Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File:                     Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier:          rcn0215vLE6xo2qG8aE1OP4o+OY30BWaePWYHGL7LmQ=
Subject key identifier:   10:7F:97:1A:C1:C8:2E:EE:8F:DA:88:30:DF:FD:A4:E0:23:5A:40:33
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       018F1F02AC3DCF063CD4C91535486D405688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number:          1149
Signing time:             Sat 27 Apr 2024 10:03:39 +0000
Manifest this update:     Sat 27 Apr 2024 10:03:39 +0000
Manifest next update:     Sun 28 Apr 2024 10:03:39 +0000
Files and hashes:         1: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: 1QkE8I2GJ0aJqg1yDUEfSKM15moEkSyGsbqv0Fszi20=)
                          2: GbM5jcDH1wZs8EY9DDaxL097TRM.roa (hash: EthAqGIGb3LYMg+Mmzdu67sUYN5r5iWkg8fLnfrEUbA=)
                          3: NXFShc88BbFcxDeg5al3n2TmxtM.roa (hash: GmVbmzpj0M7WuDjB58nXfi7WXD+V68yOa3pig6dt4KU=)
                          4: W9JU_UZ8Xbu6KerjGGJkpjA7I-8.roa (hash: uBYrnZx1bKn2oAJbJPUJGLjC291Jv2l8CSBzawJoqcY=)
                          5: mnDWsyxUeKPuxDtjIdPJv2Pv038.roa (hash: 6BNbcqazgjUV+2EmfHtrE6k9QOGGfeZTjdJxge8GSWQ=)
                          6: xZkC6tTgeTDJy8TCRpFL_mCJJuc.roa (hash: vkgapC9B5xXddyPo2B2w71Y+xViMwBZeUIzH7tf/mg0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 10:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:02:ac:3d:cf:06:3c:d4:c9:15:35:48:6d:40:56:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Apr 27 10:03:39 2024 GMT
            Not After : Apr 28 10:03:39 2024 GMT
        Subject: CN=107f971ac1c82eee8fda8830dffda4e0235a4033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:20:16:7e:f3:f9:6f:92:5c:a6:a1:89:20:
                    c9:1a:b5:f7:f7:51:ac:10:16:8f:7f:6f:94:b1:e3:
                    9e:4c:da:9f:9a:28:76:b9:05:00:9c:58:09:ef:4d:
                    e2:f8:18:42:e0:69:2e:67:66:ea:a6:5a:d4:7c:cd:
                    30:e5:dc:e6:43:f0:74:e1:f1:32:f1:80:88:a9:4e:
                    a1:a7:95:45:f3:ce:97:65:65:68:98:8d:4e:dc:5c:
                    eb:af:09:df:41:0c:1d:14:aa:5a:7e:27:0b:82:38:
                    7d:ae:76:10:9d:d8:a8:26:f6:46:c4:e9:dd:8e:af:
                    d4:16:40:38:4e:c1:7f:56:fd:55:06:2d:d6:57:bd:
                    eb:63:c8:48:08:af:1e:d1:49:df:d0:53:5f:9d:3b:
                    5a:65:0d:33:62:80:85:02:47:87:b1:b6:53:3e:92:
                    27:fd:6c:a5:15:f4:7f:ab:f1:ab:2f:5d:bc:63:e6:
                    6e:49:3d:0d:78:98:c7:e9:c1:05:b3:77:18:f3:56:
                    d3:ea:d4:0f:e0:2a:ad:48:f8:a5:80:f7:72:2a:bd:
                    b7:2b:dd:6b:b6:13:10:a4:98:25:9f:42:c3:51:d4:
                    93:77:c9:78:3e:a4:d6:ba:ed:eb:d6:77:b2:6d:84:
                    1c:99:58:c2:cc:fe:e1:3f:95:77:05:93:78:7c:70:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7F:97:1A:C1:C8:2E:EE:8F:DA:88:30:DF:FD:A4:E0:23:5A:40:33
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d3:49:08:63:5b:a5:48:dd:fd:7a:33:86:dd:4b:58:b1:88:
         d1:56:c3:7f:e4:43:df:3c:a9:30:21:ce:dc:c7:28:d4:71:6d:
         1c:b1:9a:37:d1:09:ce:1f:49:74:d2:8d:81:91:42:2c:1a:b8:
         ec:af:40:ce:2d:28:a7:37:7a:81:fc:75:f4:7c:04:3f:9e:af:
         08:64:69:04:5e:7d:d4:bb:03:ff:ca:94:5f:bc:41:3e:78:dd:
         9e:1e:a8:3d:3e:78:21:21:50:33:7b:aa:54:de:54:60:97:a7:
         a9:ae:a7:84:e7:ea:bb:14:fa:9f:e5:06:3e:b2:f2:62:ad:63:
         d3:3e:2a:7e:04:17:61:c8:f7:ae:cb:db:f6:35:53:27:98:69:
         b9:f7:31:64:d5:23:79:79:7e:94:be:c5:2a:bb:31:9a:5c:fe:
         6d:f1:27:51:6d:25:47:00:5b:aa:14:2b:f6:39:9f:43:b9:a9:
         25:8c:74:bb:42:a1:cc:b0:12:34:8f:ca:0f:30:45:2d:33:7f:
         f5:15:f8:9e:6c:f5:53:34:ff:93:9a:0c:f0:6c:e9:17:ff:0a:
         c2:f7:e5:fa:9f:77:0a:0f:31:9b:f6:4c:9d:01:79:76:18:e0:
         b2:fa:5a:8f:ea:4c:87:ae:ce:3d:94:f6:09:3d:bc:0a:d3:7f:
         df:f4:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:04:51 2024 by rpki-client on console-ams.rpki-client.org