Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          eEYbWTg6SSsbThuuHtxIkZAanpm4Y76n2fTWen2YfmM=
Subject key identifier:   E8:FF:A1:FB:DD:F7:4A:D0:1F:FD:1E:84:11:44:ED:98:D6:86:9E:73
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       018F43B3F0507EE7B3AD5684FC202D79B7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          119B
Signing time:             Sat 04 May 2024 13:03:36 +0000
Manifest this update:     Sat 04 May 2024 13:03:36 +0000
Manifest next update:     Sun 05 May 2024 13:03:36 +0000
Files and hashes:         1: 2dVJ9Ba5vVXcTWDiPYn6RWK1A3w.roa (hash: +9O3Mv3EN9TBnFarhg2copHQG8wzRhXwtireKPnLTSE=)
                          2: 4OY2EkQB_a9wmt1y9aVCHfcXvr0.roa (hash: jLCtPqzATE1FJD1QAqVfxe1BoGXcB3hXqfSnt9VHQdA=)
                          3: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: uSHGYBE1HRBWoYYRRCwkJzGLug5R1/hAId3UyMGnNgI=)
                          4: 7_hlcfIUkSz3NRJGhlKflQzPAjY.roa (hash: aaPZjFozt2RMe7RKHmxVLr/ZhG51X/JQJB6O75UBvBI=)
                          5: LgftrbGLkXUsciG_uH7qi41wzQ8.roa (hash: N79U0I7Gr3bdnZ966DwYzKA0gzLt5iGoxzRy1JhsSSk=)
                          6: Tq_CU5q5AE-1icAMZmIFZHGBnME.roa (hash: CmS24GIM+TwDbY6l3eoUg2Zu+TA6mcV1Z3Xd27Diw1k=)
                          7: _dtUfY7RWHoqoH6YYz_BcZZHlAc.roa (hash: TvA0yRF8ROIljrMUGk0OmF+JwuAtONiPqW5v6G4yNGc=)
                          8: pgpCRqIHovL0WfEhuTcrXyA5v1A.roa (hash: ujVKpSC3mkpNpGgWSsyn86SMT4D8MC4dAcHLdy8XwDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:f0:50:7e:e7:b3:ad:56:84:fc:20:2d:79:b7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: May  4 13:03:36 2024 GMT
            Not After : May  5 13:03:36 2024 GMT
        Subject: CN=e8ffa1fbddf74ad01ffd1e841144ed98d6869e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:c7:0d:7a:59:9f:24:5b:b1:e1:ba:ee:18:
                    02:74:de:49:ad:4b:49:c1:37:3b:94:58:d0:10:63:
                    ae:d9:8a:12:50:37:2d:28:e7:43:f6:11:33:da:6f:
                    90:84:43:fa:50:0a:67:28:6e:8a:7c:b3:9f:a3:62:
                    4b:f7:59:43:ce:59:69:e6:ec:e4:5d:47:3c:18:6e:
                    92:dd:0c:ea:ad:f8:99:3f:78:96:c0:c4:a3:ef:fd:
                    9f:8c:c5:57:16:41:63:ab:ec:19:f9:ae:7c:7e:77:
                    71:1e:0b:58:a2:40:c6:77:7d:19:61:9f:26:98:40:
                    f2:67:21:c4:b2:88:07:3c:20:64:21:be:9d:9f:be:
                    9c:69:07:c4:7e:f2:23:8f:06:d2:61:7c:d1:0c:12:
                    9a:84:d2:7e:88:d1:59:23:72:9c:b8:c0:8f:29:d2:
                    ef:14:69:67:02:4d:20:cc:5a:7e:02:d6:30:d8:d2:
                    6e:c7:e2:ae:47:3d:c7:fc:36:8b:65:c6:e7:f0:e7:
                    e7:78:95:49:33:3a:c1:f0:77:f5:ee:c5:68:a2:e5:
                    b6:5f:13:e1:98:3e:a2:29:d3:54:0c:e0:5e:5c:29:
                    5d:2c:c8:01:7f:76:d3:f6:51:ca:96:0c:a0:a3:51:
                    ac:cb:32:5e:74:24:69:4d:38:58:ba:04:b6:d8:b9:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FF:A1:FB:DD:F7:4A:D0:1F:FD:1E:84:11:44:ED:98:D6:86:9E:73
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:56:d6:bc:2c:dc:e5:e7:5c:0d:63:ce:13:1b:7f:20:da:
         f3:9a:01:22:fa:b7:b7:90:b6:ae:f9:30:3a:e8:09:b9:6f:74:
         10:36:89:f5:30:3e:59:3d:1d:fb:70:e8:1b:0f:22:71:a0:61:
         99:71:19:52:80:61:21:10:e1:9e:e1:8e:e6:da:f4:2c:b2:1d:
         81:85:32:86:a5:b3:15:18:74:ca:e2:d4:d1:da:b8:60:13:9d:
         95:b2:b1:9d:e0:db:24:14:f0:06:40:27:00:29:06:a0:38:43:
         81:1e:88:78:95:01:7f:09:92:dc:ff:da:f6:47:48:b8:b4:b6:
         98:c9:f6:d6:ad:50:9b:9b:28:f5:cf:44:e6:9c:b6:83:b0:fe:
         83:82:4e:0e:54:03:a0:1c:9e:92:41:c9:66:c9:48:12:0f:eb:
         20:94:db:62:83:fc:01:e2:a5:05:56:da:6c:bd:d2:71:4d:f1:
         5c:38:4b:3e:53:0d:69:e7:42:e7:b8:ff:ca:39:01:5b:e2:92:
         64:b5:99:59:23:24:72:08:1e:bc:71:81:d3:74:b9:f0:55:7d:
         e3:d9:e4:d5:93:5c:80:db:a2:a1:5e:41:9d:66:fd:f4:5b:11:
         98:bc:f3:86:80:54:3e:b6:17:ce:2a:57:9b:cf:51:29:f1:d6:
         49:80:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:42:51 2024 by rpki-client on console-fra.rpki-client.org