Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File:                     1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier:          qssJ085Urm985a8KKn9XmNH8QModiUZ8SmgP81phtkQ=
Subject key identifier:   36:63:14:55:85:46:87:14:6E:10:2D:DF:AE:C5:7B:B4:5F:64:31:48
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer:       /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial:       018F54377A01CC3E369BA7E0700438BE35D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number:          115D
Signing time:             Tue 07 May 2024 18:01:12 +0000
Manifest this update:     Tue 07 May 2024 18:01:12 +0000
Manifest next update:     Wed 08 May 2024 18:01:12 +0000
Files and hashes:         1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: /Nf+lUw7vXGKayTHpxRINESZMVawSAcpBMfhBc8rDWw=)
                          2: dSaicd8eMS1DbYxbZOA66qTeQ4I.roa (hash: LRWRLRzYJIYUnSkT4RHJc2DyrsL1zRo1+65bkYG7uYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:7a:01:cc:3e:36:9b:a7:e0:70:04:38:be:35:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
        Validity
            Not Before: May  7 18:01:12 2024 GMT
            Not After : May  8 18:01:12 2024 GMT
        Subject: CN=36631455854687146e102ddfaec57bb45f643148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:ac:22:5b:07:cd:a1:91:7a:25:dc:f4:c4:
                    f4:d2:c4:2c:1f:fa:1f:e2:22:73:e0:6c:9e:e4:60:
                    6d:de:d1:f0:ba:4a:e4:f0:f0:db:85:50:14:f4:d0:
                    72:6b:f7:b3:be:bb:f7:07:d4:de:27:97:09:0b:4d:
                    b2:c8:33:cd:58:2a:aa:e8:a8:f7:f4:86:af:e9:56:
                    a1:dd:b3:92:9a:df:1c:a1:df:80:a4:1a:14:09:0f:
                    a1:91:9a:41:c3:b0:f9:e6:f8:b5:7d:c7:d6:ae:9e:
                    b2:10:3d:5a:fd:af:cc:a6:84:10:21:d4:c3:a8:85:
                    55:2d:c7:07:c0:37:6b:a9:e1:b5:1b:6f:4f:f3:86:
                    70:17:1e:74:5d:7c:ab:4e:af:67:80:e2:c2:dd:a4:
                    31:ca:6b:2f:e9:33:d7:ad:53:bb:32:cc:78:c6:fa:
                    37:0b:dd:66:9b:33:85:00:80:75:e9:91:13:24:28:
                    ef:2d:7a:30:0f:19:c4:e0:35:08:01:d2:f3:da:46:
                    87:09:c1:0f:ea:98:45:5d:a6:77:51:82:e5:ad:c6:
                    fc:4f:e9:8a:51:4d:8b:aa:d6:a1:2e:1c:46:f3:b8:
                    82:d5:9d:93:98:4d:e5:4f:43:72:bc:d6:46:54:d8:
                    c3:62:78:2c:9e:a1:45:91:67:a6:ad:18:56:34:82:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:14:55:85:46:87:14:6E:10:2D:DF:AE:C5:7B:B4:5F:64:31:48
            X509v3 Authority Key Identifier:
                keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f3:ea:9f:3f:74:49:50:04:cf:15:73:3a:f8:8e:16:a8:0d:
         bb:1f:a4:d9:38:46:85:3f:97:60:2a:a2:7c:73:73:ad:6d:58:
         66:c3:9a:86:34:36:5c:97:d4:c7:e5:f9:ec:f9:0e:ce:3a:99:
         d3:21:f9:75:58:a0:1c:3a:cf:26:5c:0a:f8:d5:74:0f:13:df:
         7a:25:55:54:c0:9a:c8:79:ad:78:96:23:0d:3c:35:98:b4:d2:
         9e:6e:aa:83:1a:80:25:38:26:38:d3:aa:26:3b:83:69:3b:82:
         9b:c5:9a:86:41:c9:f0:3f:61:58:2b:cd:4e:81:4a:42:0d:c6:
         26:74:bd:00:f2:de:1a:c8:cd:ad:90:fc:32:b0:76:e4:6c:f3:
         4e:b0:a6:e0:07:4c:a4:f9:f7:7a:8b:06:4f:c0:5b:a4:a9:56:
         e5:7d:de:76:63:a6:e5:d1:e9:45:18:54:2f:05:95:7e:2f:eb:
         25:9d:43:dd:52:a2:09:ac:fd:39:b9:2b:ae:8f:b5:af:44:35:
         5e:23:e6:72:01:ed:62:59:a0:ee:99:51:63:44:e8:4e:a3:c0:
         d0:42:d0:ff:34:29:fa:30:98:85:65:82:bf:d7:e4:b5:fe:40:
         e8:57:f5:e3:b6:07:9d:10:09:b9:d3:67:4a:ac:ea:5e:5a:21:
         1f:9e:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:24:42 2024 by rpki-client on console-ams.rpki-client.org