Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          Q55C4ZeXtM6ofrugh+IVSHFzfHitDeUYe0Prb6jwyQs=
Subject key identifier:   60:FC:52:2B:9C:48:05:0A:90:B6:39:1E:E4:9E:AE:61:DC:16:E5:F6
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       018F3DE8FFB2DB0F1774F52318FAF095AC59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          1153
Signing time:             Fri 03 May 2024 10:03:50 +0000
Manifest this update:     Fri 03 May 2024 10:03:50 +0000
Manifest next update:     Sat 04 May 2024 10:03:50 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: lx7CPjx1DL6ZgV4G5+ITXLjQHH9kRt90za8U1LJyTNw=)
                          2: 2qE9ZWiu947kTtnHKyzq0BUJ8J4.roa (hash: UGMXOvlnnURDD/toBkppvm5R+zhbT9gpadAah0aydeg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e8:ff:b2:db:0f:17:74:f5:23:18:fa:f0:95:ac:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: May  3 10:03:50 2024 GMT
            Not After : May  4 10:03:50 2024 GMT
        Subject: CN=60fc522b9c48050a90b6391ee49eae61dc16e5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:7b:e7:af:79:41:5f:25:e6:e9:ac:d2:b8:
                    15:d6:7c:a2:0e:d0:81:63:f0:e3:07:9e:b9:5c:85:
                    5f:f7:a5:1c:5e:de:bf:0e:2f:38:d4:c9:dd:c7:cb:
                    ad:ac:54:17:da:68:fc:e5:bf:77:15:39:db:46:1d:
                    60:ad:81:95:de:24:1e:8d:e5:0b:56:8b:0b:46:f5:
                    94:97:90:d4:1e:7f:59:f6:22:95:4c:47:9e:56:a9:
                    13:47:79:92:c1:cd:d2:3a:92:03:99:b5:e5:d5:7c:
                    87:95:85:8a:26:15:eb:e7:31:84:b6:89:22:f9:8b:
                    a4:0a:85:2d:ba:19:31:87:2a:6d:6a:ec:08:aa:78:
                    a0:f5:96:a4:d1:a8:fd:79:d1:8b:36:1c:b2:f0:a1:
                    85:e5:cf:4a:dd:58:80:2b:c2:c3:b9:1c:27:93:b5:
                    c6:9e:cb:06:c1:16:ca:c4:82:b5:bd:f6:61:68:e0:
                    1f:08:9f:9a:62:bf:52:4f:5c:1b:61:06:53:62:ec:
                    50:cc:59:14:52:50:7a:d7:df:af:25:0d:d9:f8:f7:
                    34:c1:94:ae:d2:62:32:92:da:6a:91:3b:85:0e:2e:
                    1b:1b:37:27:45:ea:f8:12:f5:c4:6c:e1:42:40:11:
                    99:68:75:ad:8a:8c:37:80:0b:2b:ff:21:0a:2f:42:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FC:52:2B:9C:48:05:0A:90:B6:39:1E:E4:9E:AE:61:DC:16:E5:F6
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:be:c9:6d:d5:3d:cb:a4:bf:90:c4:b0:79:10:b6:13:cb:8b:
         50:25:2c:74:5e:a3:6f:d8:5c:3d:17:c4:2c:40:f3:99:b7:6f:
         ae:f6:b7:87:7c:2b:a1:ed:33:cc:e9:88:00:02:e6:b3:27:13:
         d4:bb:d7:5e:56:87:d7:69:10:c6:7c:0f:2f:d6:0b:80:e8:0c:
         c8:6d:7a:9e:2b:28:07:a1:9d:2d:2f:ca:92:da:60:33:a0:1b:
         de:26:7a:4c:d3:e1:09:0d:aa:cd:26:ee:b5:20:d0:6c:2a:62:
         8d:29:22:40:5f:42:2e:b9:39:b6:b0:ab:ad:a9:02:35:29:0e:
         62:ac:9e:85:96:9d:20:12:8f:c1:13:34:24:6c:60:36:dd:23:
         6b:70:e1:ab:59:f6:b5:e5:5d:37:7c:85:e8:84:ab:dd:11:d3:
         6f:89:44:11:b8:8f:d7:29:76:58:83:cf:3a:92:02:e1:4d:c4:
         49:10:e5:d8:db:84:47:3d:f7:4b:a3:ee:ba:03:88:5c:f9:84:
         c5:d8:20:49:94:08:b7:55:f7:a0:c9:d1:4b:ec:87:ee:eb:de:
         5c:de:2b:19:5a:eb:ba:3a:1e:d0:78:21:77:4b:f3:5e:e8:32:
         30:65:dd:f1:ef:87:54:84:0a:7a:33:c3:5b:40:a6:8c:48:9b:
         15:59:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:04:47 2024 by rpki-client on console-ams.rpki-client.org