Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File:                     1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier:          c574lZ8CBfjV2mSD/suRlNx9eOl7pmktJplVcmCotOY=
Subject key identifier:   7C:6C:40:F5:CA:64:91:AC:69:96:A7:5D:56:01:91:FA:E9:CC:A4:15
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer:       /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial:       018F369B0D501951849AE554E22BCDFEDB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 00:01:22 +0000
Manifest this update:     Thu 02 May 2024 00:01:22 +0000
Manifest next update:     Fri 03 May 2024 00:01:22 +0000
Files and hashes:         1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: s/E/TvZUQ/LTv/PjKl4iBlEuFrmM30ceuorTmFgh8hk=)
                          2: HupaTFZuGCcIfr0IgspoWUoeYX4.roa (hash: hy83rMvE1ot7ukylHoJcLwBj0L0Rh7YCyAjDxiVRucw=)
                          3: ggccHvu4tnbtfA-vjYFPbM97Hgc.roa (hash: ofClyljeHH1N97ZvHvj78hsp3NLl9opp9pQNzvLNyac=)
                          4: tHfSbUnrvO7apuW0o5hM5SWtjnw.roa (hash: Lt4qoY6xMXeq934i9dt10HBwbrM3rV+wmcpwkYb0+5g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9b:0d:50:19:51:84:9a:e5:54:e2:2b:cd:fe:db:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
        Validity
            Not Before: May  2 00:01:22 2024 GMT
            Not After : May  3 00:01:22 2024 GMT
        Subject: CN=7c6c40f5ca6491ac6996a75d560191fae9cca415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:6a:9d:94:66:c3:1a:18:2d:56:4d:3b:c9:
                    99:3c:16:a9:c0:4e:2c:c1:48:90:29:19:42:67:52:
                    7f:d0:f1:23:07:3b:ae:56:b6:81:a0:b9:e2:b4:81:
                    9e:be:6b:60:8e:54:88:47:68:65:54:41:0c:f1:9c:
                    f6:09:4b:46:b9:fe:1d:68:bd:21:1d:4c:57:86:a8:
                    ce:bb:bd:45:7e:74:48:07:40:6e:6c:32:29:f0:8f:
                    25:e9:94:5f:cb:85:8f:05:5d:03:83:f1:c8:5d:c3:
                    0d:0e:2b:c0:1c:14:1f:c2:d1:cc:f7:35:89:31:92:
                    bd:93:51:a6:83:02:65:4d:bc:1c:ea:34:6a:71:82:
                    b3:47:ab:aa:a9:a9:fd:08:b5:a0:af:d4:fc:01:ce:
                    b4:b2:64:0e:91:9d:4c:10:1c:3f:77:a9:c6:bc:56:
                    a5:c6:d2:92:e7:3f:e6:c9:44:ca:29:21:30:ce:17:
                    87:c4:12:9e:05:5d:29:89:74:0e:d2:31:1b:9e:83:
                    43:96:34:7f:7a:28:74:e3:50:b0:7b:60:a0:a8:8b:
                    c8:69:60:bd:7d:cb:3b:1e:53:78:61:93:34:ec:17:
                    00:06:c7:52:1f:7b:64:9d:02:00:8e:23:55:f4:77:
                    a4:ef:5c:0b:fa:44:c9:4f:cb:bc:09:90:25:53:85:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:40:F5:CA:64:91:AC:69:96:A7:5D:56:01:91:FA:E9:CC:A4:15
            X509v3 Authority Key Identifier:
                keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:59:30:d6:51:30:33:f8:ee:52:49:e7:c4:73:65:b7:c5:
         b3:a5:2e:ee:ba:ad:7b:a9:3b:2b:7b:e1:84:e7:e9:a0:a3:02:
         3a:e0:25:ac:5a:1e:de:df:29:73:61:2e:5f:8e:a9:4a:f9:d7:
         93:dc:75:b6:69:02:36:b3:72:6a:18:fb:7a:b6:4a:3e:52:6d:
         20:c8:ad:a5:91:76:af:66:64:dd:35:ea:9b:bf:53:77:e5:23:
         38:73:65:72:57:fc:c7:0c:68:c8:3f:ed:e5:84:85:6c:ac:00:
         d4:ea:d0:e0:87:af:a1:54:5c:03:3d:af:ca:4c:b2:d2:2e:c4:
         c5:b1:b4:74:56:72:bc:17:01:b1:31:92:e9:00:3d:95:dd:1f:
         2c:08:47:41:c1:21:53:14:80:fd:88:fd:24:d3:c8:85:a5:7c:
         9f:4b:5c:67:ee:b5:ec:b5:0d:a9:b8:0b:62:50:0a:b8:8e:cf:
         cb:58:ea:31:74:2e:f4:02:b1:45:16:48:30:2e:54:52:7b:a8:
         e4:8d:50:73:d0:91:9e:3a:b3:3c:ea:b4:8f:3b:00:28:d4:8d:
         c9:28:ec:27:d5:ec:4b:ab:5b:27:aa:ef:34:14:7b:a0:68:b1:
         a7:8f:79:62:ab:5d:a5:80:0c:2f:1a:70:51:72:26:51:d5:0b:
         92:8d:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:03:05 2024 by rpki-client on console-ams.rpki-client.org