Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          JosSVaHMkVR2wsh5hYUDDxwSDA3WVi1J67uGtOqnG1c=
Subject key identifier:   C9:12:E4:C9:D4:3E:72:BA:27:DF:12:D9:41:F7:10:E6:5F:AE:2C:35
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       018F48331D5E5D767E585B9DCA88A9771733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 10:01:00 +0000
Manifest this update:     Sun 05 May 2024 10:01:00 +0000
Manifest next update:     Mon 06 May 2024 10:01:00 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: lglPu1BbJOLPgxBa/dexfTx2Mq+qzA+fYKw2/C3qBys=)
                          2: CfEWcn3-czq3YTQPAYKpdRG55zQ.roa (hash: RNU3sIHCmWKhjxX+Q8aeVHJ2GsT00F8A7jD6htvuULU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:33:1d:5e:5d:76:7e:58:5b:9d:ca:88:a9:77:17:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: May  5 10:01:00 2024 GMT
            Not After : May  6 10:01:00 2024 GMT
        Subject: CN=c912e4c9d43e72ba27df12d941f710e65fae2c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:1d:cb:3e:71:ec:e2:24:0e:7a:8e:98:bb:
                    9b:b1:71:65:95:28:95:eb:a4:83:2c:aa:3f:23:dd:
                    fe:82:7a:f4:49:8c:a9:5a:35:3e:53:8a:51:6d:34:
                    59:35:df:05:6c:a9:1e:25:4b:9b:ab:14:1c:97:13:
                    2a:1a:0b:42:8a:9a:01:9e:40:6a:e8:23:73:ae:13:
                    68:d8:06:f6:f7:e7:8a:f3:40:41:24:8f:73:a7:51:
                    2d:33:28:6e:b3:49:2a:78:d4:44:24:2a:d2:30:fe:
                    41:92:a9:23:49:a9:eb:b2:c8:9d:c3:a2:a8:7c:f4:
                    f0:0a:3d:e8:91:03:96:2d:46:14:0a:9d:2e:34:3a:
                    1a:76:49:3e:0d:2d:1c:9b:42:c0:81:4f:00:94:a8:
                    39:ce:83:b7:b1:4d:33:fd:a6:12:5d:61:7c:bf:74:
                    0b:4d:77:7b:c6:89:df:d4:a9:3d:17:7e:a0:8a:6c:
                    97:ef:c4:ad:0c:5f:18:e4:cc:cc:44:c8:6b:8b:4d:
                    c3:71:7d:48:0f:7c:cd:f3:e2:2e:95:43:33:ee:cd:
                    af:fe:78:b8:f7:ac:d9:39:f1:39:ee:e4:af:b5:dc:
                    21:86:d9:12:e2:19:dd:ea:23:bc:b6:5c:12:50:24:
                    d3:79:70:be:6d:93:85:15:1a:82:7b:3e:24:37:24:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:12:E4:C9:D4:3E:72:BA:27:DF:12:D9:41:F7:10:E6:5F:AE:2C:35
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:e9:2f:5b:c8:27:a9:ec:0e:db:7b:5f:15:96:9e:55:3b:
         bb:33:01:b7:35:5c:eb:22:4c:86:a1:0f:49:37:72:2f:a5:88:
         03:a0:75:76:46:91:54:a8:06:c0:a8:94:d4:92:8e:eb:2b:00:
         0e:66:10:46:2a:8e:e2:2e:08:d5:18:e4:d2:61:c0:67:5b:71:
         e2:02:d0:f3:3d:d5:66:8e:00:fb:02:a1:f1:3b:12:8e:74:f0:
         b5:ce:1d:7a:65:b4:23:ba:40:89:62:56:2e:08:ca:52:e9:02:
         ec:aa:68:ed:8b:5d:08:05:c3:c2:ad:bc:84:60:ba:e5:b7:13:
         17:1f:12:8a:20:20:57:4b:29:e0:97:e2:fc:01:37:75:a0:75:
         89:3e:7f:33:62:ad:db:42:6c:d7:d1:8a:00:1d:96:b8:3e:85:
         39:28:29:f1:1e:b3:d4:44:93:c1:62:dd:f3:46:0d:00:e6:f0:
         d8:17:8a:7d:10:82:52:b2:1e:51:cd:13:c7:01:b8:5e:62:ef:
         f5:8f:8e:a2:1c:07:10:4b:2c:97:d4:8a:dd:eb:6a:cf:6f:87:
         27:c6:21:24:1e:00:0e:f5:4e:c8:96:13:af:1c:dd:27:a4:ce:
         e8:0b:d1:7e:05:76:ad:e1:9e:25:9a:44:42:0b:93:97:1e:6d:
         f6:bc:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:01:09 2024 by rpki-client on console-ams.rpki-client.org