Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File:                     I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier:          AgPaY3vHBJ+KVuTE6SEF+P92JIx/IhpyJzVzbjqVk24=
Subject key identifier:   47:60:FF:BD:63:CA:FA:AA:1F:30:2D:FD:01:F1:21:5F:A0:C1:2E:C4
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer:       /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial:       018F8892791DEB9B9AF33ADE952D6D65EB80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number:          01B4
Signing time:             Fri 17 May 2024 22:00:51 +0000
Manifest this update:     Fri 17 May 2024 22:00:51 +0000
Manifest next update:     Sat 18 May 2024 22:00:51 +0000
Files and hashes:         1: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: t7y1NL3LbmK20iv5c+cIp1DSp+nNZkwmNnnhLyBRcUA=)
                          2: pIOfnwrKU0dtwX3cvseISryMLW0.roa (hash: Smr2/rBVa/yz6p15lE9WZfgYDOTaRpHJ01l5NAFZu5Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:79:1d:eb:9b:9a:f3:3a:de:95:2d:6d:65:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
        Validity
            Not Before: May 17 22:00:51 2024 GMT
            Not After : May 18 22:00:51 2024 GMT
        Subject: CN=4760ffbd63cafaaa1f302dfd01f1215fa0c12ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:18:60:6b:41:92:71:7e:bd:bc:d5:35:f0:
                    19:7f:3a:9b:80:88:fd:eb:46:6e:bf:3d:da:36:9d:
                    a4:e5:4d:6c:8e:fa:e5:3a:ab:59:0e:85:c2:fd:e1:
                    89:db:92:6b:b5:ca:c8:2e:0b:01:8e:cc:9a:81:e9:
                    42:3d:a7:35:87:b4:14:04:4c:33:ee:9b:9b:92:2f:
                    2c:ee:04:fd:8e:1b:1a:96:f0:3e:17:01:e2:e6:db:
                    d5:aa:95:50:53:51:b7:95:c7:11:3a:7b:59:3f:72:
                    60:49:9e:73:b8:7b:62:e2:b9:a0:6a:e4:98:69:53:
                    6d:f7:e8:30:66:50:55:69:9b:6d:22:c5:3f:93:bb:
                    18:c9:d3:09:7c:a2:a2:e4:ea:ab:4b:ec:7e:8c:11:
                    ab:14:eb:45:93:a8:cd:a4:7d:c3:b6:ae:93:ed:40:
                    e2:8a:37:97:70:54:8c:16:ae:b9:df:63:5d:ee:3a:
                    dc:4b:70:6b:12:19:fd:5e:70:e6:1a:b1:af:4b:22:
                    6a:65:77:ee:56:91:47:38:64:dd:94:62:ee:a0:29:
                    7a:eb:17:88:d8:d5:98:82:0d:a3:53:3c:6b:0f:db:
                    76:4d:ac:85:37:4e:ce:38:c6:68:39:ff:ce:db:ef:
                    a4:b3:59:c6:2f:82:a2:cb:e4:dc:80:7e:43:cb:e4:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:60:FF:BD:63:CA:FA:AA:1F:30:2D:FD:01:F1:21:5F:A0:C1:2E:C4
            X509v3 Authority Key Identifier:
                keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d1:01:d4:f5:75:f4:46:c4:85:20:b0:61:26:1f:07:b4:95:
         9b:77:1c:0d:ce:c1:95:44:e9:6f:71:1d:99:6b:c2:d1:cf:a4:
         57:b7:e9:48:ef:9a:ec:a2:0c:4e:3b:74:7e:c7:6e:5c:7a:ae:
         55:f4:1b:99:7a:c0:70:55:6b:0c:d6:81:db:d0:c0:e0:bf:8e:
         08:0e:0a:4d:82:3b:be:8e:f9:dd:5e:e3:8f:b8:04:34:be:fd:
         1f:3d:25:f9:1f:03:e2:a4:ec:d4:5d:d6:95:0b:c6:85:46:41:
         e4:c6:da:ef:5a:27:b0:2e:8d:4c:26:75:c7:a8:ca:e4:1a:94:
         ed:4d:ae:7e:f1:78:a2:e2:ac:33:f1:e9:6d:64:18:2e:58:0c:
         19:00:21:61:28:d7:fb:7d:b8:50:71:1b:f4:41:4d:b9:f9:ca:
         70:19:7e:5d:19:b1:82:0a:d8:c3:7a:5f:08:15:14:38:f4:ed:
         93:2d:39:8e:dd:ca:18:4b:0d:d3:c8:a2:d8:26:08:89:a7:85:
         b2:84:e8:12:68:45:54:00:37:08:c6:6b:2f:c7:18:9a:b0:91:
         08:35:ae:14:00:9d:92:bc:2a:d3:42:25:df:13:dd:99:08:59:
         98:12:d0:f5:8e:09:50:52:27:43:18:7a:19:da:4d:43:e4:d1:
         83:89:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:48:02 2024 by rpki-client on console-fra.rpki-client.org