Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File:                     D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier:          30JOif5wWZooYa+jZMfdk6gBl3nX/CdRkGxyJnz6F4Q=
Subject key identifier:   40:53:B3:B6:16:1C:8A:6C:2F:8D:23:04:B6:DA:3E:79:F7:07:FC:D6
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer:       /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial:       018F381D2BCEE7853C9ABC7A1638064157E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number:          1165
Signing time:             Thu 02 May 2024 07:03:06 +0000
Manifest this update:     Thu 02 May 2024 07:03:06 +0000
Manifest next update:     Fri 03 May 2024 07:03:06 +0000
Files and hashes:         1: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: JgnPckH8F5tJM5XiH85QYFTcL+2ynocfT+GiQGGvQsw=)
                          2: Toe053mBO3oImHHBgNfyTfxR1LU.roa (hash: 4Wj2HDrTHoTY5d+9oCO/ih/+GifRvhZGeMLeZeykBvg=)
                          3: YhUsbq7srD4mKALhZSZAv2AuNy0.roa (hash: tNUgA6UiwEnkHAn7jnMlMzgtBttoJrm6i6PPMlfXaHw=)
                          4: giCBWON-J44v5k3VBMPJtsYzdwI.roa (hash: /j9hYu7445Fnqvp55EfL/BXfjNLPCw6i9ja7Z48p0D0=)
                          5: tYr47OESsNA3SFhYFvGQ_T5PG_g.roa (hash: e82XMyooaQDPKRIghOS7zUe9/PFpc4Qc/VMynSEYQxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:2b:ce:e7:85:3c:9a:bc:7a:16:38:06:41:57:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
        Validity
            Not Before: May  2 07:03:06 2024 GMT
            Not After : May  3 07:03:06 2024 GMT
        Subject: CN=4053b3b6161c8a6c2f8d2304b6da3e79f707fcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:eb:01:d2:f2:b6:85:a2:95:f7:a7:f9:8a:
                    5d:6b:91:8f:69:2e:f7:e6:88:8a:87:fb:13:82:3e:
                    93:e7:dc:89:f9:69:ba:92:f7:c0:3b:19:e5:03:15:
                    40:79:d7:d0:40:d2:14:4c:cf:1e:b0:e1:57:64:6b:
                    1e:b6:17:88:5f:e7:0f:ca:0f:27:4f:ac:98:39:3f:
                    ce:42:ca:dd:bc:d2:25:1f:b8:0c:c1:1b:3b:62:07:
                    f1:19:c8:77:7d:21:5c:3e:a0:0f:41:f8:5e:96:1e:
                    c6:4b:86:2a:ec:00:21:03:bb:90:fc:df:f0:9e:fc:
                    e7:fb:44:3a:ed:78:88:be:5c:a3:e5:ea:be:4d:89:
                    db:63:e7:01:c6:f6:1f:5c:ac:fc:80:15:b0:7c:c1:
                    b7:5b:ef:84:b4:69:6e:37:3d:cf:ec:97:4b:39:24:
                    26:d6:bc:1e:65:42:28:bf:5e:e0:a6:75:fd:7b:ce:
                    ce:64:07:b1:50:c6:28:ee:81:d2:0b:db:66:01:a5:
                    8d:be:61:ed:3c:c7:61:90:8d:bf:b2:2a:8c:78:52:
                    ad:f8:49:09:7b:a5:58:4e:a8:33:f7:cd:20:4d:e8:
                    c3:ce:64:89:87:97:89:a6:e4:fb:32:8a:5f:e1:6b:
                    06:49:19:20:7f:93:50:05:39:f8:aa:ee:81:72:d4:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:53:B3:B6:16:1C:8A:6C:2F:8D:23:04:B6:DA:3E:79:F7:07:FC:D6
            X509v3 Authority Key Identifier:
                keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:38:b7:4c:cf:d0:b9:7e:c6:15:d6:de:06:0c:c2:4b:49:
         e7:82:2b:9c:4c:bd:c7:d2:8a:73:a6:44:1b:00:c5:bf:7d:26:
         74:66:eb:c9:75:60:f1:2d:6a:26:0d:e5:a9:ee:60:84:71:16:
         89:41:dc:14:76:31:24:13:ee:d1:e0:4e:60:c0:d3:9d:bd:64:
         74:94:1b:2e:82:5a:87:ce:e7:a3:ae:b0:33:73:a0:d8:ff:08:
         6d:7a:ce:99:45:9f:f2:17:07:f2:23:de:82:e1:50:a5:0b:91:
         5e:a8:0b:b5:2e:44:ba:95:90:1f:42:ad:b9:a3:bf:b2:e8:33:
         f5:38:92:b0:52:b1:92:c3:a4:57:66:52:61:bc:af:fa:38:18:
         3f:19:4c:b6:65:b7:69:fe:74:a8:ce:88:0f:29:b6:9c:83:1f:
         6c:4a:e9:6d:e3:b7:ad:57:3d:ee:74:08:7a:90:1d:d5:29:dd:
         ab:72:43:a9:84:ad:07:ec:44:97:ab:f4:70:ac:19:e1:f7:b3:
         e9:91:78:46:0b:69:32:01:ec:96:fc:04:55:35:76:c0:5f:7c:
         7e:23:94:b2:44:16:8e:fb:58:83:28:cd:79:2d:2f:4c:a7:79:
         77:b7:69:80:20:5f:38:f3:1a:55:b0:92:df:e7:c5:5c:50:ea:
         17:86:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:36:12 2024 by rpki-client on console-ams.rpki-client.org