Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File:                     1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier:          O0C33btGX2zX2XLZJSkES/gaVzLmHxG68xC9/kblXWs=
Subject key identifier:   C6:5F:0A:B4:23:7F:EB:61:12:AB:F9:F1:DE:39:F5:F3:8A:F5:55:F4
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer:       /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial:       018F448DC6492C947666301AF75B9487B6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 17:01:32 +0000
Manifest this update:     Sat 04 May 2024 17:01:32 +0000
Manifest next update:     Sun 05 May 2024 17:01:32 +0000
Files and hashes:         1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: omlvBO8dGgwOq4EO7Mi+Dvm9nnHanSidcoChUeEomTU=)
                          2: FrBzCGScdiR6PZVbB3gLa8WVQ3U.roa (hash: ILPLPqvvJX20vjG0fweZmD3lrCfWDpSOyn1qyR0Svo4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8d:c6:49:2c:94:76:66:30:1a:f7:5b:94:87:b6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
        Validity
            Not Before: May  4 17:01:32 2024 GMT
            Not After : May  5 17:01:32 2024 GMT
        Subject: CN=c65f0ab4237feb6112abf9f1de39f5f38af555f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:0d:07:f0:58:eb:03:d3:35:56:95:96:25:
                    46:ab:76:18:c3:82:9a:49:4f:74:87:e1:24:17:1d:
                    00:86:bf:ca:27:c8:91:dd:f6:e3:b9:3f:05:de:01:
                    71:bf:b1:30:76:ce:52:02:7e:27:8a:50:76:1b:2f:
                    92:7e:69:d3:bb:ee:6d:32:25:65:0c:bc:84:77:2e:
                    c8:cf:4f:4e:39:39:6a:65:b4:be:4e:d1:2e:33:4b:
                    5e:cd:14:83:f2:43:1f:d2:47:89:96:da:ad:34:24:
                    c4:e3:da:c4:6f:d7:0c:68:4a:ee:f2:d1:0b:64:b6:
                    ea:2b:8d:4c:68:d3:07:87:b1:09:6f:12:2c:92:78:
                    f6:3a:c3:3d:33:0f:5b:79:ac:76:b2:02:94:79:25:
                    09:12:e8:94:5f:10:5c:9d:21:a2:b4:cc:e3:99:04:
                    3f:09:d6:d6:37:e3:dc:be:8f:9d:70:97:6c:31:d9:
                    e2:ed:e0:28:51:85:f4:89:3f:af:b7:cd:98:e6:75:
                    be:92:76:88:44:7f:9a:af:66:33:ef:e8:24:57:8b:
                    88:ae:d9:e6:49:2e:e4:66:34:4b:79:de:00:e3:fd:
                    08:a4:23:f3:4a:88:3a:55:75:9b:66:89:9e:99:bb:
                    07:8a:a7:72:b0:70:73:ad:4f:10:37:a2:e2:3d:11:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5F:0A:B4:23:7F:EB:61:12:AB:F9:F1:DE:39:F5:F3:8A:F5:55:F4
            X509v3 Authority Key Identifier:
                keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:85:66:12:d3:35:ee:5b:de:62:6e:62:c5:7a:8a:bf:55:77:
         1f:21:ed:15:f5:9f:83:b0:06:61:96:32:eb:f9:21:bb:19:08:
         04:38:ac:b1:40:27:28:8d:5c:6d:bd:06:54:cb:ec:bd:d5:f6:
         41:1f:e4:dd:75:ee:cf:ad:04:be:e2:36:e7:35:94:a6:01:22:
         c2:83:bb:68:87:a1:ec:60:16:45:a9:18:24:3f:0b:d4:18:34:
         62:0c:1c:fb:d1:f9:98:81:26:2e:fe:83:7b:7a:48:d6:03:fa:
         21:51:3e:c0:5f:51:1f:44:da:1a:23:47:ee:3a:fe:f6:4d:c8:
         73:a3:3a:78:40:17:88:3b:4e:f3:cd:66:1c:59:45:2e:08:cc:
         6d:21:b7:68:c5:d1:ed:c3:e2:2c:3f:d0:40:4e:f4:ce:79:5d:
         3b:c3:de:ff:67:1e:58:b2:3f:d6:ea:d2:00:b3:dd:63:cb:c9:
         3a:e8:59:d8:26:67:d1:fb:2e:5b:11:b8:17:47:4a:b4:49:9f:
         21:5c:7e:ce:17:33:6e:06:74:30:37:23:1a:56:fc:49:fc:95:
         e6:25:a7:61:7f:d7:37:8a:43:38:6e:b7:fc:99:67:48:8e:b9:
         8e:7a:d9:71:6e:48:11:c8:98:23:05:86:b8:c8:41:ac:3c:71:
         52:bb:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:29:58 2024 by rpki-client on console-fra.rpki-client.org