Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File:                     IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier:          NEXQr/z7xwcxw2X1xWB0ULfHagQLmPG+7BqtJIZjT3E=
Subject key identifier:   2C:26:30:BC:E3:19:99:7D:46:93:7A:06:9B:4B:D0:82:0B:07:FB:ED
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer:       /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial:       018F2D9711F5A90E35478647F4605A9D454A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number:          1149
Signing time:             Tue 30 Apr 2024 06:00:26 +0000
Manifest this update:     Tue 30 Apr 2024 06:00:26 +0000
Manifest next update:     Wed 01 May 2024 06:00:26 +0000
Files and hashes:         1: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: QxCbkjwMIvZnVsyjHfGv62S8TLbTi8HzXtc+ykDT81E=)
                          2: gl6mAGe7kFwuWWmLLKK1sqiFD-0.roa (hash: JhrJ3ADghDltY8xarAZJrWV6AnaNjiqQ+MaDP78AgKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:97:11:f5:a9:0e:35:47:86:47:f4:60:5a:9d:45:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
        Validity
            Not Before: Apr 30 06:00:26 2024 GMT
            Not After : May  1 06:00:26 2024 GMT
        Subject: CN=2c2630bce319997d46937a069b4bd0820b07fbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:49:df:5a:df:65:cf:a4:ed:af:7d:a2:30:
                    ff:ee:96:c9:f6:ca:3b:de:91:32:c4:8b:16:67:a4:
                    f0:fb:61:e5:77:d9:3c:ad:a8:6b:0b:4a:86:e4:72:
                    33:9f:12:5d:2e:93:33:90:e4:7b:6f:79:42:fe:c8:
                    71:76:c2:38:c7:6d:09:66:bd:3c:1d:6f:5f:ea:2d:
                    64:0e:b0:99:96:9d:6d:f9:51:68:15:da:47:67:b0:
                    a6:68:c7:ad:17:56:bd:a9:b4:5f:fc:c6:79:ff:7a:
                    ee:74:89:9e:f4:11:bb:96:e9:fb:e0:be:5a:4a:6d:
                    a0:68:71:12:32:3a:59:ed:a3:e1:de:5c:ba:d2:cd:
                    88:36:aa:f3:b9:17:1c:95:0e:e7:0a:ad:b8:a8:6f:
                    2f:d2:e2:fa:d8:ba:9d:9a:5c:31:ac:47:5f:1f:42:
                    1b:67:e8:b7:b4:99:da:92:03:94:a6:0e:0d:93:a3:
                    d2:42:fc:bc:df:cd:0b:9c:ba:fa:02:cc:29:a5:08:
                    47:f6:1d:95:c6:17:6d:31:2b:ed:06:a8:b7:0b:b0:
                    71:c6:96:aa:ad:1a:82:c4:04:2d:68:a4:29:4e:0a:
                    24:f1:8f:84:5b:a7:cb:d4:9c:81:97:38:80:40:a1:
                    19:1a:f3:37:1f:56:2a:39:92:c1:98:ff:cf:0a:b9:
                    3c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:26:30:BC:E3:19:99:7D:46:93:7A:06:9B:4B:D0:82:0B:07:FB:ED
            X509v3 Authority Key Identifier:
                keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:07:1f:d9:a9:f2:af:82:ce:44:5b:4a:74:ba:3c:ec:fd:e9:
         ab:f4:7f:09:ba:40:ce:ca:f1:2e:2f:ea:8e:dc:b1:aa:40:e4:
         3d:40:6b:83:2b:d9:80:8b:05:f1:9d:71:94:ae:08:17:bf:d3:
         d5:6c:a8:a2:c9:75:7f:ae:cd:48:a0:36:17:56:60:ec:37:45:
         2d:04:46:b0:5d:1c:a6:3f:c1:9c:f0:f5:28:4e:97:5e:b9:ec:
         eb:19:94:9a:22:08:15:64:1a:8b:54:cd:b8:cd:c0:6a:80:8f:
         92:32:09:a3:03:75:a1:96:b1:cb:ec:af:30:87:1d:c9:1f:6e:
         5a:b9:b7:37:71:66:84:b1:6d:79:22:52:60:b2:7f:08:4a:72:
         7d:d3:00:a3:55:7c:fc:21:84:97:d2:91:28:26:14:5e:e4:3d:
         a0:d4:a3:be:e3:45:a1:47:fc:73:38:5a:b0:ad:da:53:db:b0:
         5b:39:1f:11:a3:b1:3b:c3:9f:63:a7:bb:47:a1:ea:0f:4a:17:
         00:ee:57:6e:2b:f6:ac:e7:27:2d:4a:4a:4f:1b:d0:e7:84:da:
         03:69:61:22:51:86:d8:20:a9:a0:b8:90:9b:59:62:e4:91:bd:
         70:a7:49:17:39:10:06:26:26:3d:45:03:9a:0b:ab:fc:3c:2a:
         19:52:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 11:54:58 2024 by rpki-client on console-fra.rpki-client.org