Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
File:                     1UCrGFzzmd5s2zykXe0pa2vmj-o.mft (raw, json)
Hash identifier:          E7iqEwfH97e/renH+K/Xh04EkhBnmGjHBo4K/CkFUyk=
Subject key identifier:   D4:71:95:6B:D2:17:4A:2F:CD:10:A8:2A:17:9F:47:FE:FF:A0:01:EE
Authority key identifier: D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
Certificate issuer:       /CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Certificate serial:       018F234AC9AFD63DDBCD7258DB9C2FB21D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
Manifest number:          1146
Signing time:             Sun 28 Apr 2024 06:00:54 +0000
Manifest this update:     Sun 28 Apr 2024 06:00:54 +0000
Manifest next update:     Mon 29 Apr 2024 06:00:54 +0000
Files and hashes:         1: 1UCrGFzzmd5s2zykXe0pa2vmj-o.crl (hash: pnQ+f1Gb7BQsmFyhUYZD3SnpPc5aLUiQnIsn0i04EDs=)
                          2: jjkTGGrZ9OrIIN0QyyAPSHol1VU.roa (hash: 7kFrIBuCevjIVXmdsSwm3j7J6/1XLoAZWOVm6zPhP/I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:4a:c9:af:d6:3d:db:cd:72:58:db:9c:2f:b2:1d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
        Validity
            Not Before: Apr 28 06:00:54 2024 GMT
            Not After : Apr 29 06:00:54 2024 GMT
        Subject: CN=d471956bd2174a2fcd10a82a179f47feffa001ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:68:fd:d8:11:59:a2:f9:26:c7:9c:68:56:
                    95:05:96:95:79:1d:4f:fc:7a:4f:10:fb:fd:a6:8b:
                    1b:d9:c4:1e:10:20:e5:d1:d5:3c:df:db:31:5c:f8:
                    19:50:ae:39:e1:0d:4a:e7:41:64:94:10:77:ad:c2:
                    58:a3:16:f6:b6:1a:cc:8d:ef:5e:8c:f1:b3:b8:a9:
                    b0:e9:bc:c1:36:7e:2e:4a:3a:61:11:7a:d8:ec:f6:
                    50:33:f9:fc:25:1c:43:4c:b3:e7:ce:98:68:cd:37:
                    7a:08:b5:75:52:23:d3:6f:fe:cf:ad:d5:be:01:bb:
                    16:c3:85:52:7c:79:9f:9c:1a:14:42:31:b2:9a:42:
                    51:3f:11:ef:8a:4a:c9:6d:57:1a:d3:b7:3c:36:b3:
                    c4:64:cf:ef:14:33:0d:a2:c5:b2:79:1f:f8:5b:1f:
                    e4:b8:02:52:26:21:e8:89:22:1e:9d:93:90:93:d7:
                    79:8e:09:30:23:ad:59:bf:18:ca:47:71:ee:96:43:
                    db:26:32:8d:6c:f3:9a:b7:05:d6:89:d8:a5:11:14:
                    c4:05:bc:0e:75:d8:02:be:1b:51:42:2d:9f:fc:df:
                    90:51:b2:eb:f5:1a:40:9a:16:53:d2:a6:1d:b7:c0:
                    5f:0c:b8:16:c6:96:1d:27:05:c0:d2:29:e2:3c:30:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:71:95:6B:D2:17:4A:2F:CD:10:A8:2A:17:9F:47:FE:FF:A0:01:EE
            X509v3 Authority Key Identifier:
                keyid:D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:29:0a:35:bb:7e:33:2b:85:ff:ef:5e:b6:96:88:d5:30:8f:
         4d:e6:60:d8:0d:4e:d3:e2:19:4d:61:1d:47:b5:67:85:9e:dc:
         73:30:bb:38:e9:5b:f6:31:29:b3:3f:e5:34:2d:fe:35:18:b6:
         d8:ee:a2:28:e3:56:2a:62:17:fe:ce:a9:d0:10:61:c9:3a:2d:
         9a:03:62:fc:84:e3:9b:a8:93:94:b0:07:57:07:71:31:cf:b4:
         26:dd:fc:24:39:da:89:c6:05:44:0a:67:7f:3b:ec:15:2b:59:
         98:95:49:e4:24:01:03:39:5c:dd:42:a9:43:29:49:1c:0a:9c:
         b3:32:69:c3:a9:d5:40:6e:ff:08:19:d0:9f:0b:76:0c:98:7f:
         4a:c9:01:9f:a8:54:e9:59:12:bf:54:c5:85:63:59:e7:bc:38:
         fa:4c:42:8b:d8:43:6d:c2:95:0b:a5:e0:03:c3:28:9e:f7:8e:
         e8:fd:6a:eb:e2:a3:74:4b:1c:c2:e9:96:c0:92:47:ba:94:a7:
         10:e6:9d:81:9a:23:dd:78:82:7e:e6:f0:f0:b8:1d:f5:5e:b1:
         aa:ed:76:73:10:df:2a:25:83:f5:7c:ab:1e:a9:65:bd:3d:32:
         8d:6c:87:1a:c6:6f:b1:24:d1:5e:30:ac:33:89:99:b5:67:50:
         46:e2:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:58:13 2024 by rpki-client on console-ams.rpki-client.org