Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File:                     1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier:          J/drAwyZDFPkgP1WJjgVNxizyNomARiO9i8ZqDTDaqo=
Subject key identifier:   AA:7F:95:0F:A6:5E:EE:25:5B:03:A9:64:AB:5D:00:C2:6A:31:7A:96
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer:       /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial:       018F3BFABA11B3A01CB0D5D702DBFB68AEC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number:          1153
Signing time:             Fri 03 May 2024 01:03:58 +0000
Manifest this update:     Fri 03 May 2024 01:03:58 +0000
Manifest next update:     Sat 04 May 2024 01:03:58 +0000
Files and hashes:         1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: GZtVYEKMlEqZJW9WK3xKvl84vioAcSFnme+0ysRZ5gk=)
                          2: 69vpNJWYWZ1E-TGjBokCUMepuxs.roa (hash: jEgynBv61wT6MoL6E6NPlbRS8F5yr9efsIpeA/oKyoI=)
                          3: AZwhlsxC1K5W0MBkZifOdcMApRE.roa (hash: IXjVAj3p1cXEbjuuW0XBHDRWR01492+68557twQtyT8=)
                          4: DZNT48SieMJk1RFPYGnmt28d-yA.roa (hash: gHko4Jnnn3dteaM1tCpqTj7YlXro55/zGZBRinZyrj4=)
                          5: o4W31CnKgxta-Hj1usi8RWeZGao.roa (hash: SpfXW0v0LaOswFRz6pi7aSp47BVVm8ATHfyfCLBkUrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:ba:11:b3:a0:1c:b0:d5:d7:02:db:fb:68:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
        Validity
            Not Before: May  3 01:03:58 2024 GMT
            Not After : May  4 01:03:58 2024 GMT
        Subject: CN=aa7f950fa65eee255b03a964ab5d00c26a317a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:eb:a0:a1:d1:2f:ad:b7:91:ef:ac:52:12:50:
                    4c:27:07:83:61:72:97:b6:fb:cf:99:b4:dd:19:3b:
                    e1:a7:8d:4e:de:54:fc:20:5d:3d:2a:61:ed:9f:05:
                    e4:f9:ab:49:00:f7:45:a3:00:d3:63:b1:df:b9:b7:
                    c1:75:16:68:e6:d6:14:9f:ce:e8:54:1e:0d:72:c9:
                    8c:88:03:87:b0:e6:7c:29:58:c3:8f:d1:f6:59:bb:
                    e8:46:e2:20:54:4c:75:4f:31:63:44:53:24:78:9b:
                    78:c1:19:90:ea:75:ed:91:8b:86:ef:0b:d3:7d:c3:
                    a4:e0:95:41:89:2f:69:1e:db:19:74:fb:dd:6b:73:
                    7d:73:90:36:0c:e7:28:b7:16:3b:0d:91:87:5c:79:
                    af:0c:85:b8:2a:4c:e1:2a:d4:75:3a:b4:24:06:07:
                    eb:11:18:38:31:31:88:67:c8:69:81:b5:95:58:fb:
                    cd:d7:18:e9:38:03:4c:a0:14:94:e3:d9:1c:15:d7:
                    54:0f:08:db:d9:da:6e:4f:a5:cb:4d:68:3c:aa:e5:
                    fd:84:5f:73:34:8f:49:30:cc:02:0e:3b:69:f4:c7:
                    a2:ea:3d:78:00:e0:7c:bf:ea:88:e9:eb:3d:ef:e4:
                    b1:16:bd:95:9b:9a:06:5c:68:5e:f6:be:7f:eb:d2:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7F:95:0F:A6:5E:EE:25:5B:03:A9:64:AB:5D:00:C2:6A:31:7A:96
            X509v3 Authority Key Identifier:
                keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:90:c1:f8:4d:6e:25:40:d4:02:09:6b:4f:06:a9:e1:18:
         57:3c:4f:38:46:bf:b0:a5:58:7a:d1:90:e8:3d:3b:3d:b3:a4:
         b1:02:b4:73:bb:33:62:4f:fd:32:2a:d7:fd:38:4c:30:4e:c7:
         d3:53:96:5f:39:da:ff:94:c7:72:13:ba:7c:93:21:c9:5f:b0:
         e2:94:88:15:0a:a6:fa:8e:dc:89:4e:d9:2e:92:b3:f8:74:95:
         14:ae:3d:1d:81:38:f7:cc:0a:36:9f:27:c9:0e:31:4d:49:24:
         65:d0:88:42:c9:af:4c:af:fe:03:d2:6f:76:1b:04:3a:7a:16:
         4b:64:17:83:81:9f:71:7d:6f:e2:93:a5:f5:b9:4c:f0:08:0c:
         59:ff:3b:07:5f:03:4d:26:3c:e3:de:32:75:de:d2:ad:47:d2:
         b2:dc:e1:73:fa:7d:fe:92:7d:28:8a:57:8f:e9:0d:84:87:4b:
         74:f5:a3:e8:0a:94:d2:b8:0c:e5:c9:ba:bf:83:cc:6d:24:f2:
         bb:6a:52:8f:08:9a:58:53:a2:1f:c6:97:ee:e1:89:71:07:ed:
         3c:51:67:f1:1d:3b:ac:2c:ce:c3:8c:92:8c:62:3e:3f:71:3f:
         12:16:fe:16:a6:fb:93:f9:08:5e:6d:2e:1d:4f:30:c4:b4:d7:
         3e:22:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:51:27 2024 by rpki-client on console-ams.rpki-client.org