Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File:                     46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier:          P6gya76jFN26mzkCGjl7Rog4T06RycQowG78e/70PyY=
Subject key identifier:   EF:30:0D:A3:02:BE:05:55:8B:BE:48:75:4E:8E:E4:11:4E:78:44:B4
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer:       /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial:       018F4C46DB02956E6C92AD3297966ECEA230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 05:01:02 +0000
Manifest this update:     Mon 06 May 2024 05:01:02 +0000
Manifest next update:     Tue 07 May 2024 05:01:02 +0000
Files and hashes:         1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: Q3GqUHlZmoEJPrHDXNJW4y1KrQHEhtH1g/c6EGgf4Kc=)
                          2: IDyhyfvEkCGFwmYFm-Skls2jo-o.roa (hash: oYYxpEzFX1HWnwIPjlDnfP/2iEXz3+/WVrPQJCuYUbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:46:db:02:95:6e:6c:92:ad:32:97:96:6e:ce:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
        Validity
            Not Before: May  6 05:01:02 2024 GMT
            Not After : May  7 05:01:02 2024 GMT
        Subject: CN=ef300da302be05558bbe48754e8ee4114e7844b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:6c:f8:1b:b9:a2:dc:9b:9f:93:c4:ea:fa:
                    66:eb:af:d4:25:8e:3b:50:ad:b7:33:b0:b4:7d:f8:
                    19:a7:10:e3:ce:34:52:21:15:09:86:7c:0f:ff:98:
                    d8:ff:70:a0:1a:fc:d5:bd:08:c7:0e:b3:d6:b2:87:
                    e3:89:d6:a1:d9:68:44:66:52:34:66:5d:e9:e6:eb:
                    8e:50:34:fe:66:12:9e:ce:c2:57:34:b0:3e:67:42:
                    1e:0f:58:75:2f:e9:ff:ff:d2:39:76:c1:0f:3d:c3:
                    5b:73:1a:1f:d3:f4:78:35:74:d9:8f:a6:79:81:8d:
                    eb:12:58:2a:9e:ec:ef:79:81:04:f8:4e:39:8f:1d:
                    cb:7d:37:27:83:05:71:22:3d:74:51:e9:02:a4:aa:
                    8f:9d:9c:5d:5e:bf:8c:12:b5:96:08:4d:cf:2a:f7:
                    d1:25:83:56:0e:4e:25:76:73:02:e5:0d:9b:90:a2:
                    e7:e2:53:c6:33:89:46:4c:8d:3c:45:ac:72:12:39:
                    07:a9:dd:72:32:9c:ee:31:12:5e:f8:86:25:d9:fa:
                    c2:11:48:88:b6:65:8d:a8:74:73:43:1c:04:75:b6:
                    53:0d:17:0c:5e:3b:ed:9f:15:58:1a:33:e2:a2:86:
                    b3:cd:7e:1f:16:bc:54:25:a2:04:96:aa:8c:fe:b1:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:30:0D:A3:02:BE:05:55:8B:BE:48:75:4E:8E:E4:11:4E:78:44:B4
            X509v3 Authority Key Identifier:
                keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:52:2c:7e:12:e0:5b:93:7d:f5:04:56:c1:3c:d7:e3:10:31:
         92:b4:7d:92:e7:d2:5b:1f:85:66:1c:c1:0a:46:2a:c0:92:23:
         fb:3e:13:af:9e:41:31:33:26:6e:b8:69:3e:94:72:de:0b:7d:
         4f:d1:78:bb:75:da:84:12:65:24:c5:09:54:0d:8b:4d:b6:db:
         86:10:1a:bc:c8:08:8b:5e:1e:a8:f3:2b:6f:af:25:54:7c:c6:
         d0:9f:7d:8f:1f:51:02:eb:07:11:3a:1c:43:0a:0f:14:54:a4:
         66:1f:13:2d:e2:78:4e:b2:db:ed:e9:26:10:f3:06:d7:80:b5:
         9c:ad:fc:4d:18:39:a7:92:4b:69:db:e3:cf:28:29:dc:5d:3f:
         c4:3b:a6:7d:84:2e:bb:15:69:e4:9c:47:e7:ae:48:f5:6e:96:
         f9:96:8a:15:7f:b8:11:ac:5e:cd:db:28:1f:eb:62:ed:3e:85:
         cd:bc:d0:b0:b5:2c:00:0d:f2:03:bb:76:b0:d9:e5:8e:df:55:
         dc:1f:4e:ec:6f:5a:be:0c:6b:ce:e0:58:fd:aa:f4:31:0c:fa:
         1d:af:08:36:20:4e:23:f2:1f:3e:a9:dc:91:4b:52:34:3f:38:
         10:46:f6:35:08:27:f7:96:3e:26:a1:71:88:4a:95:77:9d:d7:
         6e:80:30:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:48:19 2024 by rpki-client on console-ams.rpki-client.org