Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          gpsYPgqh5fyZRXJGznkO8YE6wVGN3ifz+Ck5cYoKoAA=
Subject key identifier:   F8:98:7C:1F:1D:A3:4B:F6:62:A0:3F:67:7D:AA:7B:4B:F0:D8:BC:BD
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       018F4AC63ED459E8F0C31B6788F54D1CC6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          1155
Signing time:             Sun 05 May 2024 22:00:57 +0000
Manifest this update:     Sun 05 May 2024 22:00:57 +0000
Manifest next update:     Mon 06 May 2024 22:00:57 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: lELC9NbDKb979EkfEgsy6Q/X6kqdkEV6xo4f4I4Jdhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:3e:d4:59:e8:f0:c3:1b:67:88:f5:4d:1c:c6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: May  5 22:00:57 2024 GMT
            Not After : May  6 22:00:57 2024 GMT
        Subject: CN=f8987c1f1da34bf662a03f677daa7b4bf0d8bcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:e1:7b:15:9b:b6:59:15:75:19:a2:0e:ec:
                    81:a5:25:f8:47:11:12:eb:93:53:93:99:19:0c:2c:
                    24:2b:4a:fd:01:46:8b:1b:a5:7c:b0:a8:0a:61:8d:
                    63:c3:60:8b:91:b3:af:14:e2:e9:57:c5:af:82:17:
                    8b:ec:a0:37:4a:db:69:9a:b0:8b:fa:1f:6a:41:6b:
                    86:e6:dd:0d:02:ad:5c:0f:f3:2d:9b:a4:70:53:83:
                    1d:d0:e7:4d:a7:0a:e5:9f:97:d1:96:68:10:c0:63:
                    37:27:de:3f:13:01:af:d5:17:99:88:fc:fa:5a:f6:
                    cf:ec:5d:92:70:f2:b7:c4:5b:43:60:ec:e1:5c:51:
                    11:b5:7a:4d:1b:f9:4a:59:89:68:47:76:89:e5:7e:
                    06:d9:35:02:a2:7c:9a:7e:4d:4b:09:7f:11:4c:a7:
                    7a:ab:7a:25:56:d7:e3:35:71:2a:e8:20:d6:67:f3:
                    c0:c6:af:6c:65:f1:40:5c:5c:49:40:4c:5d:b5:09:
                    97:37:a7:30:cb:1d:3f:5c:f6:5a:7a:b5:15:1e:a4:
                    68:5a:31:74:a9:3e:2e:c8:71:dc:52:98:56:89:10:
                    2e:40:59:85:6d:0d:e7:af:05:bf:a9:9a:c0:fc:d1:
                    80:ef:07:c7:94:9d:1d:ed:ec:aa:ee:9a:9a:a4:50:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:7C:1F:1D:A3:4B:F6:62:A0:3F:67:7D:AA:7B:4B:F0:D8:BC:BD
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:36:03:11:fd:df:8e:c7:33:6f:86:15:e0:12:6d:23:de:
         a0:d7:d5:54:49:a9:47:e2:b5:4a:cd:b2:4c:14:8d:2b:74:ae:
         84:f1:c5:f6:3a:88:12:0a:fd:67:b2:2f:fd:5a:38:40:a6:6e:
         66:08:a6:12:5e:c7:2f:f4:7f:3e:b2:ee:14:64:b6:62:0c:f8:
         78:bf:d7:ac:55:e8:f0:75:0d:06:52:8b:c5:79:9c:cb:f6:fc:
         46:84:b0:e0:a2:cc:22:cf:cf:6b:be:e4:a2:ae:05:3e:1d:f8:
         d3:10:ba:7a:d1:45:b0:cd:fa:1d:b7:b6:36:95:2e:35:99:14:
         28:8f:e7:90:62:a5:3f:db:92:4d:38:c0:54:e5:22:30:4b:18:
         03:ef:4f:ee:5b:44:3f:c0:b2:67:f0:c8:d1:57:2c:84:e1:ee:
         f7:58:e9:a6:d8:7b:36:93:a2:9f:ff:d7:47:df:28:dc:db:ed:
         1e:09:06:9a:11:ca:83:44:f7:b4:46:66:b3:c0:e3:71:55:cb:
         6b:9c:eb:11:02:dc:60:7e:d3:8b:b4:87:a1:b2:79:9f:7e:f1:
         f0:2b:74:fa:b8:7c:9f:c1:34:0b:4f:d2:f4:c0:8e:a1:10:5b:
         14:2d:fc:e0:9c:a7:55:e4:74:18:e4:ae:d9:e0:2a:b4:6e:19:
         96:fc:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:00:17 2024 by rpki-client on console-ams.rpki-client.org