Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File:                     4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier:          od9gke1DNwj/O4hOo7r2wJzdjbEb1tSq7BMaEYdUqy8=
Subject key identifier:   BC:88:DD:F3:61:EE:C6:DC:0D:E6:75:E8:E1:C5:16:EE:DF:4F:39:E0
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer:       /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial:       018F3BF9D7A0B04CF1B8387A4FB4E752E0A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number:          0BDA
Signing time:             Fri 03 May 2024 01:03:00 +0000
Manifest this update:     Fri 03 May 2024 01:03:00 +0000
Manifest next update:     Sat 04 May 2024 01:03:00 +0000
Files and hashes:         1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: Q25lyYgBFrUNgQt2e3Tj+1E+dj/AMUF22U5Fa2Xxt60=)
                          2: Ra2yohMs4LbhrIuUTTG_z0f40LE.roa (hash: 1MMpU5v8/l6O2rSlqYKubJ/ZY9u21uftC8TUmIDIgns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:d7:a0:b0:4c:f1:b8:38:7a:4f:b4:e7:52:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
        Validity
            Not Before: May  3 01:03:00 2024 GMT
            Not After : May  4 01:03:00 2024 GMT
        Subject: CN=bc88ddf361eec6dc0de675e8e1c516eedf4f39e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:45:86:c3:93:bb:75:99:dc:9e:6c:cf:69:
                    59:06:a3:bf:57:07:5b:a6:28:0f:2d:27:31:02:16:
                    85:77:18:a5:12:23:4a:8c:d1:c0:ff:92:2b:16:34:
                    a3:ed:cc:28:8f:38:d1:ba:6c:c5:b3:81:18:5f:a4:
                    29:6c:ad:84:17:1f:60:e7:1b:1a:48:b7:cc:81:2c:
                    00:81:01:bf:fa:88:40:13:53:35:bb:fb:67:c0:b6:
                    80:17:a4:93:f8:04:68:74:a5:13:07:03:71:18:ad:
                    8d:96:c7:13:10:be:15:fc:ba:8b:e2:bf:bc:e4:f0:
                    9b:7b:aa:65:09:ad:ed:1b:85:df:0a:5b:b1:fc:96:
                    aa:e1:fa:9e:6d:ff:7f:5a:86:8d:d3:e3:69:a5:be:
                    0d:5f:ef:6d:ee:42:94:e8:b4:0b:bd:bb:79:a7:97:
                    94:fe:e3:58:9f:09:2e:c3:6d:05:af:fc:a9:eb:b5:
                    a8:af:a6:a2:1e:e7:6b:84:0b:68:ae:90:89:35:e7:
                    d5:0f:e8:12:bb:c2:b6:63:79:a6:fb:c6:9f:b6:b9:
                    72:e4:e6:68:fc:8f:1b:02:61:75:3a:1a:0d:04:e2:
                    23:51:f5:b3:0c:80:3d:37:b5:95:d6:94:b0:cb:3e:
                    fa:55:5c:6a:ba:78:9f:3a:fd:e2:9e:91:1a:49:85:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:DD:F3:61:EE:C6:DC:0D:E6:75:E8:E1:C5:16:EE:DF:4F:39:E0
            X509v3 Authority Key Identifier:
                keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:87:4a:83:dc:27:d8:3a:83:2d:a4:7f:eb:99:84:c4:95:71:
         89:94:82:f7:cf:6f:fb:48:39:b0:86:f1:c2:06:ad:da:00:19:
         00:61:90:74:22:e8:ff:e7:8c:57:5d:b3:c0:82:49:56:bc:56:
         d0:26:cc:5b:b2:44:e2:20:16:d3:e8:2a:1c:9d:03:c1:e1:eb:
         96:9c:5c:10:d7:b1:c4:a4:99:ae:36:03:40:06:e4:ae:77:34:
         13:5c:e4:ef:f0:a8:5f:16:ad:44:65:71:00:4c:e3:61:3d:dd:
         e2:7e:c3:5c:9f:7e:6b:6b:8b:7a:8d:29:8d:27:1e:af:23:b6:
         fc:96:21:09:33:ec:f3:85:5f:ec:28:d4:28:6a:b4:de:ae:41:
         d2:c1:17:07:c9:5e:d5:5b:b4:6d:a0:8b:2f:af:01:b1:84:69:
         2e:5a:2b:ce:50:11:07:d0:51:f7:6d:92:f7:bf:8e:81:fa:50:
         39:25:e6:ef:80:88:e8:f2:d3:d9:ad:2f:2c:00:81:29:f2:fe:
         a4:61:ce:19:d3:07:e4:51:92:b5:62:6c:6d:28:b0:71:63:bb:
         dc:e4:80:12:38:d4:5e:49:f5:dd:1c:9d:fa:cf:a5:bf:56:02:
         59:eb:e6:bf:0f:d9:ca:9e:87:5d:c7:9d:10:f4:02:ac:b1:06:
         65:21:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:15:25 2024 by rpki-client on console-fra.rpki-client.org