Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          /bZ4Q1rb2RQUC9NkYqdJGS1FLVKbtdZDijSNoNgUX1U=
Subject key identifier:   70:89:30:7F:17:F7:B2:2C:91:D0:2A:74:56:52:0A:03:9A:3A:AD:88
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       01901DEB39720AB51AC8979C9F6CB9FE8CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          0ED3
Signing time:             Sat 15 Jun 2024 22:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:13 +0000
Files and hashes:         1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: pposNFCx8DnNzmEPe9jMRZ1Ppqkj+TQtpmYh3BfsEZg=)
                          2: GN5ooKWmubFblC_XJKzwUF6yxHg.roa (hash: ox/84r+Ls8W5QoXkvwuKkZbXHujdPD0R00KGe0e9ab8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:39:72:0a:b5:1a:c8:97:9c:9f:6c:b9:fe:8c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: Jun 15 22:01:13 2024 GMT
            Not After : Jun 16 22:01:13 2024 GMT
        Subject: CN=7089307f17f7b22c91d02a7456520a039a3aad88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:70:b5:a2:2f:12:26:56:90:b9:bf:e1:00:
                    6b:ff:e5:56:bf:9f:43:1b:7f:aa:1b:33:74:e7:c5:
                    a3:16:10:cd:e8:cb:a7:e6:fc:6d:b3:78:4b:13:96:
                    92:67:e3:fe:d0:94:10:81:a6:1d:55:35:78:fb:4e:
                    5b:49:06:f1:5e:c4:d9:34:b4:e8:3f:32:c7:c1:7e:
                    bb:c4:92:89:8a:de:23:a4:e0:71:cc:af:33:d9:8e:
                    2b:24:9a:3d:ad:26:d7:52:1b:7d:f8:57:b5:03:da:
                    72:3d:32:d7:7e:14:c4:38:e0:d9:89:7b:55:95:02:
                    20:b1:22:ec:72:57:84:02:47:7f:1f:2e:15:f0:4a:
                    0b:d1:85:7c:70:3f:cf:9a:7f:b0:32:b8:46:73:ef:
                    89:b4:c6:6f:c9:2e:1b:d2:64:6b:b0:91:f9:9a:67:
                    3e:11:fa:f9:2d:f5:6c:4d:fa:a6:32:d5:67:1c:0c:
                    90:90:74:a8:26:79:1c:46:9c:be:cf:fa:1e:b2:04:
                    16:fa:4d:51:2d:b8:21:e3:21:3f:d6:82:91:fd:36:
                    98:32:6c:88:19:fd:8f:05:37:4f:0e:09:f7:57:f2:
                    77:8f:28:47:fc:bb:42:7b:ad:8b:b0:11:c7:b6:52:
                    85:0a:c1:39:a0:e4:d0:17:06:f4:d3:ca:7e:28:8e:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:89:30:7F:17:F7:B2:2C:91:D0:2A:74:56:52:0A:03:9A:3A:AD:88
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:14:dd:0e:99:52:8d:c3:c4:9b:d7:8c:0f:81:67:be:bf:d8:
         9d:d2:e7:4c:64:89:e6:7a:74:b5:0f:1a:95:b7:cd:e7:c4:51:
         b5:4d:f4:6b:87:eb:a6:c1:29:1f:f8:df:8a:21:56:bf:59:22:
         5c:49:22:c8:29:fc:e7:49:02:8b:38:91:5f:5f:a3:cb:bc:1a:
         ac:ef:8b:4c:ef:23:c2:fb:72:b8:70:79:0a:31:83:96:fb:01:
         93:03:a0:92:56:04:17:37:c8:75:9c:48:61:fd:fa:c2:74:7f:
         5b:49:21:34:86:4b:bc:96:7c:28:f9:ae:5b:4f:d0:ac:fe:76:
         1e:f8:9b:f1:29:70:9e:18:38:b5:0d:a9:35:b2:c5:e6:53:98:
         27:88:18:6f:63:9e:ec:7f:2a:a5:8e:7d:81:3c:c0:37:1e:5e:
         34:b6:ed:9a:ff:50:f9:67:80:b2:bd:92:9f:f3:9f:93:be:91:
         78:7d:b5:ac:ec:b6:41:3f:9e:f2:82:03:a8:44:77:96:0d:d1:
         20:e8:19:fc:98:12:91:d4:64:3a:66:1e:1d:dd:f8:3f:44:a9:
         ea:a4:df:eb:c5:6c:ac:a9:f9:bf:b4:87:36:e9:ff:e8:54:df:
         1c:06:d4:a1:b2:0b:26:a5:d9:85:ca:15:f1:37:0a:d2:51:cf:
         f7:f7:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:51:33 2024 by rpki-client on console-fra.rpki-client.org