Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          6EzumEcdBhqKDD8cihpmPNlyKD1oOMFg1q6KYPlRP+E=
Subject key identifier:   C5:14:E8:2D:CE:72:B6:4B:91:CD:E1:D9:A7:9B:2A:99:AD:14:93:8F
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       018F8E263762970865AA166ED7E9E7CD106E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          BA
Signing time:             Sun 19 May 2024 00:00:20 +0000
Manifest this update:     Sun 19 May 2024 00:00:20 +0000
Manifest next update:     Mon 20 May 2024 00:00:20 +0000
Files and hashes:         1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: 8y5bsqVs5Bu1FAmtSfxQUFnVHi/jpzMXVW638TzArUA=)
                          2: Pw99qaPGE-O_9hvPt3lYLi0DI4w.roa (hash: pi1Q6xYVVZGgwHmdNH26n5UfccjGbEggpTMp6ztU5rE=)
                          3: h1HXoXeXgh4-C1qt-68wYZac9Yw.roa (hash: Afh/pQ9Nh5SMiDBzfCRxpgodnqjYLz6W3d+MAuVtEH0=)
                          4: lOWhuT2wspOqsmJ_3czX6YnzIs0.roa (hash: wjDvnQpmU3pgt2OwVbvOIPlgADN0CFCx0ieS1pnOiBU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:37:62:97:08:65:aa:16:6e:d7:e9:e7:cd:10:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: May 19 00:00:20 2024 GMT
            Not After : May 20 00:00:20 2024 GMT
        Subject: CN=c514e82dce72b64b91cde1d9a79b2a99ad14938f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c3:b1:86:90:2a:5b:17:86:c6:69:ec:c0:ea:
                    3f:87:49:d3:10:51:3f:5d:ee:bf:85:f4:10:69:23:
                    f6:55:ae:7b:7a:69:82:e6:31:3c:3b:2e:26:5a:d6:
                    55:fb:5b:60:b3:53:52:51:bc:97:86:ef:97:d1:f9:
                    8b:7f:a8:2f:60:ff:0b:fb:df:42:3e:41:3f:6e:b7:
                    71:98:a1:46:a4:94:e5:2d:6c:84:ac:b7:16:d8:d2:
                    c4:f1:bd:d0:20:ec:d2:69:13:51:80:fc:d0:8b:2c:
                    96:1f:1d:a8:01:a5:65:e0:8f:5d:85:25:ed:53:46:
                    13:7b:c6:84:23:25:94:c1:0c:dd:23:a2:11:65:df:
                    6d:dc:3c:63:49:28:b2:13:39:6f:97:9f:9a:a3:95:
                    5e:c3:56:6b:a0:4f:fd:08:74:f0:8b:a2:05:94:45:
                    55:86:24:26:a6:8a:66:c7:7f:27:ad:82:de:f1:92:
                    a5:0f:ff:22:c4:d1:e4:09:e7:89:1f:42:fb:58:3d:
                    9d:fe:e0:b5:25:43:de:1a:fd:37:9e:0c:ec:29:7c:
                    15:96:61:61:18:1f:80:4b:51:9a:70:d5:b2:03:c5:
                    1b:ce:7a:15:a6:ed:3e:dc:0d:47:08:aa:1e:82:fa:
                    aa:32:42:5c:17:c5:e7:31:0e:75:00:07:ae:61:7f:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:14:E8:2D:CE:72:B6:4B:91:CD:E1:D9:A7:9B:2A:99:AD:14:93:8F
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:69:b0:56:4d:c1:c3:7d:f7:76:c9:c0:2d:30:3a:98:2e:07:
         69:03:71:d3:0b:cd:c5:73:e3:44:ce:f9:2d:e1:7d:24:c5:37:
         6e:5e:9c:d3:bd:15:12:4f:9e:25:53:e1:b1:85:3d:0b:3c:85:
         0d:16:10:3e:65:a7:09:eb:a0:61:a3:de:b6:e7:ec:66:75:59:
         83:a4:ba:5e:77:80:26:c5:b0:e5:c1:b6:fc:3c:83:b4:bf:c2:
         6d:99:c9:1b:01:d0:8d:20:8e:6f:44:aa:ad:c8:1a:3d:25:ab:
         4b:24:c2:9b:ad:eb:f4:e8:6c:49:98:58:df:d9:6b:17:62:74:
         90:0e:92:39:a2:d2:79:18:49:1a:ca:47:d1:fb:d5:75:e6:0f:
         c3:f8:6e:93:38:10:dd:4b:28:ee:ed:65:18:a0:eb:cf:0e:b4:
         f7:a6:e7:ce:bf:15:c1:8b:fa:47:09:12:4b:07:aa:46:75:55:
         8e:e6:08:04:6e:6a:cc:64:a9:e9:1f:70:bb:d0:08:87:2c:74:
         c8:1d:9f:b6:d6:6e:27:a8:9f:f5:6c:04:87:d5:ed:9c:95:5d:
         8b:00:4d:42:ac:b1:9d:77:67:c7:3f:fe:02:2e:1b:a3:c2:d0:
         a8:07:c1:2c:c6:b5:0e:32:0c:0b:00:a6:16:ae:ee:9d:38:c4:
         3d:f3:69:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:50:59 2024 by rpki-client on console-ams.rpki-client.org