Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          yT3eqvdGln/Ww0DPz7iG9BtpPmVlWgsyKM84gHX5aUQ=
Subject key identifier:   80:8D:3F:DC:02:A1:EF:BB:91:DF:66:BB:4F:84:EE:16:86:19:28:D5
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       018F32517C7C4CF0075C31299D2A376B32FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0739
Signing time:             Wed 01 May 2024 04:02:31 +0000
Manifest this update:     Wed 01 May 2024 04:02:31 +0000
Manifest next update:     Thu 02 May 2024 04:02:31 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: dAQPX5l04AIu5pThmPA7V8X/R38UhvcylSY6WOc3kx8=)
                          2: nH1bkW5fYrec1XZWbaIW_NQr-EI.roa (hash: 41moE2WZfeAHiQcRBarbP6/AG70pQMAU5cdkkVjC8/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:51:7c:7c:4c:f0:07:5c:31:29:9d:2a:37:6b:32:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: May  1 04:02:31 2024 GMT
            Not After : May  2 04:02:31 2024 GMT
        Subject: CN=808d3fdc02a1efbb91df66bb4f84ee16861928d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:0b:e4:38:b5:5d:98:16:6c:7a:c8:3d:aa:
                    57:de:0a:8d:88:e1:d5:34:4e:1b:75:ac:14:99:23:
                    f9:6c:74:9d:51:34:f0:bc:da:40:9c:6b:f1:3b:ea:
                    e0:f2:ed:41:a1:fc:43:90:fb:83:4d:d2:19:b8:e1:
                    8d:11:5a:92:ca:e2:85:cc:d5:43:93:7b:e8:0f:24:
                    1e:34:9c:28:7a:a6:68:97:cf:11:25:62:8a:9a:e6:
                    18:87:7c:dc:0d:bb:64:a9:fe:12:72:f5:f1:44:87:
                    d6:6c:f8:5b:89:63:b3:9a:86:76:9b:9f:d9:9f:9d:
                    58:03:84:6c:ec:41:6b:ff:47:60:d8:36:4c:ec:d8:
                    10:1a:5b:a0:9c:79:a9:0d:a3:a5:a2:4b:9d:5f:eb:
                    5a:57:b3:aa:7a:84:f4:9b:b6:51:94:1e:2a:45:2c:
                    7e:f5:f3:8a:b5:2b:7f:b3:ef:74:03:ca:85:45:45:
                    43:b6:17:3c:83:bb:90:d8:69:b1:b8:c0:32:7f:0c:
                    65:18:43:c2:bf:89:3f:95:a5:c7:cd:93:4d:87:43:
                    06:71:5d:93:41:dd:23:d6:68:7f:84:e9:3a:8e:1d:
                    a8:2b:be:94:46:f7:4d:68:2e:c0:6e:4e:cb:98:a2:
                    84:e0:bf:ff:33:d8:46:00:35:09:1e:18:a1:22:c0:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8D:3F:DC:02:A1:EF:BB:91:DF:66:BB:4F:84:EE:16:86:19:28:D5
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:65:e2:dd:96:6d:f0:87:de:64:38:50:fd:4a:a8:80:43:60:
         60:01:0f:8e:2a:1f:7f:fb:5a:54:79:81:e4:d7:a1:63:51:4b:
         57:64:06:34:f8:9d:86:9c:b9:ec:1e:e8:dd:c3:75:9f:3f:d3:
         a0:a5:86:a4:24:ee:71:9c:b3:79:75:c4:23:d5:43:73:8d:2c:
         60:2f:0e:1f:4a:c4:02:5e:2f:14:fc:f4:2c:9f:2c:80:82:54:
         34:02:82:b2:50:a4:9a:8a:91:a0:6a:15:ca:75:f8:c4:fb:fb:
         1c:bc:d0:bc:87:dd:60:06:b8:9e:51:bf:9d:b1:05:49:ee:57:
         46:16:4c:05:ad:46:34:ba:1b:f9:95:c3:02:d7:5b:86:6d:ee:
         ba:d4:59:c1:52:01:a2:80:88:d7:5d:1e:d1:48:37:24:ee:d6:
         32:86:78:63:9e:05:48:3a:cc:2b:06:81:f5:2c:6f:d2:ad:1b:
         78:d9:71:fb:ac:82:49:26:04:cc:b6:cd:dd:33:e2:0d:5f:84:
         b9:00:ed:76:10:47:cf:c6:e9:da:82:fe:80:2e:6f:ad:00:39:
         bf:01:82:74:e8:e9:00:a4:23:9e:c1:19:48:92:f4:bd:cd:3a:
         75:59:02:e7:83:52:40:54:16:42:32:c9:89:23:30:ef:be:c3:
         e3:81:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:06:00 2024 by rpki-client on console-ams.rpki-client.org