Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File:                     H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier:          RIEY4Y6cBSKIo/HejjLmcYdmD95Hars0rNaHC0/31Js=
Subject key identifier:   E6:E0:D2:65:40:43:F2:A2:9E:FB:50:86:2B:88:BB:C2:55:89:85:69
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer:       /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial:       018F43B34A26BE95E42880A1DECF7B80236E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 13:02:54 +0000
Manifest this update:     Sat 04 May 2024 13:02:54 +0000
Manifest next update:     Sun 05 May 2024 13:02:54 +0000
Files and hashes:         1: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: 1wvHlW2Jp5RukqmKmYHRojdrgdc03WTkeVDVmVcIEXE=)
                          2: V3HWMgvnxoIiWvaGEK35KxskN4M.roa (hash: jm1B0O6vz3VVXp2aVO0KVI854bhNb3109n3/Og8AIuo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:4a:26:be:95:e4:28:80:a1:de:cf:7b:80:23:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
        Validity
            Not Before: May  4 13:02:54 2024 GMT
            Not After : May  5 13:02:54 2024 GMT
        Subject: CN=e6e0d2654043f2a29efb50862b88bbc255898569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:09:97:e4:91:8d:11:11:b8:dc:c9:6b:d1:
                    ba:94:38:11:48:1b:21:5b:8b:51:b1:d7:4e:ae:d5:
                    ab:be:80:5e:7a:1b:37:1f:fc:09:57:75:43:3a:a4:
                    b0:4e:5e:d9:61:dc:e0:30:01:26:b6:8c:46:c5:5e:
                    fc:d7:fa:6b:a9:83:87:90:20:23:38:4a:54:b7:34:
                    51:b2:ec:c7:45:fc:23:c4:d5:fa:9d:7e:85:46:ed:
                    14:88:40:37:06:e7:6a:6d:a3:c4:89:d8:5d:9a:3f:
                    c0:16:1d:33:28:af:88:6b:6a:16:27:b4:76:37:e0:
                    4f:47:7d:b5:61:24:08:7b:ff:5f:2b:7c:8c:a4:6e:
                    4d:4b:22:71:12:d4:83:5c:ed:b4:ca:60:e7:02:0b:
                    61:9b:a3:ac:6b:ee:b4:20:05:2d:ca:b5:b6:b8:9d:
                    74:ef:91:6c:8b:4b:01:61:e7:87:36:3d:6d:30:03:
                    de:2c:23:88:a9:f6:9f:11:8f:6d:58:4f:f1:66:48:
                    8b:c2:08:50:91:dd:60:ec:c3:09:9c:10:e8:56:fb:
                    81:77:83:1b:70:be:8e:b0:6d:a0:69:ba:dd:d5:a2:
                    de:a7:75:81:07:86:27:8b:92:a5:2d:5d:c5:a4:0d:
                    93:8b:cd:49:46:47:be:ff:36:95:31:f5:71:be:6e:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E0:D2:65:40:43:F2:A2:9E:FB:50:86:2B:88:BB:C2:55:89:85:69
            X509v3 Authority Key Identifier:
                keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:bb:b6:e4:43:b0:2e:82:cf:4e:66:a4:da:51:45:f5:30:a8:
         36:21:b8:76:e9:a7:b6:cd:79:2d:00:ac:3c:2b:e4:1a:8c:99:
         79:34:14:fb:1e:97:eb:2c:ca:ee:b6:d8:50:fa:98:62:47:a6:
         c2:f2:2c:a1:35:8a:6c:88:53:70:a9:e5:3e:56:19:51:26:ed:
         74:4b:a9:58:ae:37:44:38:4f:a7:75:73:4c:17:69:cf:b8:7e:
         c7:b5:88:aa:76:fb:b2:d1:f2:92:25:ce:15:d3:06:8c:45:e7:
         56:d0:ca:90:e0:7e:28:4c:fd:3d:99:a2:49:53:d0:49:63:f4:
         e6:6d:d6:f9:63:79:13:c3:8c:50:59:a6:c1:d2:a0:5d:00:df:
         d2:9a:47:25:d5:91:bc:ff:b7:dd:14:6f:a3:0c:77:fe:0a:d4:
         f9:cd:73:cf:5a:03:22:e5:65:0a:e6:05:aa:e6:fe:98:a1:e2:
         0f:20:cd:ef:8a:65:90:f0:e7:49:17:1c:8f:2e:1c:35:81:36:
         43:1b:19:b8:f7:6d:96:85:45:ff:6d:76:4b:67:21:74:34:17:
         0a:6e:9b:2e:7d:53:70:0f:15:b7:b0:9f:c3:9a:62:e7:6f:71:
         69:55:99:01:84:62:5a:84:f4:ba:bd:b5:32:45:01:91:4b:67:
         f8:ca:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:57:58 2024 by rpki-client on console-ams.rpki-client.org