Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
File:                     IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft (raw, json)
Hash identifier:          WFJ+hjzOBM3mm7zKAYE+IERk3Bu5jqpNXw2ThtHbBP0=
Subject key identifier:   01:0C:D0:F5:68:EF:E2:04:5F:09:AB:1E:AE:F8:A9:8E:E2:1C:45:00
Authority key identifier: 22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34
Certificate issuer:       /CN=229a038176c796ea4f2769f6be3cace1a3597634
Certificate serial:       018F44C494A9D2342A02C23F4E7D83BAAE81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 18:01:24 +0000
Manifest this update:     Sat 04 May 2024 18:01:24 +0000
Manifest next update:     Sun 05 May 2024 18:01:24 +0000
Files and hashes:         1: IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl (hash: YJv2Bs15weyRBUpZtFIGJh2yD59iYvq9gktTo5XdYSg=)
                          2: zjk_Q0cuhc64VIKYYz21Nn1FeuY.roa (hash: QT/lZQEqi1XWX7KpVpVaaWmL3tWknjlE6VhT8EYJkqk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:94:a9:d2:34:2a:02:c2:3f:4e:7d:83:ba:ae:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229a038176c796ea4f2769f6be3cace1a3597634
        Validity
            Not Before: May  4 18:01:24 2024 GMT
            Not After : May  5 18:01:24 2024 GMT
        Subject: CN=010cd0f568efe2045f09ab1eaef8a98ee21c4500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:5b:f9:b1:c4:52:69:f2:5f:1e:eb:9d:96:
                    cd:5b:32:61:a9:7a:fb:b0:cb:c8:8c:7f:0f:5a:6e:
                    35:4e:61:02:c7:f4:af:a1:13:83:a4:15:b2:84:49:
                    63:eb:87:36:64:4f:be:7a:c6:c0:3f:8f:89:cf:d3:
                    ab:30:ea:d0:a0:97:24:38:78:d9:59:cd:be:24:71:
                    0b:02:8a:e4:fe:12:84:3f:51:cc:7e:46:ce:3b:27:
                    be:56:76:1e:4b:6c:a3:da:4f:ef:64:44:2c:17:ff:
                    31:7b:cd:09:b5:8c:16:4b:35:68:42:6c:48:42:e0:
                    37:43:3d:e9:ee:11:ce:18:81:aa:95:e1:4d:cb:c0:
                    5e:1a:86:01:ab:59:46:ac:49:ad:2e:82:f4:ff:04:
                    8d:25:fc:55:85:42:c6:28:cb:c1:57:b3:a5:66:b3:
                    ed:32:dc:e3:17:fc:02:0b:e2:dd:c1:6c:b8:de:77:
                    f4:b8:24:c7:cb:6b:d6:d6:24:95:1c:94:5d:61:c9:
                    eb:a4:13:41:d5:b0:72:86:5e:43:89:03:c4:47:5a:
                    63:1b:21:37:97:92:86:d6:4c:29:5a:aa:75:53:cc:
                    77:76:36:ba:bd:59:b6:3d:c8:cf:d4:ba:eb:dc:f7:
                    7c:d2:b3:8b:c4:67:5f:b1:1d:80:ac:fa:b6:d9:f7:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0C:D0:F5:68:EF:E2:04:5F:09:AB:1E:AE:F8:A9:8E:E2:1C:45:00
            X509v3 Authority Key Identifier:
                keyid:22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:be:36:08:27:b3:13:92:1a:2e:ce:d1:25:4f:67:20:6a:95:
         3d:70:bb:b9:41:07:7e:f2:30:20:a4:37:37:e7:2b:a0:9b:08:
         3d:81:af:91:ab:c2:87:4b:91:32:e9:9a:02:1a:ed:7a:da:7d:
         c1:cd:af:2a:45:f8:49:ba:74:a4:9e:0f:9b:fb:1f:1c:0e:24:
         4f:55:6b:d6:c9:39:e8:8a:c6:21:f1:97:67:05:43:ca:ea:d8:
         86:07:73:a8:ee:6e:8b:11:58:2c:f6:98:50:86:da:a7:82:95:
         34:b0:8d:7f:e6:41:35:d7:16:ec:15:26:06:12:ef:41:85:7a:
         48:e2:dc:c3:41:9c:d6:bc:ba:74:57:c2:98:4d:5c:4d:69:23:
         5d:64:b4:fa:2f:72:30:71:de:e2:57:cc:84:ef:3f:ff:d3:22:
         ed:14:e3:60:c0:1e:05:1c:22:4e:af:36:43:b2:ac:62:80:bb:
         bf:6e:da:c0:f8:f7:75:2a:60:89:cc:db:69:40:6f:01:27:05:
         a1:d5:cd:04:97:31:96:0e:a8:61:43:d5:ba:71:71:af:19:c0:
         2e:eb:14:9a:7d:80:0a:80:9e:d8:7a:19:41:ff:ca:8b:66:9f:
         95:ec:f2:10:ef:f6:af:61:9b:19:8b:51:11:69:53:c6:16:86:
         99:e4:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:51:03 2024 by rpki-client on console-fra.rpki-client.org