJmn+BaG8PQ08QNGg1HNDUoI=)
                          2: bv9qcXFpkvhhyeehM65Kw4bMcEY.roa (hash: cl7cd2aJPGlXNFXiTNawtnk7Zl+zX0pXYfc8ZY9ixyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:ca:17:8f:26:6b:0d:e3:20:25:0c:3e:f2:d0:29:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
        Validity
            Not Before: May  7 16:01:44 2024 GMT
            Not After : May  8 16:01:44 2024 GMT
        Subject: CN=b5a91e9bbde13261c079fac90b3722ce8271ee43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:ed:71:ce:a5:83:27:53:57:b3:75:b7:ff:
                    ef:0c:4a:28:6c:14:b9:46:3b:54:3c:4d:55:7f:ae:
                    fc:4a:4d:61:a6:db:b2:e3:88:37:ed:47:5d:9c:34:
                    c6:5b:2c:1b:db:90:54:12:c2:de:a0:55:6b:4a:ba:
                    a6:59:34:93:42:06:10:6e:65:d2:55:7c:a6:78:b3:
                    f8:72:59:b4:fc:c0:47:f3:b4:2e:24:b8:88:b1:75:
                    2d:8a:60:02:69:15:fd:50:dc:39:e1:c2:3b:71:35:
                    6f:89:49:eb:e7:b8:6f:f0:b0:92:ab:e3:87:f5:69:
                    03:90:0b:ab:09:08:20:c2:68:36:17:9a:7c:2d:77:
                    10:b7:de:7e:a2:29:1a:92:d6:ee:de:69:73:18:ad:
                    93:4b:0a:14:a7:37:b6:dc:b8:87:41:ad:61:f8:ce:
                    53:56:e6:8c:93:8c:68:11:be:d6:b0:79:e4:4e:94:
                    a0:5c:d8:19:9e:94:1b:55:b6:b8:fa:bf:3d:44:c6:
                    ea:ff:d1:9b:f8:4a:54:27:12:77:0b:f3:5c:bf:c5:
                    b4:c4:19:13:b8:7c:a7:39:f7:59:62:33:6e:9f:0d:
                    98:02:43:82:20:c9:05:d6:ce:d0:b2:bd:d8:a2:49:
                    1e:7d:f5:36:d0:41:e7:55:9b:92:f7:e0:58:00:90:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:1E:9B:BD:E1:32:61:C0:79:FA:C9:0B:37:22:CE:82:71:EE:43
            X509v3 Authority Key Identifier:
                keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:48:35:3b:ba:19:4a:5a:e0:ca:3b:f0:9a:38:4e:52:a3:
         ee:4a:2a:39:64:53:cf:a9:25:65:b2:db:04:e6:dc:2e:28:5f:
         3d:6a:82:93:d4:66:39:c7:50:1c:4e:f5:ee:56:93:90:4c:b5:
         3b:eb:96:ce:c2:40:e5:16:18:d9:74:17:2b:0b:2a:a7:38:99:
         a9:ef:ba:84:2a:ad:b3:1f:0f:a1:e3:81:86:81:67:8e:47:da:
         bb:63:31:e5:50:9d:a4:71:88:5a:25:98:be:35:ad:25:19:e2:
         b9:97:fb:35:e6:74:44:fe:e2:5d:bb:eb:2c:fd:72:68:cb:69:
         be:18:11:c7:c8:8a:79:3e:83:64:19:89:07:10:2b:a5:a2:da:
         a6:1a:0f:bd:31:53:d6:42:89:43:5e:f1:69:1f:03:56:4c:89:
         ea:f9:41:a2:a2:7d:c7:b1:e7:1e:db:13:43:95:ca:60:05:6b:
         76:1c:62:37:59:43:42:c4:14:8d:66:cf:6f:e2:85:37:2b:85:
         0a:47:6e:1f:64:2c:69:ac:7a:82:5f:aa:07:91:a6:81:2f:2a:
         f3:0b:81:ac:f4:81:cc:e3:bd:20:6e:7e:31:e0:4f:58:7b:4d:
         e0:ba:f6:bc:bd:bd:6b:20:19:6b:c4:1e:79:41:05:62:e8:62:
         d4:b4:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:24:13 2024 by rpki-client on console-ams.rpki-client.org