Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File:                     4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier:          mlUJsnykAEFYuuoRYHS1GFyhzWG/UIPPAyLQX4ybxj0=
Subject key identifier:   70:35:06:73:CD:2E:C3:45:37:87:76:AF:78:76:EE:F9:87:5D:9D:D3
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer:       /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial:       018F3AE5FAC59076FD8654EEDE5E47C68EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 20:01:41 +0000
Manifest this update:     Thu 02 May 2024 20:01:41 +0000
Manifest next update:     Fri 03 May 2024 20:01:41 +0000
Files and hashes:         1: 0BW-zNdSuohM9rS5qlq1sjWd88k.roa (hash: H51wGc8uCK2r64T5266r9ecsD3aGm/WBFEskFok48GA=)
                          2: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: Y0eKSQO1oMin+SAP5C0FT1m8slFL7NWj5/Gml7nUwik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:fa:c5:90:76:fd:86:54:ee:de:5e:47:c6:8e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
        Validity
            Not Before: May  2 20:01:41 2024 GMT
            Not After : May  3 20:01:41 2024 GMT
        Subject: CN=70350673cd2ec345378776af7876eef9875d9dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:70:8d:25:bd:58:37:4b:60:73:a8:be:dd:
                    9b:92:ba:75:c0:c0:8f:96:22:d4:0b:8c:f0:9a:c3:
                    8f:1b:35:af:d0:3e:d6:f3:8f:a0:9c:45:df:7c:6e:
                    7a:75:b6:98:9c:24:f2:00:4c:cf:7c:83:a8:fd:7e:
                    82:05:4c:09:b4:b0:eb:75:fd:f8:41:72:15:cc:fb:
                    b0:1d:94:c9:6c:74:cd:42:ed:72:69:e7:0c:0e:f3:
                    1c:60:20:b7:b3:39:80:27:d0:84:5e:01:01:94:f7:
                    10:54:0f:6b:ca:79:0c:85:dd:be:13:07:64:88:20:
                    14:70:74:d6:28:34:27:b7:7f:0c:29:5f:25:28:45:
                    59:ee:1b:15:3b:23:ee:16:fc:6f:89:b6:a4:3e:9b:
                    d4:84:e9:3d:87:52:40:45:df:98:c2:4c:65:0a:d7:
                    0f:c6:c1:08:5c:c2:da:6a:a8:6c:c8:de:d1:c1:29:
                    98:26:ec:0d:85:7a:4c:c6:1a:58:e7:d4:33:f6:06:
                    2d:1e:23:d6:a1:21:5f:50:83:3b:37:0d:8e:08:79:
                    28:05:73:14:40:ca:35:ff:4a:4f:c0:d4:0e:ee:1e:
                    5e:53:dc:6e:1b:d8:b1:27:5b:97:b1:97:1e:b0:2b:
                    b3:1f:e6:69:cb:82:88:c2:3f:8d:5b:ad:23:48:30:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:06:73:CD:2E:C3:45:37:87:76:AF:78:76:EE:F9:87:5D:9D:D3
            X509v3 Authority Key Identifier:
                keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3d:ab:41:a4:b5:3c:cf:5e:cd:79:c9:c5:8c:16:31:d1:a5:
         9d:dd:48:a9:45:be:01:30:be:65:c6:51:92:96:3d:1e:78:7c:
         3e:05:9f:01:7c:4a:2d:f7:cb:79:bf:d3:91:fe:b7:5c:6c:9b:
         50:e9:cb:59:fd:12:7f:14:ea:c5:4f:a0:75:d9:e3:2f:2f:bf:
         f6:3a:43:f7:d8:5d:1f:f5:e6:dd:45:1f:5d:c9:c9:31:6e:21:
         99:a2:e2:83:98:cc:3b:a9:89:01:ac:74:7b:41:9b:20:b5:29:
         a6:19:4a:d3:3e:d9:c2:87:ea:c0:d4:97:7d:e8:44:b9:e1:1b:
         09:b5:86:81:30:cc:67:9e:b2:52:ff:d6:60:c3:62:c8:f0:4e:
         b8:58:2b:8d:e9:08:b2:2c:2c:c7:64:f0:a1:4c:e4:26:1b:85:
         aa:94:2c:60:29:b5:66:c1:a3:59:bb:92:61:0b:f4:bb:f3:ef:
         d7:a0:68:f0:86:0c:4f:61:72:51:6e:20:13:f3:d4:c6:b8:ba:
         54:ee:63:de:de:cb:ee:09:d1:b6:6e:b3:9d:6a:60:fb:57:d9:
         21:44:32:c0:8e:f5:c8:9b:58:b3:2d:1c:c9:9f:c5:b0:48:e0:
         da:79:8b:84:f4:c2:04:1e:27:24:52:27:0d:fb:c4:07:3c:9d:
         74:59:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:07:19 2024 by rpki-client on console-ams.rpki-client.org