Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File:                     Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier:          gLI97xZatfGsOLeJvq0U+ETOJhCKEq+w3WQwcoZaecA=
Subject key identifier:   C2:58:FA:31:A7:CB:95:9F:A5:9B:6F:01:9D:C4:35:32:D8:71:A3:BA
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer:       /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial:       018F392E113B777794AACB5E68E6E53A907C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number:          04E7
Signing time:             Thu 02 May 2024 12:01:11 +0000
Manifest this update:     Thu 02 May 2024 12:01:11 +0000
Manifest next update:     Fri 03 May 2024 12:01:11 +0000
Files and hashes:         1: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: leufqvnvZ53NA1tD2+dw6FYpUkOlXNXKPUlCEcMkj2o=)
                          2: bLjE5wAHnF2kq32TOEADdiuaw5M.roa (hash: 2EDBk1BN57T4Ds/T83v/WfMzE+mBoGkkME3GtfAghQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:2e:11:3b:77:77:94:aa:cb:5e:68:e6:e5:3a:90:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
        Validity
            Not Before: May  2 12:01:11 2024 GMT
            Not After : May  3 12:01:11 2024 GMT
        Subject: CN=c258fa31a7cb959fa59b6f019dc43532d871a3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:fd:ec:26:68:16:54:30:cc:e0:e1:ac:9d:
                    60:4f:57:63:05:ee:68:f6:8b:a9:7c:ae:f5:53:0f:
                    d5:cd:98:28:0a:fc:4f:3f:9a:6e:4b:c7:e8:e7:a6:
                    7b:9b:16:f1:f8:ec:1e:15:0c:7f:cf:ad:db:71:66:
                    ce:df:a3:1a:ab:e1:24:60:03:76:d4:dd:8c:17:3c:
                    46:0c:8a:ac:c5:96:b5:9c:79:fc:14:5c:8c:2c:c0:
                    83:fe:68:ca:64:3a:65:a3:c1:35:22:62:69:4a:4e:
                    69:0d:43:28:5c:c8:d9:47:35:25:26:ae:19:bb:9f:
                    2f:8a:bb:32:0f:9e:84:a8:4c:89:1a:ec:fa:d8:57:
                    1a:2b:12:be:e8:3d:be:8e:a6:6f:b1:08:8d:56:21:
                    58:fd:33:80:67:97:4c:3c:69:41:ef:51:c5:ed:05:
                    9d:cb:53:31:2b:f4:ee:f8:a4:46:ca:ec:84:86:14:
                    61:24:f9:58:20:bc:69:8a:f4:c3:3b:04:f2:e8:99:
                    24:cd:bc:83:31:2a:fb:f3:2c:ea:04:84:7e:8d:4f:
                    1c:e6:64:21:2d:d2:ff:b2:56:b5:b6:4f:98:83:f8:
                    c5:b8:96:a8:48:f2:f6:5b:5b:9d:fa:ae:ca:1c:03:
                    ee:d8:fb:5f:bd:2a:15:d6:a9:bf:2b:1e:f0:dc:44:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:58:FA:31:A7:CB:95:9F:A5:9B:6F:01:9D:C4:35:32:D8:71:A3:BA
            X509v3 Authority Key Identifier:
                keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:98:9f:37:04:f7:46:1a:3d:9f:71:2c:68:59:c7:2d:1c:
         31:53:3e:a0:c8:ec:15:5f:b8:43:f9:8a:d0:f2:ab:53:b5:12:
         2c:61:1b:93:73:59:85:71:16:94:b9:8e:42:75:45:f6:be:d7:
         59:3e:60:c6:92:51:bd:6e:ae:d1:da:f6:42:ba:70:2d:52:8f:
         52:37:bf:4f:96:30:05:05:93:50:70:d8:fb:b9:9f:e1:71:5d:
         f3:27:92:57:c7:c8:40:22:79:c9:8c:00:d0:98:b8:d5:08:9b:
         08:7e:5d:54:d3:fe:d9:44:11:29:46:0e:5a:75:50:da:70:34:
         80:6e:37:da:f1:26:76:b8:55:6e:03:52:2c:c8:31:80:9d:ca:
         d8:26:ae:12:e9:a3:ca:18:58:e7:26:bb:e4:d7:7a:19:3e:d7:
         a0:65:01:ec:3c:2b:33:47:92:33:c7:f3:12:3e:44:89:a0:6e:
         b3:b6:61:ae:9b:e6:77:e6:0a:10:a5:ea:90:57:7d:d1:42:36:
         57:9a:b4:0f:37:a4:2b:16:89:7a:18:e0:d8:3f:b7:d7:4e:f9:
         07:b0:be:83:91:8a:60:2b:f2:d0:79:a8:f4:94:e2:d7:7a:e4:
         38:28:58:5d:a4:04:15:61:4e:ed:d3:d0:71:3e:93:a2:b0:e8:
         29:88:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:15:14 2024 by rpki-client on console-fra.rpki-client.org