Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File:                     4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier:          oy7lbjm69VVtaEr/5ug6mD1DyRxydisfvXRAN7Htpqs=
Subject key identifier:   20:E4:00:69:E1:EB:0E:D9:9F:93:D9:85:B5:FD:4B:69:08:BD:AD:4F
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer:       /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial:       018F874A796B15B75B2DB86D2EDD3D102F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number:          0158
Signing time:             Fri 17 May 2024 16:02:35 +0000
Manifest this update:     Fri 17 May 2024 16:02:35 +0000
Manifest next update:     Sat 18 May 2024 16:02:35 +0000
Files and hashes:         1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: zw4k2hf8sGX8UPYbSj/xTemJciNZTRgFpMuS9R2Q+dA=)
                          2: DAyOCTi2f9EadheTVrjpT2dEFK0.roa (hash: sb+5+X+/RMjuyHF3yAJUpgNXhapRBw1IqbKB9X8Quu0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:79:6b:15:b7:5b:2d:b8:6d:2e:dd:3d:10:2f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
        Validity
            Not Before: May 17 16:02:35 2024 GMT
            Not After : May 18 16:02:35 2024 GMT
        Subject: CN=20e40069e1eb0ed99f93d985b5fd4b6908bdad4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:1b:e7:02:f5:e9:f2:8d:5e:77:8d:f6:c4:
                    a0:2a:21:ed:1f:a5:cd:fc:59:83:dd:97:ec:61:59:
                    ed:28:50:da:af:aa:e2:74:b7:55:71:4a:95:d0:f0:
                    0d:09:5c:f9:22:2f:ff:db:81:44:15:03:7c:93:4c:
                    34:a6:b8:a4:8e:33:6f:b8:39:8c:13:2a:8f:a3:16:
                    38:25:09:25:8a:cb:f6:55:b8:5f:93:10:b1:5c:ee:
                    61:8a:c3:bf:0e:af:61:c2:a0:78:a7:52:e8:40:79:
                    12:d7:71:10:ca:e7:47:a2:31:02:c7:cc:78:95:ba:
                    1b:d3:2c:02:65:20:50:54:e5:c3:24:23:dd:d3:12:
                    e5:bb:4c:ed:dc:6c:f3:d8:68:9f:0b:b0:0e:bf:82:
                    77:42:6b:f8:02:dd:8e:46:68:cc:02:04:9e:dc:10:
                    f9:47:3b:4a:af:28:39:f3:99:d8:f3:4a:1a:c6:b4:
                    ab:a3:96:e6:d9:4a:a4:69:6f:45:57:a4:02:6e:72:
                    55:33:e8:4a:d1:f6:63:8a:73:da:04:69:9b:6b:8d:
                    d8:30:91:91:b5:e8:0d:5e:7e:6e:15:98:11:de:05:
                    e7:d5:4b:b7:76:e2:08:fb:8e:46:9a:bb:fe:6c:7b:
                    90:26:bb:6d:44:89:4e:a7:55:d3:6c:36:25:db:32:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E4:00:69:E1:EB:0E:D9:9F:93:D9:85:B5:FD:4B:69:08:BD:AD:4F
            X509v3 Authority Key Identifier:
                keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:a5:42:88:56:80:20:55:a3:85:09:0a:63:8b:93:7d:dc:
         1e:d6:59:c6:af:3b:f1:f0:8d:cb:55:14:64:8d:dc:5a:db:80:
         22:ae:f9:8c:5b:8c:ab:19:be:ff:e6:7e:dd:57:f7:4d:1b:b8:
         99:25:dd:c4:3f:43:e0:39:72:51:18:08:02:92:d0:47:c1:91:
         3d:3d:94:fc:4f:9f:ad:71:90:b9:f7:b6:87:b0:1d:0c:14:94:
         fc:1b:05:90:c9:01:04:62:4c:e4:76:61:d6:55:41:a4:4e:a8:
         d5:7c:cf:8a:2f:e6:a2:60:39:75:8f:17:66:36:85:dd:69:b0:
         fa:7e:d7:05:cf:b6:33:04:66:1a:5e:fb:84:7d:d8:e9:66:c2:
         4e:35:a9:5f:a2:ac:b8:67:08:75:a3:6c:93:6a:4b:e4:dd:46:
         d8:7a:a2:cf:30:99:44:65:90:52:b0:af:fc:83:47:9c:0b:d0:
         e3:be:09:f5:3a:5d:07:76:a6:d4:1e:ac:ee:ee:65:ef:79:81:
         9e:ee:c2:a2:27:52:8c:0d:21:d9:93:e8:03:ac:07:7c:ae:35:
         c6:f9:b3:c1:c0:10:6c:2e:ea:c5:00:3f:b9:5f:6d:ca:df:f4:
         ca:34:3d:84:49:f0:3a:9d:a9:6f:7d:7b:ac:f6:1f:10:76:38:
         b6:90:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:05 2024 by rpki-client on console-fra.rpki-client.org