Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File:                     9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier:          JeTlOXWoNT5Ec7tMHcSG0EGwPQw2uXucweeezN9/yGw=
Subject key identifier:   DA:6A:04:DC:35:48:F1:89:17:70:B8:65:FD:34:75:D9:B9:41:15:7E
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer:       /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial:       018F478EB6C8C4B7604EB0EA1D697180B227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 07:01:26 +0000
Manifest this update:     Sun 05 May 2024 07:01:26 +0000
Manifest next update:     Mon 06 May 2024 07:01:26 +0000
Files and hashes:         1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: 8ffVxIiSh2WMgtbRESESaPCRjyqvt65Oa9m/dNQMQno=)
                          2: DW-sNsxiSt8lM4KAsW6zUSPb3NE.roa (hash: kCnpoNoow0kmKozG9npxkX0PtVhVcYT9/iUm8KF3UN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8e:b6:c8:c4:b7:60:4e:b0:ea:1d:69:71:80:b2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
        Validity
            Not Before: May  5 07:01:26 2024 GMT
            Not After : May  6 07:01:26 2024 GMT
        Subject: CN=da6a04dc3548f1891770b865fd3475d9b941157e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:fc:9a:4f:41:c7:86:75:dd:46:ae:1e:d2:
                    76:1a:aa:4e:f9:6e:db:da:87:15:2c:a1:ee:92:1d:
                    1c:63:50:86:41:e1:91:d2:43:18:2b:70:33:e8:ad:
                    65:04:dd:1b:00:53:7c:37:3c:52:25:02:b4:97:19:
                    34:01:31:38:31:9e:a4:ad:68:2f:cf:77:ce:ab:3c:
                    e3:64:d0:40:bc:ee:8d:d3:bf:c1:95:05:49:e4:62:
                    b2:2f:39:40:42:7d:32:c5:32:69:b7:2d:6b:80:09:
                    6e:1a:e3:88:1a:fa:71:9b:8f:ec:8c:91:79:67:10:
                    77:2d:15:e1:c6:ac:af:64:b5:a8:21:77:58:09:02:
                    28:9d:78:9a:e5:86:44:08:9b:ee:42:29:fe:da:c9:
                    71:79:fb:b9:fe:58:81:f6:c3:5c:cf:54:b6:7e:8b:
                    20:df:95:15:e6:f6:d7:b1:6a:e8:85:76:65:5f:a8:
                    d8:99:e0:ef:c7:7f:a4:8c:0e:64:d2:c7:93:e9:c8:
                    6f:e0:45:a3:41:22:68:a3:51:e5:9c:94:f8:3d:bd:
                    65:0f:3c:47:0b:f7:23:55:68:d2:ba:db:5d:30:64:
                    4d:a9:06:54:cb:95:df:32:c4:af:a0:2e:2e:67:ba:
                    a2:ea:4a:56:90:ce:9e:d6:e1:eb:d6:a2:6a:cb:e8:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:04:DC:35:48:F1:89:17:70:B8:65:FD:34:75:D9:B9:41:15:7E
            X509v3 Authority Key Identifier:
                keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:79:4e:37:dd:2b:e9:7f:48:10:99:ac:8d:63:a3:97:91:
         c1:87:1c:43:42:0d:12:40:18:37:4f:ed:9f:ce:59:77:a5:f4:
         48:b5:99:72:ed:37:37:ea:e5:6a:a1:fd:b2:be:ef:e1:62:72:
         f4:2e:86:29:4b:f5:8d:c7:e9:6c:0f:d1:41:80:f9:07:65:c0:
         c7:dd:fd:a9:36:1e:c0:0b:52:48:29:1f:27:59:7f:bd:91:f1:
         73:a6:55:e0:d5:74:8a:fa:1c:47:e0:89:46:fe:75:8c:93:1d:
         24:37:4f:4a:85:57:bb:fd:ae:06:f8:20:42:dd:a8:cc:8b:48:
         df:e8:2e:2d:93:c4:e9:04:a0:92:c8:ec:1e:ef:90:5b:ef:21:
         b4:85:bf:70:da:9a:5d:53:bf:a4:bc:fc:5d:a3:86:a6:e3:35:
         4c:86:8b:a6:a0:d0:97:11:61:e8:47:82:2f:18:06:84:67:55:
         b7:c4:d4:11:7c:48:a7:13:1b:33:b3:e0:1b:fe:07:10:ca:73:
         61:54:a5:26:3f:00:3b:62:7f:5c:d0:8e:c4:af:a9:2d:16:1c:
         be:4b:11:e2:ca:a1:61:cb:6c:89:9b:cd:88:50:3f:8f:bb:3b:
         eb:77:66:19:d8:b7:f5:db:7a:82:10:cc:b1:72:8c:a8:2e:b4:
         5a:c3:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:54:52 2024 by rpki-client on console-ams.rpki-client.org