Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File:                     1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier:          SlbYq/+8CGVbb7jAfxaadfco+aKV4QLcb6i7KCHuz3A=
Subject key identifier:   11:BD:4A:5B:73:84:68:B5:0C:E6:31:31:4D:B3:68:1E:2C:BB:C4:97
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer:       /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial:       018F429FCE557DB1BFF22482392A7E5ACDFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 08:02:00 +0000
Manifest this update:     Sat 04 May 2024 08:02:00 +0000
Manifest next update:     Sun 05 May 2024 08:02:00 +0000
Files and hashes:         1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: 5npouycENxQgyZgC7ccUETA8LUTo+4jf6ON1h3fKJ4g=)
                          2: jV7AHNrsYKK0LVYr93CMw9aF-Ss.roa (hash: Mwgy1DZ6LmfRbPT/OYCrV7JpE5dpQnQIf9ntR3EbWo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:ce:55:7d:b1:bf:f2:24:82:39:2a:7e:5a:cd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
        Validity
            Not Before: May  4 08:02:00 2024 GMT
            Not After : May  5 08:02:00 2024 GMT
        Subject: CN=11bd4a5b738468b50ce631314db3681e2cbbc497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:ee:fe:6c:32:23:d0:d5:41:b3:c4:1a:86:
                    01:41:70:17:7e:9a:22:77:f3:fa:c3:81:99:0a:eb:
                    77:68:ce:e4:ee:3f:06:f2:d9:af:32:b2:1b:72:31:
                    eb:03:b5:f6:38:7d:d0:cc:3d:9c:bf:07:89:e1:f5:
                    7d:76:ef:a9:9e:1e:65:09:2e:dd:68:25:09:de:9f:
                    3d:bb:d7:bf:24:37:b9:3d:cc:da:a4:47:fe:ae:c2:
                    72:81:60:c0:a6:bc:d0:41:03:3d:c2:ef:d4:b7:e8:
                    8f:c6:46:c1:19:27:c9:c8:6d:77:2f:81:46:af:c8:
                    c0:e2:74:52:27:a8:d0:5b:c2:6c:d6:5c:c2:32:82:
                    77:c6:88:2e:34:3b:00:bf:ac:b7:f8:17:2d:ba:89:
                    4e:0c:60:aa:bb:47:50:9b:12:93:20:07:18:2e:e9:
                    49:3b:ab:9d:db:c3:30:c7:21:52:8f:d1:2c:37:b6:
                    ac:73:40:8d:85:3e:76:ad:f7:15:a8:6e:45:75:26:
                    7b:d9:71:69:3a:fa:9a:36:ba:99:ed:30:4e:25:93:
                    b8:d1:0f:81:77:e1:03:6c:c2:88:4e:e1:57:a9:62:
                    d0:a4:41:90:f0:5e:4a:9e:6d:57:ad:a0:3a:92:5a:
                    99:1c:32:24:7f:55:1f:cc:06:05:61:a1:ba:d8:be:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:4A:5B:73:84:68:B5:0C:E6:31:31:4D:B3:68:1E:2C:BB:C4:97
            X509v3 Authority Key Identifier:
                keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7a:c1:60:e8:ad:9f:cf:fa:ba:7f:5b:a6:5f:28:70:24:8b:
         f0:72:81:38:e6:73:25:c4:ca:3f:a5:91:5c:bb:63:62:ad:53:
         9e:4b:47:cd:f9:91:37:6e:f3:73:a9:71:b1:ca:be:94:0e:82:
         98:08:8a:d4:80:9e:aa:f1:a7:09:53:b9:de:ea:c3:b3:df:8f:
         2e:cc:0c:6c:8d:71:bf:b1:41:62:1f:78:94:c0:1d:e4:12:7f:
         c2:2c:9f:cc:3d:85:b2:71:8c:6d:f0:09:f0:f4:da:1c:66:c7:
         68:a3:44:88:81:38:bc:b0:25:1f:ac:4e:07:bf:e2:40:04:bf:
         d7:84:d0:3c:ee:21:c6:18:4c:79:ca:90:74:c4:e5:4e:6d:5a:
         5f:f1:fa:76:2d:9f:43:57:55:c9:dc:30:f8:63:e5:25:67:cb:
         05:84:77:89:e0:6e:97:bc:bf:2e:bc:6d:d9:3f:c8:28:b4:d7:
         eb:ba:56:12:62:eb:00:03:60:c5:2b:c0:ca:da:08:89:63:2b:
         99:e3:f8:c8:99:e8:96:0e:46:58:12:fb:66:28:b9:75:84:c3:
         62:4a:c9:7c:3e:d1:27:9c:49:f4:24:4a:d1:90:17:9d:04:cf:
         43:95:be:a9:a6:67:55:41:82:cf:bf:e7:35:32:c0:ac:9a:6d:
         25:70:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:49:22 2024 by rpki-client on console-ams.rpki-client.org