Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File:                     ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier:          tskH5jz5UuFKsNE4lLBUHf9gZbzHVX3XoN1IkqSH7Zo=
Subject key identifier:   C4:0D:BA:34:24:80:6D:2F:6F:44:8B:48:45:5B:0B:E7:BB:E4:1A:E5
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer:       /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial:       018F874AF4DB7F20DCC762FBD15B5673B635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number:          1132
Signing time:             Fri 17 May 2024 16:03:07 +0000
Manifest this update:     Fri 17 May 2024 16:03:07 +0000
Manifest next update:     Sat 18 May 2024 16:03:07 +0000
Files and hashes:         1: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: hcx3+YfqGtRhvUzcASSESjqxGXGtt7JsEoch/i8mCbE=)
                          2: jF--zQgHdIkVOLE4zfjP0pth92o.roa (hash: zGquy5ykAdu2cu8VYoYyjXdxbUFC2JptCxZ4kwElY8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f4:db:7f:20:dc:c7:62:fb:d1:5b:56:73:b6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
        Validity
            Not Before: May 17 16:03:07 2024 GMT
            Not After : May 18 16:03:07 2024 GMT
        Subject: CN=c40dba3424806d2f6f448b48455b0be7bbe41ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:5b:2b:9d:f5:0c:71:7e:ce:30:ed:be:34:
                    bc:ae:86:10:03:a4:b2:58:57:03:9b:04:88:06:2b:
                    8e:01:df:63:6a:1d:bb:b9:eb:82:e4:8a:db:f5:f3:
                    12:6e:c8:9a:31:b4:eb:52:21:6c:ca:ef:5b:cd:5b:
                    c2:e4:df:38:a1:06:f4:c7:89:e5:03:77:79:70:85:
                    73:41:c4:b3:25:01:f8:3b:e4:45:07:22:23:81:56:
                    4e:ac:4d:75:d1:28:88:9e:07:f8:f6:0b:4c:70:65:
                    41:8c:c3:fd:bd:0e:2c:da:ea:3e:cb:c7:67:cb:52:
                    69:f6:c7:02:41:49:39:7f:cb:19:33:d1:6d:c0:6e:
                    cd:23:8a:c2:5b:47:e5:cc:cc:e9:3f:32:23:44:81:
                    cf:79:8c:ee:cf:09:dc:f6:e6:e1:a2:57:1a:47:17:
                    e2:28:1a:52:e9:6d:8e:8a:f9:39:02:08:26:7c:ed:
                    83:1d:13:e6:67:f0:d5:42:e6:d7:e0:8c:51:20:99:
                    b6:51:65:a3:8e:21:d4:c5:94:91:59:17:e3:bb:e5:
                    14:50:f7:41:b6:9f:59:94:f2:72:9e:d7:12:7f:39:
                    7e:56:1c:3e:ad:ff:6c:ea:d7:09:65:89:86:04:ed:
                    11:91:c9:be:48:a5:76:c5:ae:8c:a2:c1:84:39:62:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0D:BA:34:24:80:6D:2F:6F:44:8B:48:45:5B:0B:E7:BB:E4:1A:E5
            X509v3 Authority Key Identifier:
                keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6a:a8:40:33:a6:04:dc:2a:97:4d:05:46:81:3a:a5:61:a5:
         ef:82:a9:37:aa:2c:6e:a9:55:4d:80:93:b9:8a:88:0e:91:52:
         88:ae:ca:51:3b:3c:10:ef:9c:df:1f:42:44:4b:a4:5d:fd:57:
         c8:e7:5d:b9:19:b3:0e:50:f3:c5:bd:86:53:4b:30:72:ec:db:
         a2:03:94:71:23:d1:23:7f:bd:b1:9a:e1:11:50:7e:58:27:94:
         fe:50:11:de:92:5d:78:87:0c:56:a0:a1:f7:1d:57:a2:8d:0d:
         46:89:4f:73:d2:a0:ff:b1:d1:5a:e2:49:3f:1f:b6:4e:2b:94:
         da:5d:3c:f4:cd:35:76:74:38:91:99:e6:fc:7e:8c:bb:12:2d:
         14:da:82:61:95:4e:a6:18:3f:63:0b:38:28:b7:9f:d0:18:92:
         cd:fd:c7:fa:35:7b:a1:b4:9f:03:77:21:0c:70:f3:e3:af:e7:
         07:99:66:52:47:13:2b:8f:d5:3d:a8:6a:cb:5d:e4:6f:58:f1:
         72:ec:59:f4:a9:74:29:da:1a:b2:49:1b:35:92:27:96:e7:ed:
         f7:5b:71:c4:ca:d3:01:44:47:d9:80:3b:e2:f4:54:57:04:3f:
         28:d8:cd:b8:56:2a:73:29:5e:53:29:aa:44:c2:25:81:43:43:
         f3:a9:b1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:08 2024 by rpki-client on console-ams.rpki-client.org