Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File:                     E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier:          paLeaQcVIxR1ZNbH2TVrt8h9O6WuRM2VZiJWmQzmnFA=
Subject key identifier:   E3:5C:D8:B6:59:8E:2E:63:4D:07:AC:9E:31:05:32:75:8F:39:D2:62
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer:       /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial:       018F44FB904D36AA4978801E2A079D3EFC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number:          1156
Signing time:             Sat 04 May 2024 19:01:28 +0000
Manifest this update:     Sat 04 May 2024 19:01:28 +0000
Manifest next update:     Sun 05 May 2024 19:01:28 +0000
Files and hashes:         1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: cWmoEsd5a8uzNOVXY4jQndZ8DQEVkO7InleB67bCyAw=)
                          2: e1rjDvjfkpZJ0k-u4vhLW4C7FfM.roa (hash: olwXa5wNk17jdv2C/vRyJJSVWXWchm03SUcxa0a0eiw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:90:4d:36:aa:49:78:80:1e:2a:07:9d:3e:fc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
        Validity
            Not Before: May  4 19:01:28 2024 GMT
            Not After : May  5 19:01:28 2024 GMT
        Subject: CN=e35cd8b6598e2e634d07ac9e310532758f39d262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:b6:7c:be:06:b0:2f:e9:c9:4a:f0:5b:97:
                    4d:27:f8:9c:8c:9b:5e:66:4d:61:c7:5a:f3:03:b6:
                    70:01:22:da:73:09:93:d9:a4:c4:68:7c:c1:ea:d9:
                    48:f8:3d:df:9f:ea:6d:11:c9:e1:a2:1f:19:b0:f9:
                    ba:e9:e1:24:0c:b3:00:2d:23:a3:f3:45:cf:d6:e2:
                    43:b9:b9:51:60:89:cc:ef:47:e2:71:49:6c:bd:56:
                    2a:6d:bc:6a:5c:72:39:ab:00:09:a1:8e:ba:9a:03:
                    f1:81:84:82:99:a6:58:7c:44:fc:68:e0:f8:b0:4c:
                    77:ef:c3:0f:a4:97:81:5e:ca:2f:de:f6:33:7a:65:
                    65:92:bf:dc:09:b9:f1:16:ff:09:1f:74:7f:8f:be:
                    e1:f2:c7:75:a3:4a:f2:a3:db:97:27:7d:ef:6c:0a:
                    bd:ca:54:63:c8:a4:1b:b8:fc:97:b9:d4:1d:b8:b7:
                    00:3b:fa:24:43:a2:b1:39:1a:a9:d8:64:50:0e:d3:
                    3b:01:f2:fc:88:1f:cd:6d:09:f0:0e:62:28:07:2a:
                    82:e2:a3:78:10:18:52:e6:ba:b0:46:60:2c:bb:05:
                    98:e6:01:d3:14:57:5e:c8:ac:84:0e:6c:1f:c1:5b:
                    46:9c:54:88:0b:02:9e:13:85:8e:ce:3e:e1:b9:a9:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5C:D8:B6:59:8E:2E:63:4D:07:AC:9E:31:05:32:75:8F:39:D2:62
            X509v3 Authority Key Identifier:
                keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:71:95:79:ef:bd:06:37:49:93:aa:35:fb:68:49:bf:9d:fe:
         dd:55:a9:3b:d8:75:b7:38:2e:84:3c:78:cb:2d:ab:d1:1d:0a:
         75:ef:16:e4:1a:a1:3e:9c:12:9c:f1:88:2c:0e:7c:1d:cd:bb:
         47:2f:6a:5c:62:19:20:2f:37:4f:cc:d2:d5:34:34:65:30:dd:
         7c:80:9e:4b:a6:09:ef:c4:16:a5:20:3c:82:5d:c6:6c:d2:32:
         af:f2:4a:b5:c6:60:4c:ec:d5:a3:34:4c:11:60:30:2e:8e:89:
         a7:01:d9:c3:7d:bb:a7:5b:ae:a9:98:b5:fc:d6:df:d8:40:ab:
         16:b0:65:af:78:a0:e2:b1:b2:52:40:19:80:ec:68:26:24:b5:
         30:64:28:ba:a6:fc:a5:80:7e:e6:e5:04:85:42:03:60:44:3f:
         34:a5:b0:df:d2:98:23:26:ef:a4:45:cf:71:34:63:8d:d4:fa:
         69:72:25:be:ec:de:a6:3c:4e:b2:1d:bc:70:74:c5:10:74:01:
         16:1d:8a:66:ad:95:3d:aa:0c:a2:3f:1d:48:04:e9:c5:76:f9:
         6a:74:28:19:39:2b:77:08:d1:7c:58:ee:15:ae:25:a5:b9:65:
         e4:b3:e0:9d:80:27:f0:ca:27:e5:87:14:5a:75:9d:12:21:09:
         07:e4:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 23:13:29 2024 by rpki-client on console-ams.rpki-client.org