Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File:                     1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier:          VpUc5bbpCV2FYWSI2TYJnUulG4LFejVk6wPOQ81fklM=
Subject key identifier:   7A:75:B9:74:C6:2C:5D:10:F4:8E:50:F5:B3:40:1D:51:91:B3:75:25
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer:       /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial:       018F41C3D10049F843B948ED2AE73948FEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 04:01:42 +0000
Manifest this update:     Sat 04 May 2024 04:01:42 +0000
Manifest next update:     Sun 05 May 2024 04:01:42 +0000
Files and hashes:         1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: 86kCYY+Ctix5RZmSeejSnk1/dgwiP8FV9SoyyIbSp3c=)
                          2: 34mBfBSBhY2znZv2Eq8OmXwS0oQ.roa (hash: 196/1w/got0RbLGOKsyvH8ZVKpPQBGOnhKCsDOVW7EI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:d1:00:49:f8:43:b9:48:ed:2a:e7:39:48:fe:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
        Validity
            Not Before: May  4 04:01:42 2024 GMT
            Not After : May  5 04:01:42 2024 GMT
        Subject: CN=7a75b974c62c5d10f48e50f5b3401d5191b37525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:78:27:38:c5:26:b8:1f:d9:f4:b7:ec:12:
                    b9:d2:5a:dd:ea:28:24:ee:18:f8:79:63:99:4c:2f:
                    9e:5b:08:e3:cb:6d:3d:fc:a2:03:11:84:d9:b3:c8:
                    53:69:4a:5a:43:4b:20:71:82:6a:33:3a:7c:3c:a6:
                    e8:45:c2:56:40:15:0f:62:18:1e:3f:6d:ed:26:3a:
                    ea:87:57:ef:25:c8:a6:ee:b0:c1:e0:c8:2c:bb:2d:
                    9c:3b:c7:d2:6a:29:66:75:e0:56:59:3c:77:44:99:
                    ed:57:eb:9d:f6:28:a7:b7:5e:d1:2b:02:a1:2a:34:
                    80:dd:cd:a7:04:41:22:4d:a7:02:52:83:7c:c8:30:
                    c9:b6:6f:4c:a1:42:c4:18:09:9e:fe:41:24:17:87:
                    7d:1f:fc:c6:76:04:9e:8a:f3:74:5c:0b:22:06:09:
                    6c:dd:50:1a:68:af:1e:03:e6:f4:ef:76:b3:75:55:
                    68:16:9b:15:05:11:c8:91:87:d3:4c:5a:d7:fb:80:
                    22:9d:45:36:71:ff:5d:f6:db:55:72:fb:89:d2:b1:
                    a0:a9:6a:0a:b8:36:b4:1c:41:13:51:8c:bf:c2:c4:
                    43:05:d3:81:e6:47:c7:51:70:4f:ea:8d:c3:3e:24:
                    68:e2:4c:0b:2b:08:3e:a7:1d:2a:cb:aa:d8:6d:98:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:B9:74:C6:2C:5D:10:F4:8E:50:F5:B3:40:1D:51:91:B3:75:25
            X509v3 Authority Key Identifier:
                keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:17:43:fc:42:5b:1f:34:41:2a:ef:d8:6e:fb:48:71:53:4e:
         1f:da:00:d1:71:1a:20:6d:10:2b:2d:71:0a:aa:5c:b9:c0:d1:
         ac:01:9a:c6:6a:43:2f:e4:86:14:81:d3:28:89:47:96:7e:a0:
         cb:2e:d8:5a:49:50:cd:5e:4a:e2:5c:26:50:5d:e3:bc:9f:45:
         81:fe:54:94:8b:46:a6:99:09:15:b3:d9:c8:af:79:a3:6f:1c:
         b9:97:4c:7f:94:8d:1c:da:b7:fb:e8:ee:55:1c:72:59:c5:8d:
         4d:4c:2c:7b:60:55:90:04:07:fc:70:90:22:05:cb:37:c6:0f:
         c5:c7:7b:d0:b2:81:61:d4:ec:8a:73:64:10:c4:cc:fa:cf:c0:
         1d:e1:85:f5:90:8e:d2:91:89:ac:d4:d8:23:01:e3:43:3d:a9:
         a2:ca:5f:8b:d9:2b:22:36:b8:37:aa:24:2a:dd:39:00:91:7a:
         0c:8f:67:bb:d6:a8:2e:10:73:7b:e5:5e:4e:fb:59:54:24:67:
         09:0c:f1:4e:4f:89:07:8a:98:74:34:00:5d:e5:a0:41:78:b5:
         bc:55:cd:c8:1e:bc:27:f9:43:d2:dc:92:6d:1c:75:c7:af:99:
         83:dc:75:23:f2:89:7d:6a:e5:35:e5:10:a9:c7:94:9c:be:68:
         9a:96:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:57:27 2024 by rpki-client on console-ams.rpki-client.org