Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File:                     0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier:          Z9HUKDix1367a3Im8QMjm7L5DPifGMEiHeT3PabPJZY=
Subject key identifier:   A8:39:64:60:66:EC:E1:60:51:C2:5A:B2:42:65:EA:80:76:04:74:B0
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer:       /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial:       018F2D298495B55D4AD98B126DC043297B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number:          1148
Signing time:             Tue 30 Apr 2024 04:00:46 +0000
Manifest this update:     Tue 30 Apr 2024 04:00:46 +0000
Manifest next update:     Wed 01 May 2024 04:00:46 +0000
Files and hashes:         1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: QgGw1IAgjFO924HxwwJ1C1rGM/CpuLhy9y9duRkSQzc=)
                          2: XHDV7Dok1AaTGVP1h8rUaQd5zDI.roa (hash: 3xd3PlI/hQZgoKHGo9N6r6620yhqIasltWgm0BgfVGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:29:84:95:b5:5d:4a:d9:8b:12:6d:c0:43:29:7b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
        Validity
            Not Before: Apr 30 04:00:46 2024 GMT
            Not After : May  1 04:00:46 2024 GMT
        Subject: CN=a839646066ece16051c25ab24265ea80760474b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:83:98:a2:43:7e:1d:77:b2:2a:79:16:01:
                    79:cd:48:72:4b:11:9e:31:04:86:cc:91:51:c6:eb:
                    02:b3:ff:86:de:05:94:92:1f:7c:75:7b:3d:b2:8a:
                    03:8c:0b:5f:ce:db:19:fa:bf:41:e5:13:42:a0:e9:
                    70:ae:44:8a:d6:2a:01:01:2b:2c:de:0f:f8:da:ed:
                    b5:fe:95:27:da:cf:34:ca:7b:e9:43:46:58:4c:d7:
                    57:00:9b:2f:c1:bc:b7:a9:c3:04:92:6b:41:6e:48:
                    91:29:45:41:eb:c9:e4:ae:0e:da:88:81:42:54:cf:
                    b9:7a:c3:0d:3a:87:66:2c:9b:bd:ec:a1:74:7b:50:
                    6e:b0:72:03:11:76:cf:c5:a3:9f:6a:28:42:d8:f3:
                    bb:09:df:0b:9b:e9:55:b3:04:db:29:16:41:20:44:
                    64:be:ee:db:72:32:0c:19:dc:5e:38:f6:50:2f:49:
                    0d:22:a3:a8:0e:2b:36:ab:5e:db:7d:8d:a4:54:77:
                    6c:70:f4:71:b8:71:ee:f5:ec:45:d6:dd:cd:f3:a5:
                    ed:95:4f:8f:3c:71:3a:d2:e0:48:15:f8:f9:0a:52:
                    35:e8:c9:56:84:7b:ee:03:55:32:f0:cb:8e:a5:7d:
                    01:93:84:c1:5f:50:4a:5f:41:c5:f6:8d:3a:89:90:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:64:60:66:EC:E1:60:51:C2:5A:B2:42:65:EA:80:76:04:74:B0
            X509v3 Authority Key Identifier:
                keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:be:69:58:f9:02:fe:aa:bc:b4:b8:53:81:78:f3:96:de:
         c3:e1:32:72:16:2b:3a:e9:be:6e:07:c6:04:99:33:0a:b9:d5:
         14:2f:59:67:a3:67:e9:f3:36:6b:31:a3:18:7c:ad:eb:7a:ec:
         f4:6a:05:0b:05:98:a7:08:eb:f3:5a:5c:43:ef:a8:71:b3:f2:
         6b:cc:f0:f9:e7:10:67:8c:07:89:ee:a3:7a:a5:8e:ff:3b:0e:
         be:66:1a:57:49:51:6c:95:db:62:fb:2b:23:5b:3a:ff:0f:3c:
         cf:f0:b1:f8:3f:c0:1b:98:63:d2:76:ed:eb:6b:2c:99:5f:df:
         6d:9d:ad:c5:be:a7:f7:25:b1:bb:47:74:3b:44:cc:1e:75:e8:
         be:a3:20:ce:08:b0:40:df:7a:b6:cc:f3:82:65:90:f3:bb:fa:
         4d:1d:36:07:13:88:3b:ae:ca:69:78:50:72:36:ad:dd:a7:a9:
         a1:e0:26:be:51:bb:d2:2c:eb:96:8a:40:92:77:b3:a3:9e:70:
         9c:89:d0:ae:84:74:72:8b:5b:33:67:a5:4f:0a:99:9f:89:14:
         38:6f:e7:71:9b:62:9e:6e:be:ab:61:76:61:34:cc:44:be:08:
         3b:b3:40:06:a5:00:17:d1:f6:a0:a3:b3:f3:12:6a:fe:6e:e7:
         8a:67:32:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 11:48:51 2024 by rpki-client on console-fra.rpki-client.org