Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File:                     Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier:          rWtNuAlhwOp6gqJFaQWXI3KM40OuECbB3AoDf9ZB4ik=
Subject key identifier:   6D:B4:2C:F5:E1:3B:BA:B3:34:8A:40:9D:AC:03:29:7C:95:92:57:6B
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer:       /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial:       018F3776C5DF3BA87E6AFAAA0037882C6951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number:          1152
Signing time:             Thu 02 May 2024 04:01:21 +0000
Manifest this update:     Thu 02 May 2024 04:01:21 +0000
Manifest next update:     Fri 03 May 2024 04:01:21 +0000
Files and hashes:         1: BhHlkBqvgfUznKIhtb1FFJflTSc.roa (hash: 1hJQUyjSo/LZB7qrcW6UTXNW99et1+/0rkKXb9T9w7w=)
                          2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: 0+HgM/yZwDscB2dWvD6rFuofPZWkcD1W6NV4GzqvEqs=)
                          3: _Wb3WToh2P69MrbUzizIxI7kjxY.roa (hash: Bf/tzhtjIgTQqOnVwWYEa6VAOOs3RZ5NXA/vPvn5JfA=)
                          4: ngKcR3T7_oMmgJGib6Idz2NccNk.roa (hash: BhlfKNC3A6JNIaaMkJj+gLaTEPSgDlF/0+WUJ1Ubp98=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:c5:df:3b:a8:7e:6a:fa:aa:00:37:88:2c:69:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
        Validity
            Not Before: May  2 04:01:21 2024 GMT
            Not After : May  3 04:01:21 2024 GMT
        Subject: CN=6db42cf5e13bbab3348a409dac03297c9592576b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:0b:ba:03:45:d6:ca:ab:e5:ef:64:1a:30:
                    95:05:b4:d4:40:62:0c:81:09:05:c1:f6:44:fa:22:
                    32:88:fd:1c:67:f1:5f:38:02:7f:57:87:2f:38:23:
                    25:c0:86:fa:05:a2:ff:38:4b:7a:36:04:60:0b:d7:
                    e3:33:3c:62:d8:f7:7a:53:93:c0:85:1d:ba:a7:71:
                    89:80:b2:b6:7a:c3:05:33:98:5e:b7:6f:30:8a:5e:
                    72:99:68:55:b7:b0:d9:db:ec:d7:a1:cb:fd:75:35:
                    be:c0:1f:f5:da:2e:a2:a4:05:a6:7f:62:df:d6:ff:
                    83:e2:e0:13:5a:42:00:e0:02:5f:db:ec:80:26:b9:
                    f5:5b:a3:3e:45:9b:04:0b:bd:ec:eb:96:99:e6:d2:
                    d3:a9:e0:64:7b:f7:81:fd:04:a2:53:2f:7b:7f:d8:
                    95:7f:e3:1b:d5:09:59:cf:fd:6a:ec:f6:04:00:d1:
                    9f:93:27:be:34:c4:4b:a5:07:29:a0:8a:c3:81:f7:
                    9f:11:ac:c5:95:de:25:21:c8:bf:c5:f6:b7:22:b6:
                    39:ad:82:a3:6f:25:32:57:51:0f:c4:81:c2:28:cd:
                    fb:b4:ec:59:68:12:1d:46:8b:dc:cb:6e:83:7a:2e:
                    62:b8:0b:5d:76:71:9b:f2:a2:70:d1:3c:af:0e:38:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B4:2C:F5:E1:3B:BA:B3:34:8A:40:9D:AC:03:29:7C:95:92:57:6B
            X509v3 Authority Key Identifier:
                keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:11:c8:cb:11:54:03:ff:6b:e9:8c:c5:3d:43:1d:a6:9d:02:
         c4:5c:da:26:d1:ad:b0:29:f7:65:93:d3:2f:f0:7c:0c:f3:a8:
         46:62:49:d3:0e:ec:98:e9:8e:53:0e:3d:2a:de:ec:49:a4:74:
         15:3c:d2:5b:5e:b7:dd:4e:cf:34:88:3c:9b:ea:11:92:27:c7:
         26:c2:8a:f6:89:5c:c3:9c:29:4f:b1:c9:3a:7e:34:f1:02:d0:
         40:61:96:68:ed:be:95:8e:65:f7:13:a0:af:90:35:7f:2a:60:
         6e:b7:83:ec:45:d2:d4:d1:b3:13:1c:fd:60:1b:e5:e2:dd:18:
         9c:65:6c:c8:ce:86:ab:70:71:aa:a7:b1:5e:72:be:a6:e6:1b:
         a3:4f:f9:0a:e9:29:c9:c2:c9:b4:af:b9:70:d4:d0:f9:16:09:
         12:77:fa:61:1b:f2:2c:55:f4:e4:52:c2:89:66:90:b5:34:e1:
         1e:42:64:18:bd:08:60:1f:34:b1:95:02:a4:8b:c4:44:ca:d2:
         a5:2e:a5:f9:43:c0:88:3c:fc:59:b5:e9:f3:f5:96:92:1f:44:
         ec:59:16:ff:59:64:26:4e:b5:31:68:27:8c:fc:19:ac:78:43:
         fb:70:b0:81:6a:55:03:be:cc:3a:c3:1d:03:a2:d6:c4:b1:16:
         44:1b:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:55:21 2024 by rpki-client on console-ams.rpki-client.org