Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File:                     4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier:          /rt/n7/7s5Lintaa27deBALOlja5nQqSBgussjbU9hU=
Subject key identifier:   AF:F4:98:66:17:D2:0C:F5:C4:E3:F5:77:5F:6C:24:2A:31:22:1D:74
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer:       /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial:       018F362ED607A1A4C057523D17EC0F96FDEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number:          0765
Signing time:             Wed 01 May 2024 22:03:10 +0000
Manifest this update:     Wed 01 May 2024 22:03:10 +0000
Manifest next update:     Thu 02 May 2024 22:03:10 +0000
Files and hashes:         1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: dqdCUb3WLoIil6rX0EVXVRO4SubwNNGotxE3cxIey1c=)
                          2: Z3gifg4d3eU3MS3cwfwMq8wHeJI.roa (hash: lZ/o2fGstXX3/iulWs2Pl1V0rS9NEhQhjUJIRI+/swo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:d6:07:a1:a4:c0:57:52:3d:17:ec:0f:96:fd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
        Validity
            Not Before: May  1 22:03:10 2024 GMT
            Not After : May  2 22:03:10 2024 GMT
        Subject: CN=aff4986617d20cf5c4e3f5775f6c242a31221d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:45:48:d6:88:6d:98:41:19:af:d7:df:a3:
                    c6:e4:df:32:29:4c:a8:74:6e:38:3e:b3:43:89:a2:
                    9c:39:1c:b5:3e:bc:38:5c:56:bf:6c:9f:c9:06:bb:
                    e6:c2:2c:38:03:35:75:5f:15:e7:cb:a7:00:9f:bd:
                    ea:6b:5a:58:12:4f:84:87:83:47:d8:93:68:cc:38:
                    5f:f9:62:dc:0a:2f:06:7f:7b:f7:d6:29:29:68:f2:
                    24:df:f8:df:07:9c:78:78:4d:c6:d2:dc:96:ae:1b:
                    81:3b:ed:28:82:7f:e5:d5:db:d2:ad:5f:34:ca:99:
                    b2:b2:b0:29:d4:76:89:10:5c:d9:6d:88:4a:ad:4b:
                    ff:4d:0f:99:b6:fb:4b:f8:b4:66:a9:a5:c2:f3:d8:
                    56:33:e6:29:cb:f8:44:53:9b:3d:0d:30:fe:8b:10:
                    5f:a5:19:db:71:8e:cd:9e:97:66:0a:18:d8:0f:df:
                    1e:4f:b3:4d:3e:89:b6:73:6e:9d:ae:d3:4c:21:9a:
                    dc:31:f3:e1:b7:fc:01:1a:1c:6a:0e:41:a6:25:bc:
                    cc:4b:7c:1f:92:24:97:35:63:61:f0:23:e2:df:35:
                    6b:c7:b1:25:a9:7c:42:7c:f6:86:b1:36:31:2e:0f:
                    fe:91:3d:2e:57:84:18:94:37:9c:b0:4f:80:c2:37:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F4:98:66:17:D2:0C:F5:C4:E3:F5:77:5F:6C:24:2A:31:22:1D:74
            X509v3 Authority Key Identifier:
                keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:93:c2:d4:12:74:cd:bc:18:e8:45:fc:ce:a4:9a:cd:a9:00:
         81:9b:c7:3c:01:c8:86:7e:4a:c2:12:a0:57:db:ac:ca:ac:ac:
         e7:f3:55:6d:ba:d3:f9:7d:c8:30:f2:a3:ad:7c:f8:b9:a8:8a:
         b5:55:6c:1b:86:71:8b:eb:5d:13:c7:3d:ae:8c:93:e5:66:5c:
         26:8a:eb:e2:bb:22:4d:f7:ab:85:c7:83:49:e5:ed:0e:f0:c7:
         12:36:20:da:03:d5:e4:8d:b0:f5:5f:01:c3:0d:ec:a3:b6:06:
         be:6f:91:bb:4c:e9:d2:a8:72:b5:aa:b7:93:09:2f:b8:e5:98:
         47:4c:2b:ce:ad:f3:1b:5b:7d:55:56:45:d6:da:08:90:41:a7:
         11:d0:b1:87:4c:d8:29:ba:c1:96:e1:50:74:e0:3a:04:ac:2b:
         75:d2:dd:60:b9:a8:ee:7e:c0:9d:f2:c4:d4:c2:9a:a5:3c:bd:
         14:69:be:1d:5f:fc:74:41:8f:55:aa:10:cf:43:79:8e:79:37:
         18:04:75:52:f8:bd:b0:4f:ef:be:e3:02:c4:19:1f:59:af:af:
         63:99:8f:f9:84:91:f2:7b:84:f0:2f:f1:6f:dc:dc:05:8c:a9:
         ce:65:e7:f9:ff:22:5f:47:e5:c6:25:57:38:71:62:75:a7:20:
         73:95:bf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:21:00 2024 by rpki-client on console-fra.rpki-client.org