Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File:                     9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier:          q04iJ7uoUmYMwZHQMZ5hSzPOzZ0ktQCqCc0T1EgoMOQ=
Subject key identifier:   7D:30:B5:F6:7F:15:71:0F:57:E5:1B:0A:63:E6:CA:EB:E8:E8:DB:3B
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer:       /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial:       018F362CECC0177EBA336B2A327307747083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number:          1150
Signing time:             Wed 01 May 2024 22:01:04 +0000
Manifest this update:     Wed 01 May 2024 22:01:04 +0000
Manifest next update:     Thu 02 May 2024 22:01:04 +0000
Files and hashes:         1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: FYsPQXRCv3LKwIdccMKCW5UeFVuchItyFQr9eXQWXk0=)
                          2: dg810T9psQX7OVr709bVl2kPKMQ.roa (hash: tLrtah/qZO1n1S9H7ONEHqgi2Dc/ydvOcqrROBvCMz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2c:ec:c0:17:7e:ba:33:6b:2a:32:73:07:74:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
        Validity
            Not Before: May  1 22:01:04 2024 GMT
            Not After : May  2 22:01:04 2024 GMT
        Subject: CN=7d30b5f67f15710f57e51b0a63e6caebe8e8db3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:28:28:fb:52:a7:17:b2:e5:83:aa:e9:43:
                    6e:c1:08:d8:3f:2c:f5:59:dd:87:3d:18:30:e2:c5:
                    e1:0e:35:89:08:09:63:91:e2:d5:49:d2:ed:92:23:
                    73:a9:a0:e6:4c:31:f3:80:2d:cf:83:c6:6c:f1:47:
                    de:70:d7:d1:aa:61:fe:21:c8:1f:05:cf:21:92:3d:
                    62:4b:0c:61:7c:8a:d2:70:cc:c4:1f:3b:81:dc:b6:
                    a7:25:f5:6b:21:21:20:0b:4a:6c:e3:e4:62:5f:17:
                    3a:f2:a7:fb:58:75:2a:cb:b2:85:15:b4:ee:36:7d:
                    39:70:ed:da:3e:d1:33:0e:a5:29:89:32:35:0e:a6:
                    e7:54:b0:b8:33:16:b9:3c:74:ee:f6:03:18:08:35:
                    e1:bb:98:67:14:f8:c1:67:4a:59:a0:86:6a:80:47:
                    3c:4e:a2:8b:09:95:47:a7:e3:1b:58:d5:6e:ed:d2:
                    73:3b:bf:22:6d:e3:3f:5b:ae:ed:00:a6:b1:ba:da:
                    ac:aa:75:b5:19:83:f8:0b:fc:e0:94:e8:57:b9:1d:
                    9f:2b:4f:ae:4f:9c:97:f4:13:3d:3c:31:7d:2d:50:
                    29:8f:93:f8:70:c6:d4:60:9b:ba:93:b4:96:59:ad:
                    61:6a:5e:59:f1:a4:17:40:c7:08:44:5b:31:79:38:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:30:B5:F6:7F:15:71:0F:57:E5:1B:0A:63:E6:CA:EB:E8:E8:DB:3B
            X509v3 Authority Key Identifier:
                keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:50:cc:d6:e8:48:0a:8b:c9:56:3f:0c:b8:ba:62:f1:22:e9:
         57:cb:fb:6b:d5:e0:e5:f2:76:ad:8c:a9:bc:70:25:46:66:9b:
         e4:ec:bf:91:b0:24:a2:c0:7d:34:ef:46:c9:ed:58:48:86:f2:
         ec:9c:25:b5:e5:53:5f:49:0b:aa:4a:a7:61:91:a2:ae:b2:df:
         85:10:c6:15:ce:8c:f3:5d:7f:1f:77:94:1e:a8:7e:ad:be:6a:
         a8:f4:7e:04:15:2e:fa:74:3e:97:56:ec:d6:d1:8f:b9:f7:7d:
         d4:41:90:93:b8:36:e6:b1:66:8b:23:53:01:39:4f:e8:76:f5:
         b3:ae:ba:c2:ab:e2:23:56:68:07:1d:f0:a5:63:81:30:df:70:
         a0:87:72:e0:96:3b:fd:2b:a8:f4:04:b0:4e:dd:99:e7:ed:11:
         85:6b:fe:66:45:2c:9e:cd:91:8f:54:4d:b1:19:1e:ea:f5:f4:
         8a:0a:10:3d:ca:05:8a:a6:9d:22:7a:15:52:11:0b:3b:c0:d2:
         16:cb:96:11:c9:e3:1f:68:8c:89:96:91:cf:5d:e6:6b:17:d7:
         4f:c1:42:2e:2d:e6:7b:25:ce:d8:74:d9:31:7e:ed:c7:4a:a6:
         e0:31:00:5f:5a:5b:d1:6d:07:89:4d:8e:bd:e6:18:0f:27:33:
         48:bc:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:11:10 2024 by rpki-client on console-ams.rpki-client.org