Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File:                     4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier:          6kPXUKVAG/3k+cNveW6ZidfM0f/QLG5Yi02TO7i/3VE=
Subject key identifier:   FE:D1:BE:0E:75:81:CC:94:42:EC:2D:E8:9D:2F:D2:95:59:C1:4E:3C
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer:       /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial:       018F38BFFE2266A627EC63E63EF803F27272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number:          0D7C
Signing time:             Thu 02 May 2024 10:00:57 +0000
Manifest this update:     Thu 02 May 2024 10:00:57 +0000
Manifest next update:     Fri 03 May 2024 10:00:57 +0000
Files and hashes:         1: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: Arpapi2r9BT7g/Jc3aIuYgCU/BDtzgyuEG+EWAKvKB8=)
                          2: HSu42wYVHeQlFkn0sBRbDFJNtNw.roa (hash: uXEuIu7iJLHGA9YkMe9FXvzqaLOp23KpaKzttxmQPys=)
                          3: hyi6JuY73xPZcokcebBm_FmZyyY.roa (hash: zQKPsA0T4NOWqz2srC42ViSa9ImtjDOANA0Zc4jjvFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:bf:fe:22:66:a6:27:ec:63:e6:3e:f8:03:f2:72:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
        Validity
            Not Before: May  2 10:00:57 2024 GMT
            Not After : May  3 10:00:57 2024 GMT
        Subject: CN=fed1be0e7581cc9442ec2de89d2fd29559c14e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:4c:ba:43:3e:3a:53:35:7f:1e:97:51:c2:
                    b8:98:50:b7:33:6e:b2:50:8f:f9:57:c4:49:dd:67:
                    63:b3:f6:49:3d:56:99:12:d2:e6:b6:36:87:2c:ae:
                    c6:a3:2f:12:63:3c:07:68:3f:b4:d1:3a:cd:8a:0d:
                    08:2b:18:f0:e2:ae:da:e0:c0:87:2f:e2:80:d1:62:
                    48:7c:a5:6c:8d:ab:77:86:08:c5:c0:f1:ef:1b:aa:
                    7c:40:65:c2:3f:81:19:9e:7c:82:b9:19:20:31:1a:
                    c0:ac:83:87:b7:3a:a3:0c:0a:29:f1:e7:d5:1e:ab:
                    e0:3c:ba:02:b1:e8:17:79:85:5e:f1:b2:d9:75:c6:
                    5a:7e:a7:a6:34:28:90:79:d2:e0:f0:fb:1f:80:fc:
                    e9:c9:39:38:11:e1:d4:3f:4d:3c:57:2c:21:1f:3e:
                    22:fe:be:c5:33:dd:3f:e9:70:f5:e6:84:96:28:3f:
                    21:d6:51:35:3f:b9:50:ab:8d:6c:f5:93:0d:eb:c4:
                    60:62:57:99:f2:e4:62:42:e0:8b:13:cc:5d:5f:e8:
                    01:54:82:05:14:e0:09:1a:d8:a5:c2:5d:b0:0b:50:
                    3c:a0:ee:a0:bb:ab:15:18:d7:86:c8:a2:d7:c7:78:
                    c2:57:14:a3:ea:ea:97:36:85:bd:5e:f3:50:b9:4b:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:BE:0E:75:81:CC:94:42:EC:2D:E8:9D:2F:D2:95:59:C1:4E:3C
            X509v3 Authority Key Identifier:
                keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:76:10:b3:22:f1:5f:43:64:3a:ec:dd:c2:87:06:50:e9:e1:
         91:79:65:e0:ff:3c:c6:9c:a4:96:f1:eb:ef:75:a9:da:35:65:
         70:09:30:ef:f4:fa:60:c5:79:aa:52:de:ae:32:f5:c8:3d:3a:
         dc:1b:ec:16:f3:cf:19:ef:64:29:72:ff:0d:bf:e3:eb:b3:7a:
         74:87:05:27:dc:a4:d0:70:a6:f2:8a:76:74:ca:b2:f7:de:df:
         f2:40:0f:bb:75:79:70:66:03:35:97:b0:3d:89:4e:17:3a:ce:
         bf:28:ba:20:d0:0e:f0:15:35:c7:85:e0:86:1c:44:98:3f:4c:
         ff:73:9d:27:9f:7f:5f:ff:17:01:e6:00:e8:19:1c:ff:52:e9:
         c8:f3:e4:c5:44:f9:5a:a1:37:bd:77:f5:c2:88:c9:cd:67:df:
         df:e7:e3:a6:a8:75:12:5c:b3:b0:f7:e6:eb:a9:3e:b9:10:c9:
         50:03:4c:cf:e7:3a:46:23:60:e9:fa:61:c8:9e:9b:5d:08:e9:
         9a:a5:7f:ce:c0:6b:54:ac:0b:44:ff:81:a3:27:75:70:90:07:
         c4:2e:b9:4e:fb:a6:c6:d4:06:1f:52:80:de:e1:df:12:80:be:
         a2:91:1d:cc:74:63:5e:e4:a3:d3:79:2c:63:5b:c5:b3:c3:ad:
         7a:fa:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:40:23 2024 by rpki-client on console-ams.rpki-client.org