Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          uxI/t+UV7HhxoYeM1svzvJk7YJ4Hs2Lj52uT+E/N+ZY=
Subject key identifier:   C6:37:61:1F:1B:50:98:EE:B9:10:A8:A7:82:91:13:0F:5B:27:51:49
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       018F3FD4E928C74757650183B1219317F1C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          1152
Signing time:             Fri 03 May 2024 19:01:08 +0000
Manifest this update:     Fri 03 May 2024 19:01:08 +0000
Manifest next update:     Sat 04 May 2024 19:01:08 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: jLs2JGSMmsffsJXF0E0F8uP7+Yn1vvGJcxOcl5GGWUg=)
                          2: xUHrYAg3-CFrcmiAnwT4QdLaBi8.roa (hash: 3nuCd28+cUFwO1Cpv8+SpL3T8tKW1Zh/0PG6YL+JJgQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d4:e9:28:c7:47:57:65:01:83:b1:21:93:17:f1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: May  3 19:01:08 2024 GMT
            Not After : May  4 19:01:08 2024 GMT
        Subject: CN=c637611f1b5098eeb910a8a78291130f5b275149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:e0:2c:5b:bf:08:e2:5a:45:cb:02:79:2d:
                    fe:e5:44:34:48:32:a4:b4:a1:2d:aa:01:2e:57:e7:
                    07:b8:5f:15:25:5b:95:f5:3c:2d:fa:65:9e:31:ff:
                    7e:4f:10:1a:4f:ac:24:e1:31:bf:9f:22:bd:f7:6c:
                    bf:ae:3a:91:ec:5c:9e:53:13:5f:65:33:2a:51:7b:
                    97:63:24:af:fd:d6:f1:bb:fc:76:de:32:bd:d3:18:
                    a8:09:f9:b3:d4:14:19:95:8a:3a:00:45:f2:d3:27:
                    46:6e:fb:d3:d8:23:a2:0b:6a:ae:43:32:50:fb:9c:
                    b9:dd:36:8a:68:e1:37:a5:8c:d8:de:23:e4:f4:97:
                    1a:fa:4b:b3:fd:f2:14:d4:39:82:46:2c:4e:9e:87:
                    1a:31:b4:f3:29:6e:b2:6d:71:db:cc:a2:18:b4:bd:
                    a6:f5:63:b6:25:a4:da:a5:ad:2b:6d:d8:0d:ae:a6:
                    14:d4:10:88:3a:ea:81:f4:56:14:78:ed:72:f7:07:
                    82:09:a1:1c:32:77:a3:db:1e:77:c4:b5:4b:27:fe:
                    c2:61:0c:01:29:1c:e7:98:16:f7:95:ba:46:73:3b:
                    d2:49:5a:66:de:2c:aa:76:12:e5:69:bf:94:fb:eb:
                    03:60:9f:b3:4b:0a:e2:00:ec:65:3b:88:37:a2:ab:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:37:61:1F:1B:50:98:EE:B9:10:A8:A7:82:91:13:0F:5B:27:51:49
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bc:ca:12:ff:24:e9:5e:44:e4:db:23:ae:21:82:67:f5:b3:
         99:66:1b:a5:55:9b:fc:94:01:71:35:5c:cd:11:bb:5f:e2:71:
         ae:71:8b:05:da:da:7c:3e:0f:58:8d:d1:ca:8e:67:42:fd:2d:
         e1:06:e5:e9:1c:30:21:d8:e9:f6:d1:41:a7:16:e9:31:4f:b1:
         9e:59:f0:70:87:56:de:d1:88:78:13:b0:40:22:85:2d:74:a5:
         ed:43:aa:a6:cf:1c:6b:56:01:33:9c:ab:c1:34:d7:05:7c:28:
         6c:e2:ae:b6:8d:1c:7d:68:a1:f5:ea:e1:5f:a6:27:90:89:50:
         f1:94:12:05:ef:be:b2:5d:7c:05:57:1a:aa:83:2a:9a:10:72:
         23:4b:f6:2d:b9:09:2e:09:d6:de:1d:62:c2:2c:a3:d8:aa:8f:
         af:3e:fb:41:10:0e:9c:23:91:a7:be:b9:e3:f1:76:89:3c:76:
         90:6a:a5:91:0d:48:ce:2a:41:08:04:d8:ab:5c:cc:2d:e7:08:
         ce:2a:d2:60:86:8e:6b:8d:0d:0a:b7:6a:6f:44:cd:9b:19:74:
         ba:2d:80:1b:9e:8c:71:60:cb:67:12:e9:40:9d:b7:c1:9a:3f:
         53:58:ac:df:b3:91:ff:ee:45:b2:b0:42:ba:db:f9:29:60:ba:
         b5:22:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:21:05 2024 by rpki-client on console-ams.rpki-client.org