Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File:                     0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier:          IGVJOVh0xAotiKv96bMWtXK3ZSF0FdG+chqpoc1KP1g=
Subject key identifier:   CD:0A:98:63:7F:B8:B2:1B:8C:F5:2C:8F:FB:71:AC:69:02:53:13:F5
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer:       /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial:       018F3BFB074460BB6050F7E43100710BDC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 01:04:18 +0000
Manifest this update:     Fri 03 May 2024 01:04:18 +0000
Manifest next update:     Sat 04 May 2024 01:04:18 +0000
Files and hashes:         1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: kg/w0d3PJ5AlAatTBbKE05xeEajMWRJFl716+/zYgZw=)
                          2: Z_KzXqjb2x_3qLvorWU0lShr5C4.roa (hash: 6uaWXq1hgIJtOWTGQlgCG5yztokl8jfnAwBAZVFzrmo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fb:07:44:60:bb:60:50:f7:e4:31:00:71:0b:dc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
        Validity
            Not Before: May  3 01:04:18 2024 GMT
            Not After : May  4 01:04:18 2024 GMT
        Subject: CN=cd0a98637fb8b21b8cf52c8ffb71ac69025313f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:1f:26:2f:0d:c9:fe:ab:a7:82:76:1f:24:
                    c8:9d:7d:24:90:ca:71:55:15:06:ff:46:0c:61:7b:
                    d3:df:20:f4:b8:b5:bf:ba:c0:ef:2c:fe:d8:85:3e:
                    8f:20:d8:fd:7c:87:ac:ee:de:fe:41:23:20:0d:36:
                    c3:57:9d:db:cb:6b:fd:e1:f4:fe:7c:f3:0d:84:3c:
                    c1:e7:fa:b8:a7:3c:63:c9:8d:d4:de:a7:0b:6c:75:
                    80:e2:d0:3d:b9:25:88:42:09:14:96:ed:bf:d7:f0:
                    ee:7d:1a:cd:f5:a3:94:ca:09:f4:53:8f:7f:f2:73:
                    b8:3d:b0:81:3b:1d:c1:35:58:c5:19:fb:82:7c:23:
                    bf:3a:e1:85:32:17:ee:86:11:60:08:13:be:fe:2e:
                    0a:9e:38:70:c1:03:ee:4b:3d:13:a0:83:62:64:ce:
                    9b:6e:b3:77:c3:b7:a4:55:0e:99:63:20:da:e6:31:
                    cd:d0:2d:d8:ca:ae:ba:f2:86:84:3a:0a:69:ec:96:
                    9f:0e:e7:1c:9e:fc:bf:85:cb:aa:72:df:23:18:89:
                    87:57:0d:d5:2c:78:23:2f:86:82:ee:f8:11:be:ee:
                    94:ce:98:43:8c:f1:da:74:3d:1c:35:5c:f6:ad:ec:
                    97:b2:f5:af:66:9c:42:a4:c0:3d:b0:72:c1:e2:5d:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0A:98:63:7F:B8:B2:1B:8C:F5:2C:8F:FB:71:AC:69:02:53:13:F5
            X509v3 Authority Key Identifier:
                keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a2:0e:6b:d4:23:20:3e:b1:48:bb:c7:7b:83:78:39:3c:56:
         76:61:92:8b:bc:9b:ba:ec:51:8f:25:8d:6f:f0:86:96:37:84:
         49:a0:2e:25:2f:ba:c8:57:40:1b:a4:1a:ae:4b:ed:5c:bd:30:
         a1:67:8c:e4:ca:ad:18:79:a0:33:ba:d6:ba:3b:fc:a8:96:12:
         19:d8:72:ce:61:94:5b:ce:b1:f7:92:f6:85:22:22:9e:0f:48:
         7e:32:e6:17:58:ef:a1:d8:41:e7:29:5b:5c:eb:19:bb:17:53:
         f5:3f:f7:15:64:01:2b:a2:53:62:24:8b:2d:be:07:dd:ad:e7:
         fb:62:65:66:77:e3:7f:25:13:34:65:5d:db:96:9c:33:b2:8b:
         33:74:88:ca:bf:df:8a:7d:57:6a:70:2a:12:73:26:20:d1:b0:
         0d:ba:1b:d3:16:75:42:4e:bf:b3:3b:00:de:61:99:44:be:6c:
         de:a5:5c:b3:3f:12:5e:59:db:b5:4c:af:53:95:26:43:44:0f:
         6e:4e:9a:11:07:8e:6a:f9:bb:f5:30:69:9f:6a:a9:be:c1:a4:
         19:f8:d5:b6:d0:5e:6c:fe:bc:48:95:8e:6a:58:a5:94:02:8c:
         48:72:c1:8d:01:bc:2e:25:9d:b1:06:b8:03:bd:ce:ff:b7:d9:
         9e:1f:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:22:43 2024 by rpki-client on console-ams.rpki-client.org