Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          VE2tXVGZBgxHHbc/nEWVj7kfsyivxPXLaFHx5U8UkDE=
Subject key identifier:   58:CA:EF:F0:D1:7B:A6:9A:93:92:0C:E2:9C:6C:A2:2D:00:4F:8D:58
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       018F4231341806729F0CD3F1224E1B1782A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 06:01:11 +0000
Manifest this update:     Sat 04 May 2024 06:01:11 +0000
Manifest next update:     Sun 05 May 2024 06:01:11 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: 2COC5JWm1fK3SinrRRnnPWxZlrPGIDj9M18sYu351S0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:31:34:18:06:72:9f:0c:d3:f1:22:4e:1b:17:82:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: May  4 06:01:11 2024 GMT
            Not After : May  5 06:01:11 2024 GMT
        Subject: CN=58caeff0d17ba69a93920ce29c6ca22d004f8d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:53:4d:b9:d2:66:c8:89:e0:6e:3a:4b:a2:
                    c5:e8:65:9c:c5:39:50:4f:c1:44:1f:22:d3:bd:a4:
                    e4:0d:aa:12:54:db:ab:00:03:b7:95:99:21:1e:98:
                    0c:cd:26:17:e6:25:f5:dd:1f:63:f6:ec:e8:58:b7:
                    42:b8:1a:da:03:96:10:d2:89:0a:28:ae:68:41:29:
                    d8:53:6e:99:76:d2:1e:3f:13:f6:45:b6:c0:b4:1e:
                    d2:cb:6d:d9:06:52:a5:5a:da:04:b0:c0:26:79:18:
                    04:d8:f5:cf:7c:77:e4:ef:e2:51:39:93:d9:88:d0:
                    92:b6:c7:48:bb:db:22:98:28:fd:ce:3a:12:ee:63:
                    35:0d:9d:91:18:1d:aa:9c:e5:c0:71:d6:bd:4b:7c:
                    e6:62:b1:86:ed:0e:07:8f:69:e2:57:34:3a:4f:43:
                    56:de:1a:6c:cf:9f:24:fd:bd:5b:28:87:d9:6a:4d:
                    1f:44:82:51:f6:d0:dc:c4:6a:cc:a2:03:98:70:03:
                    21:08:5f:07:16:82:43:0a:bc:69:31:12:ab:4c:ca:
                    52:d5:f1:f1:cb:10:f6:8d:76:34:aa:45:16:8d:41:
                    04:28:af:86:27:6d:f4:60:ae:ff:ec:f7:b6:c3:7c:
                    a9:a2:0b:b9:9b:d6:f5:63:db:3f:d2:68:67:8b:5f:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:EF:F0:D1:7B:A6:9A:93:92:0C:E2:9C:6C:A2:2D:00:4F:8D:58
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:f7:1c:9f:2b:c9:e7:17:78:b6:84:80:c7:88:e5:6c:32:
         31:15:63:da:57:53:82:8a:2f:61:3f:60:1d:ee:fa:5c:92:06:
         ef:98:29:71:13:17:2e:bf:9a:5e:be:4f:f2:f8:77:40:87:b8:
         d4:2c:60:5f:62:98:90:cc:5d:15:c3:1e:2e:19:ec:48:9d:01:
         25:20:1e:e6:4a:a3:3f:c5:b9:a3:df:0a:18:99:19:58:0f:96:
         72:eb:e4:cc:5c:cf:ac:42:b7:23:71:6e:4b:82:c9:2c:a7:41:
         0a:71:c4:bf:55:e2:d6:ee:06:3b:2b:0f:b8:16:ec:3e:03:ce:
         d0:4d:8f:00:af:16:51:e4:36:82:f8:78:c2:ab:8e:1f:5c:f4:
         e3:99:12:cb:c3:ea:6c:f3:44:20:8d:83:98:f8:c6:0c:48:06:
         1c:38:47:b4:9c:d6:57:27:ef:dc:2e:ab:30:76:fa:a3:5b:ce:
         6a:41:52:b0:74:18:b2:3d:71:d0:f2:db:a6:45:77:d8:e3:30:
         84:66:bd:62:7a:9d:ec:e6:5a:8d:90:32:15:eb:b9:e0:6e:e3:
         e2:53:3a:69:ff:b4:22:b1:f4:e0:72:1c:80:bb:05:6f:f9:d4:
         6f:3f:40:71:93:37:65:92:2d:fe:9c:2a:48:2b:06:9c:72:e0:
         70:ca:42:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:10:45 2024 by rpki-client on console-ams.rpki-client.org