Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          1ueZJo9ByubEPoqUvP2awNI6291pea6Ho6wA2G9Touw=
Subject key identifier:   5C:11:DE:25:8E:D0:DB:A8:AA:78:43:74:4D:01:F4:C9:9E:F0:87:D0
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       018F8D1409C03636435C8D3A7EA527B031D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          117E
Signing time:             Sat 18 May 2024 19:00:51 +0000
Manifest this update:     Sat 18 May 2024 19:00:51 +0000
Manifest next update:     Sun 19 May 2024 19:00:51 +0000
Files and hashes:         1: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: NCkTm7kHnb2VGIXqYzkvb3kNf20n8jYjYxC0ETpC7Y0=)
                          2: 7vl71f9yiQpgh6fuSsJU4ihMrEY.roa (hash: 7jdON+XrOCGOAPONn4PgQRNbd/EpntqX9r9ID1tGOgM=)
                          3: OWJQlf-6clcUixfoFOWZaB1XClw.roa (hash: OlTPdOcI0kN2FBNVbaTP9ZxJbQaDdPJN1x/fCRiUFqo=)
                          4: Ym_npFTJNTxZ0IrEFGtgN-HsgpI.roa (hash: vpdXrWahwUZSLgY/fs3MFvabGAuQSWhEWRs0+wSpd4Q=)
                          5: ajxog4V3J4pMAQiqZd8sRhQh39o.roa (hash: QPkcQaYYwmcZFrbUzRuIZZGARsnITbtScEv0Qn3pODw=)
                          6: s_vHaBAIG73SXd3algISMeLUHjk.roa (hash: gsHuMtHStxFiycB1P6aA4k4ZxGNun5Aq3l6tDHKbPg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:09:c0:36:36:43:5c:8d:3a:7e:a5:27:b0:31:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: May 18 19:00:51 2024 GMT
            Not After : May 19 19:00:51 2024 GMT
        Subject: CN=5c11de258ed0dba8aa7843744d01f4c99ef087d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:54:12:a5:ae:ab:dc:e7:4b:56:0f:9c:dc:
                    cf:d8:6b:41:5a:97:1e:6b:a9:e4:62:83:ef:4e:c0:
                    6f:dc:03:54:0b:76:8c:25:dc:87:43:e6:7d:8b:6b:
                    78:c0:bc:3b:3f:9f:12:90:09:b1:69:73:fa:8c:b6:
                    1d:c2:5d:04:6d:21:33:6a:df:23:0d:c8:19:e5:e9:
                    94:e7:bb:a4:a3:8c:e5:53:27:04:57:66:31:60:07:
                    ae:bc:51:ba:c7:cb:4b:bb:43:fe:5e:6e:0f:c0:ff:
                    71:2c:06:89:47:24:41:3d:ea:f6:f2:47:3c:03:d8:
                    54:58:81:21:df:75:ed:e6:1b:f2:c7:bd:6c:2f:d8:
                    9c:6a:c1:ac:8d:4d:0a:fd:81:19:44:13:a4:cf:f6:
                    6d:74:a1:59:53:fc:ca:c4:06:ae:0b:23:47:af:da:
                    cc:52:94:85:22:12:c0:db:8c:82:b2:ab:bc:77:98:
                    be:2d:52:1d:79:f4:a9:7a:15:6d:1b:9d:6d:2f:56:
                    0e:e2:78:97:53:a9:88:16:8a:21:87:9a:aa:63:5d:
                    86:09:2e:49:ba:67:4a:ed:52:52:ae:37:19:53:df:
                    02:14:8a:47:e6:d8:c1:71:cb:fd:27:93:95:f5:2b:
                    3e:02:d4:4e:9b:34:45:46:1c:e7:7a:ba:8c:fe:32:
                    09:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:11:DE:25:8E:D0:DB:A8:AA:78:43:74:4D:01:F4:C9:9E:F0:87:D0
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:01:e3:3e:b2:5f:ac:3a:d8:8e:1f:47:8a:d3:ad:08:89:ca:
         ab:d2:b7:d6:0e:d0:4a:43:b1:3c:3d:86:24:a3:49:3c:04:7c:
         18:ea:8a:22:ee:3c:b8:b7:ae:7b:4d:55:1a:9b:1f:a7:d5:85:
         c7:3a:8b:cb:d1:4d:24:fc:29:d4:fb:fe:0b:ee:3a:b9:99:62:
         9e:74:92:62:0f:50:95:69:5f:74:ba:31:11:88:26:90:a0:00:
         7e:5d:8b:8f:70:b3:1c:33:3e:bb:97:20:dd:e0:88:b8:d6:51:
         5e:69:49:be:27:a5:c6:75:f7:f6:6b:a5:63:19:18:52:d6:7f:
         53:5d:d2:47:e4:ef:50:31:b4:87:61:5d:05:09:6c:50:a9:28:
         a5:54:ce:fc:ab:c9:cb:63:7b:28:5c:af:33:9a:59:8b:97:0a:
         98:b3:56:f1:c9:77:59:c0:9f:d9:e0:22:7f:b8:af:5f:26:06:
         f3:4d:7a:de:4d:d9:ce:7a:f4:0a:ff:53:97:9a:b0:5c:a4:8a:
         25:4c:e7:e6:fd:3f:43:6b:10:68:28:7e:9a:2e:63:c8:fc:3e:
         c4:b2:5e:56:66:f3:a9:ae:7f:b5:8b:d0:9a:61:0d:96:0d:71:
         e7:d9:a4:1d:f4:99:03:50:5d:4a:f9:d4:91:83:14:f7:b0:7e:
         67:1d:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:14:52 2024 by rpki-client on console-fra.rpki-client.org