Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File:                     4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier:          x9ckaucwV5kS+hQAXgfOvGw8MYkS1SfZrvm590MKLd0=
Subject key identifier:   90:63:80:5D:9F:2C:ED:6A:BD:35:03:79:E5:79:C0:86:AD:FE:3B:9D
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer:       /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial:       018F874AA1816B4990B97DE8796D5B834D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number:          0192
Signing time:             Fri 17 May 2024 16:02:46 +0000
Manifest this update:     Fri 17 May 2024 16:02:46 +0000
Manifest next update:     Sat 18 May 2024 16:02:46 +0000
Files and hashes:         1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: 1mY2QIvJNyaECU2LF7S9b1OVidzEnQzyi9RRAefbjTM=)
                          2: UJtvMYsRtpQs7oXJIYuG2cwbFTU.roa (hash: DrfJ6s0Gv88FOIz3YFwASt4RqHXcM9t9Ycy35Y/B8lk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a1:81:6b:49:90:b9:7d:e8:79:6d:5b:83:4d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
        Validity
            Not Before: May 17 16:02:46 2024 GMT
            Not After : May 18 16:02:46 2024 GMT
        Subject: CN=9063805d9f2ced6abd350379e579c086adfe3b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:48:a2:53:05:c4:33:30:6a:8c:91:29:ca:
                    cc:fe:0e:e8:17:6c:67:e8:85:9e:58:18:75:d8:58:
                    4d:0c:b5:06:6e:7f:3a:b6:84:ff:c4:64:59:b3:ef:
                    6b:19:69:e5:75:17:ac:47:18:1a:79:18:68:cc:05:
                    bd:a4:9c:66:05:5b:f9:d9:b3:37:90:ae:39:f0:55:
                    59:33:c3:46:f3:57:26:70:ec:50:85:b5:10:b5:53:
                    30:a0:ae:38:7d:19:b8:8c:88:0d:2d:33:6b:66:15:
                    35:6a:36:15:ce:23:76:56:67:be:0b:4f:93:01:a2:
                    14:bc:b6:ed:c2:d4:1e:8f:40:49:81:93:9e:ed:87:
                    a9:b9:76:55:a6:0c:b2:13:de:1d:eb:4a:df:d7:3a:
                    44:75:2c:ba:b6:a6:20:8c:c8:d4:a6:95:9d:13:cd:
                    0f:da:d8:e8:fd:ae:47:b5:2b:48:58:95:50:b1:d3:
                    ce:98:72:c2:06:f7:2d:4b:14:1a:77:17:7e:b0:8a:
                    ec:84:29:34:f5:f1:32:d0:4e:97:5b:00:71:57:4a:
                    9a:2c:27:cc:c9:6d:51:5a:38:c4:3b:ab:14:b5:89:
                    53:e2:aa:1e:48:db:33:95:f5:3d:28:db:73:17:3e:
                    d0:e0:42:b2:28:2b:7d:49:d1:9c:a9:4b:36:d6:25:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:63:80:5D:9F:2C:ED:6A:BD:35:03:79:E5:79:C0:86:AD:FE:3B:9D
            X509v3 Authority Key Identifier:
                keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:08:b3:56:7d:0a:74:1a:aa:87:c8:84:d9:70:36:73:b0:
         ed:bc:0e:74:e5:8b:3f:59:de:df:e8:74:7e:ba:90:ff:d6:32:
         93:49:93:91:28:94:53:2c:e0:bc:f3:02:d9:7e:74:36:93:ad:
         0c:a3:20:50:d8:87:0e:79:4d:1a:29:2f:8b:d4:03:69:93:35:
         cd:f3:27:26:43:3e:9a:c8:88:8b:b1:93:31:60:7c:81:35:80:
         de:03:00:41:ee:84:77:8c:4f:7a:b9:5c:de:b2:78:19:8c:df:
         97:2d:13:2e:ff:79:b2:76:84:d3:64:e4:3e:95:07:ff:c0:55:
         0e:13:53:86:c1:ab:1d:90:79:23:3f:25:24:1f:b0:a0:7b:23:
         cf:f8:76:9e:fb:c1:bf:c6:f8:7f:06:80:16:fa:07:8e:3b:46:
         26:df:fd:10:1a:66:a4:80:21:c0:09:80:0b:d6:4c:c3:8b:60:
         03:96:27:2a:fb:84:a0:5f:25:e8:c0:a1:8a:ff:81:06:6d:60:
         5a:31:88:5c:e9:00:b9:cc:cb:09:d2:8b:e4:53:2c:cc:9f:97:
         97:40:4b:d6:9d:d5:29:59:9b:c9:b9:67:07:39:a4:6c:92:c2:
         4f:a7:fb:9d:3c:ee:7a:16:5d:d5:a0:9d:fa:5a:ee:6f:94:14:
         05:6d:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:58 2024 by rpki-client on console-fra.rpki-client.org