Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File:                     8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier:          FJSxLojNDc0fZSPQW4a+ZbDAu3JcFA1MtZBumEz7lgQ=
Subject key identifier:   13:24:CA:FF:9B:43:E9:D9:90:29:90:9D:A9:C0:23:45:97:9B:20:71
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer:       /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial:       018F430D866478D5108AA9278A1D0F10E032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 10:01:50 +0000
Manifest this update:     Sat 04 May 2024 10:01:50 +0000
Manifest next update:     Sun 05 May 2024 10:01:50 +0000
Files and hashes:         1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: r3pW6/rFtjbMfa1wn42jC+D6zOyhyCzjyxL5vWweHE8=)
                          2: IsgfmzBuqJDiqWtKq9s6eT_2c_A.roa (hash: w0IVfMOTudY1G9SyCcD6LLrDqH+4dyUmJhO1XhTukcc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0d:86:64:78:d5:10:8a:a9:27:8a:1d:0f:10:e0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
        Validity
            Not Before: May  4 10:01:50 2024 GMT
            Not After : May  5 10:01:50 2024 GMT
        Subject: CN=1324caff9b43e9d99029909da9c02345979b2071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:0c:ad:7e:95:3d:5e:bb:b7:d9:ce:22:76:
                    ab:43:f5:bb:18:36:12:38:6a:8c:bf:5e:ce:b5:32:
                    0e:8c:8a:a1:06:26:2f:1e:8d:e1:47:f3:74:2b:70:
                    bc:b6:ef:e6:eb:06:12:00:7b:e7:e1:a3:2b:59:68:
                    23:b0:a2:ec:2b:b7:74:87:66:1d:9e:8c:40:99:78:
                    61:75:8a:5f:d6:c5:33:cf:a4:49:b4:2b:dc:8f:d5:
                    59:37:b0:dc:6f:91:0d:e3:41:ce:53:ac:ae:f9:4b:
                    80:62:23:e2:12:15:76:cc:b1:0f:3d:0a:30:93:33:
                    37:62:b7:2d:59:c6:fd:3e:d6:f7:4c:30:b2:c7:a2:
                    f1:41:08:c5:2a:31:be:f9:86:8a:be:75:d0:7c:c9:
                    7a:ef:3b:3e:31:27:c7:71:f2:f7:da:f0:f6:8b:f0:
                    3e:53:02:05:12:35:c1:61:be:9c:2b:69:02:4e:8f:
                    7d:bc:58:3e:f9:81:0a:98:2c:e5:92:3e:55:12:e1:
                    59:0a:b9:09:01:cb:fa:ac:5d:58:25:f2:41:49:a1:
                    d9:4a:92:de:b5:f0:3d:9c:83:b3:b1:a7:2b:be:62:
                    1c:5f:02:bd:11:3e:00:c8:c6:85:d1:11:bb:f1:07:
                    a9:7a:e9:df:8d:14:67:8f:dc:67:81:29:83:a7:22:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:24:CA:FF:9B:43:E9:D9:90:29:90:9D:A9:C0:23:45:97:9B:20:71
            X509v3 Authority Key Identifier:
                keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d7:38:ec:a5:64:2a:ac:e4:00:a2:89:30:53:b9:0a:70:ab:
         12:0a:5e:e7:95:09:7a:cd:b1:17:52:b8:d9:e5:a3:6e:2b:6d:
         6f:f5:7a:3b:41:d8:7f:ee:e3:58:f1:dc:59:f1:3e:c9:d6:77:
         80:57:bb:f4:a0:ab:d2:3d:88:2c:77:20:1e:8b:08:50:7e:01:
         8a:65:d6:df:22:28:4b:11:1a:e9:28:7b:df:b3:41:64:aa:29:
         3d:89:69:f7:ed:8c:57:64:ed:ad:e6:ad:8f:cc:41:dc:a9:b3:
         fa:c0:b0:57:53:74:b0:63:fa:4b:6d:ed:03:d7:ca:29:9a:e5:
         99:f0:52:bd:d9:0e:d6:c0:6d:95:9d:e7:3b:d0:52:8e:8d:65:
         93:6a:f7:db:2f:3f:31:4b:fb:4b:c9:04:e7:07:47:07:86:98:
         f2:92:ba:d9:02:fe:ed:be:7c:89:e1:2e:24:bf:f7:07:bb:be:
         92:64:b7:65:4e:1a:15:6f:c9:23:f0:04:25:55:04:c7:96:d8:
         9f:05:5e:8d:e6:04:02:74:74:d1:0f:52:58:9f:5e:c5:30:cf:
         f2:de:a5:fd:bd:98:a1:22:ab:35:ec:34:68:f9:7c:67:35:63:
         3f:bc:47:f4:10:81:9c:3a:90:f8:da:35:fe:ff:dc:0c:e9:f9:
         9c:fd:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:28:32 2024 by rpki-client on console-ams.rpki-client.org