Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File:                     F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier:          0+ygXzr+4279daLBBxeyKxykJd5nx0rfxnJo7bNRNyA=
Subject key identifier:   49:A3:AB:32:4E:68:90:1C:CA:A9:57:D5:2B:0B:AD:E4:FB:28:2F:40
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer:       /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial:       018F532736B618617C944B1D5F02EF173AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number:          1160
Signing time:             Tue 07 May 2024 13:03:49 +0000
Manifest this update:     Tue 07 May 2024 13:03:49 +0000
Manifest next update:     Wed 08 May 2024 13:03:49 +0000
Files and hashes:         1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: oOUOXdMCm9ihbWyNv1w7qPLaeBGsw0muPA7FsHMERVU=)
                          2: rMe4BVEbuoXGjXCjXSPL_A3Os0U.roa (hash: SSaAFGzhcQY81RBoRHb1IcBpczlGfHlEBh7LIgC64DU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:36:b6:18:61:7c:94:4b:1d:5f:02:ef:17:3a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
        Validity
            Not Before: May  7 13:03:49 2024 GMT
            Not After : May  8 13:03:49 2024 GMT
        Subject: CN=49a3ab324e68901ccaa957d52b0bade4fb282f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:2b:04:8a:42:f2:3c:c7:f6:56:9b:17:c5:
                    5c:bf:62:b5:2c:e9:4e:12:60:44:6f:99:78:67:4a:
                    cd:dd:db:17:53:c8:78:5b:a5:c0:9a:c2:b6:de:56:
                    ca:22:6d:b0:ed:53:57:0d:bc:91:8e:b6:3b:8f:92:
                    e3:07:ff:04:53:8d:03:8a:99:b0:ab:18:88:a9:f3:
                    59:70:67:5f:82:b8:c2:94:d4:12:4b:4d:b4:ab:32:
                    2e:b9:ac:d0:86:d8:49:29:68:11:94:36:99:00:47:
                    df:36:14:5e:07:bd:bd:9b:bd:89:d7:22:ec:32:d4:
                    eb:59:0c:35:b8:1a:df:dd:09:36:00:32:ab:b7:1e:
                    0e:9b:02:60:4d:99:81:07:69:d4:d5:95:b7:3b:e2:
                    8a:5f:c4:33:91:8e:6b:67:15:00:e0:a2:0b:47:23:
                    81:fa:1e:4c:ad:74:ba:b0:3e:28:0c:da:d3:ea:55:
                    b9:17:3b:24:95:3b:5b:4f:c6:fa:48:0f:1d:53:4b:
                    f6:7a:bc:0f:92:6c:51:1c:40:80:96:3b:5c:52:2a:
                    03:35:7b:4f:18:60:d5:be:2b:2c:42:5c:f7:b5:e5:
                    84:65:2f:75:12:52:a5:ad:85:23:bf:d9:9a:1a:6c:
                    3e:e9:88:71:63:ae:04:c1:19:80:c6:bb:96:10:fe:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A3:AB:32:4E:68:90:1C:CA:A9:57:D5:2B:0B:AD:E4:FB:28:2F:40
            X509v3 Authority Key Identifier:
                keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:41:1a:20:ff:be:89:10:bd:c4:ac:c4:ad:10:5f:e9:9b:fe:
         82:93:49:ec:b8:fe:7b:b9:7f:83:7f:a2:30:c7:98:45:14:39:
         ab:e1:8e:a0:18:b5:b2:22:6b:ae:74:b7:c8:98:30:e3:51:c8:
         95:eb:57:8f:ef:9c:1b:b8:de:a4:23:8a:8f:30:c5:7d:2a:99:
         a7:af:3f:4a:7f:a2:cf:8e:99:59:13:f5:2d:97:39:19:f7:d9:
         39:73:50:26:ee:f5:6e:a0:cb:67:fb:b2:b0:6c:e8:55:a5:e1:
         72:c5:ba:05:81:fa:62:46:79:0e:06:8f:03:8b:f0:9d:03:86:
         50:8b:3d:36:d5:ed:5f:61:25:90:b6:fb:3e:bb:24:f9:01:fa:
         85:c5:47:f2:ca:13:8b:a3:be:fe:06:07:a6:51:ca:fd:cf:92:
         2c:aa:11:87:e5:75:bf:65:0a:93:3b:d3:43:eb:df:91:df:67:
         a4:2a:f4:01:04:bd:76:f1:bc:76:cc:7f:fd:d1:f0:04:ff:e3:
         cf:d1:96:09:47:b4:e3:3e:bd:48:58:ab:c1:9d:10:19:22:e4:
         a2:e8:dd:22:3a:84:c7:0f:f4:69:7e:ef:f3:d6:72:e4:d4:e7:
         43:de:41:74:28:64:52:ba:e2:59:ff:a6:78:c6:88:2a:ee:b3:
         29:27:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:02:49 2024 by rpki-client on console-fra.rpki-client.org