Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File:                     2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier:          KopTFM1uaH5P02fxvsSf720pbrO2XDDZa8XSfo5L/q4=
Subject key identifier:   2A:1F:B6:CF:9D:48:2C:F7:9A:A8:7A:47:4A:F4:E0:E8:D5:B8:ED:1D
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer:       /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial:       018F3889B8AFCA3832E927122CC2E3956D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 09:01:40 +0000
Manifest this update:     Thu 02 May 2024 09:01:40 +0000
Manifest next update:     Fri 03 May 2024 09:01:40 +0000
Files and hashes:         1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 9owIbp7seeo6K8O6VByVy6c4DC4CtKaHQVRo5FUSY8E=)
                          2: 9VeimpxrnQ9OUfpfVXDzk9jlRm0.roa (hash: e0A95T35+R6FGfrNJwHeLrdSZ9yWzfJlKjqi+Zg8B/Y=)
                          3: wgJ7T8AQs2H25r46HMkqeo3d_74.roa (hash: XCTHlnY4cJd2CEBJ6FdccipBHcBm3QzvnHmgWXUepDU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:89:b8:af:ca:38:32:e9:27:12:2c:c2:e3:95:6d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
        Validity
            Not Before: May  2 09:01:40 2024 GMT
            Not After : May  3 09:01:40 2024 GMT
        Subject: CN=2a1fb6cf9d482cf79aa87a474af4e0e8d5b8ed1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:81:07:a1:f6:ff:bc:5e:1b:65:38:fd:9a:
                    c1:36:03:94:bb:37:b8:c3:57:56:9f:ea:0c:e8:e2:
                    42:bd:2b:9e:3b:ae:e4:63:73:6b:0c:e7:27:64:f1:
                    b4:eb:de:0a:35:24:48:e7:98:23:3d:5b:69:2b:fd:
                    e1:fd:d3:f3:67:18:22:74:82:4b:22:3d:b2:9b:66:
                    f6:5c:90:66:af:75:be:e3:66:41:e2:f4:c7:0d:34:
                    1d:1c:c2:3b:12:f0:a7:3e:8f:ec:ce:42:a6:11:7b:
                    0f:bf:b2:24:61:15:6c:99:1b:91:35:d3:3f:62:68:
                    78:df:3e:aa:49:16:16:0b:94:9c:41:95:64:da:1d:
                    4c:72:43:f5:86:f6:38:09:2b:0a:7d:0e:e4:b4:27:
                    82:b9:a5:69:ae:ce:72:90:22:8e:04:28:51:e9:8f:
                    92:c7:3a:3b:ab:3a:a2:7e:3a:56:bb:24:bc:e3:4d:
                    1f:ae:9e:fe:9d:37:07:3d:3b:c9:24:2e:e4:94:db:
                    fa:a1:f2:33:d4:7a:fc:a2:16:b0:73:db:84:7b:99:
                    c2:fa:cd:e7:cc:36:35:33:45:8e:01:c6:08:48:9f:
                    5a:17:80:d8:b8:6a:80:62:a1:38:c1:0e:fd:6f:d1:
                    4f:10:91:f4:4a:d4:fd:5c:19:0c:d9:31:69:9c:7e:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1F:B6:CF:9D:48:2C:F7:9A:A8:7A:47:4A:F4:E0:E8:D5:B8:ED:1D
            X509v3 Authority Key Identifier:
                keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:ca:47:c5:71:82:57:f8:0b:1e:d3:e8:5c:2c:db:6b:05:
         eb:c4:d4:ca:1d:31:c0:f0:b0:0a:80:dc:c4:37:8d:19:2f:3f:
         d4:da:1f:e0:7e:1c:46:99:6c:b4:e9:05:43:1c:22:f3:4c:e4:
         7e:3e:09:21:c2:34:9d:18:17:1f:2c:fb:af:47:36:cb:a4:e2:
         29:f8:a3:0a:b8:d4:19:54:62:c6:73:85:d7:aa:55:ce:ec:a2:
         18:5e:79:01:fa:4c:5e:30:87:76:19:9f:23:6a:a2:dc:e2:21:
         73:74:6d:a0:f3:91:ae:30:7a:d6:eb:0d:b8:0c:03:b0:94:c5:
         00:a0:b4:55:da:b0:e5:2e:ab:1e:1e:44:89:50:87:47:70:48:
         04:97:31:6f:aa:7c:8a:27:ed:90:d1:3b:43:e2:f9:7a:33:90:
         92:ff:b1:eb:a2:28:50:9f:18:bf:c7:e8:4b:e0:28:4d:85:94:
         db:ba:cb:0d:f1:9d:f4:b3:28:92:16:d5:e7:7d:53:56:b3:8d:
         20:b8:76:5c:36:8d:89:89:d0:30:cd:97:59:5f:a4:f1:38:db:
         39:cf:c9:e0:7d:24:2b:46:ab:2a:b2:65:bf:b6:73:d0:be:2a:
         f5:f9:e6:21:c1:67:00:71:52:d0:76:fb:cb:e4:97:42:a7:e2:
         43:b8:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:36:57 2024 by rpki-client on console-fra.rpki-client.org