Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File:                     4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier:          ZvESBMhNmBWgGgFc8o2nz0L5pVShagx5SruYrFKwhIU=
Subject key identifier:   D5:C8:F7:5C:1E:58:61:2F:18:94:F3:A7:C8:4B:D3:36:29:86:CD:26
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer:       /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial:       01923993F27A3EEFD10A4856FA48C9DE3464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number:          03D8
Signing time:             Sat 28 Sep 2024 17:00:50 +0000
Manifest this update:     Sat 28 Sep 2024 17:00:50 +0000
Manifest next update:     Sun 29 Sep 2024 17:00:50 +0000
Files and hashes:         1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: MKVBjsHBXZF6C1nTA1icaLYT44frDmeZcFOJkteYxKI=)
                          2: m7gMzHfBB3F7DJuN8-9yg3_6v-k.roa (hash: Jz5VS86MCMlOSS7tOVRGTJ86JhmpAD1F2l8+/vAWlFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:93:f2:7a:3e:ef:d1:0a:48:56:fa:48:c9:de:34:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
        Validity
            Not Before: Sep 28 17:00:50 2024 GMT
            Not After : Sep 29 17:00:50 2024 GMT
        Subject: CN=d5c8f75c1e58612f1894f3a7c84bd3362986cd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:ed:de:70:0a:a9:ab:d2:73:d4:61:9b:30:
                    56:f5:86:5c:43:de:dc:67:e9:5d:68:e1:2d:c5:6b:
                    3f:82:de:fd:30:50:65:f9:81:c9:14:3b:9d:c1:23:
                    04:ec:f6:0d:38:a3:a3:68:12:08:18:a7:57:72:1b:
                    8d:a8:b0:c7:8d:ab:98:8c:d7:e0:a8:91:4c:ec:35:
                    6e:42:0d:9c:4d:c6:47:35:7f:a0:94:ec:af:ae:9b:
                    fe:cd:1f:8f:19:ff:7f:d5:3e:09:95:2f:10:e1:fd:
                    1f:93:16:ac:bf:0d:fa:be:1b:60:d6:67:38:15:1f:
                    8d:2c:a4:0b:ec:5c:a5:7e:86:55:e3:86:11:22:f4:
                    e4:46:03:1e:89:f6:a6:b0:94:aa:f1:a9:c7:eb:d9:
                    e8:95:c4:ae:77:b3:70:e9:2f:52:0c:21:c1:88:da:
                    05:2b:13:ad:7e:75:a6:ec:b0:9d:a8:73:52:03:ef:
                    52:48:8e:8b:a2:af:6b:1b:76:88:68:dc:1d:f6:8b:
                    bc:fa:05:41:d4:29:22:78:6a:b4:94:f5:f0:7b:69:
                    c9:81:b0:71:a5:f7:41:4f:69:ee:e9:56:86:f7:ad:
                    c9:8b:3d:d2:05:cf:34:ff:32:0f:65:57:2c:1d:97:
                    44:af:50:b9:7f:8b:5e:b7:44:09:aa:e7:b1:7b:a1:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C8:F7:5C:1E:58:61:2F:18:94:F3:A7:C8:4B:D3:36:29:86:CD:26
            X509v3 Authority Key Identifier:
                keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:4b:ab:58:b2:8f:4e:fb:c7:d9:8c:d6:ca:5f:80:85:29:
         2e:b9:8d:cd:b2:39:e0:55:57:7f:8b:66:53:6f:e2:d5:8b:3e:
         4d:e8:14:69:dc:ff:83:20:6f:b3:a2:8c:c0:18:b0:c7:57:0a:
         e9:d0:1d:c0:0d:1e:ab:8d:28:cd:f2:ba:29:29:18:25:39:2c:
         ed:ad:c6:aa:20:70:86:7d:88:e0:7a:a4:20:42:a7:50:25:f8:
         01:d6:6b:e7:39:1c:aa:8b:ed:aa:4b:f6:45:2f:62:40:93:71:
         d1:24:5b:d6:e6:87:48:f5:98:8f:66:34:94:71:45:c6:28:fe:
         62:29:81:37:01:f9:a6:24:44:05:88:ca:f3:b5:b0:89:0d:12:
         67:10:17:8b:68:0e:e4:81:d0:14:d1:7d:15:03:e3:3e:13:d3:
         28:ac:91:51:eb:cf:59:9d:bf:88:d8:5f:f2:02:b6:34:3f:23:
         45:f1:2b:e8:67:07:82:86:e3:c0:11:a9:6f:70:2b:0b:dd:65:
         af:35:36:7e:dd:2b:8b:71:6e:88:5f:04:c3:17:b2:40:4a:20:
         4c:1e:af:ba:0d:5d:79:d7:9a:88:15:8f:ad:d8:f6:3c:a8:31:
         07:04:bb:42:ce:ea:c3:40:22:58:b2:ad:1b:c6:d0:2d:ce:f0:
         b3:3f:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:21:53 2024 by rpki-client on console-ams.rpki-client.org