Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File:                     1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier:          4+2obicRajCOnS0ZOmwDElYsJCdvkI5hu9BxlbsNwmQ=
Subject key identifier:   C6:71:5C:AB:0F:25:E2:F5:67:9A:76:A3:15:3D:77:6A:DA:AE:80:08
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer:       /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial:       018F87B68AC6D4D12CB1A9DE75808838BF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number:          A4
Signing time:             Fri 17 May 2024 18:00:38 +0000
Manifest this update:     Fri 17 May 2024 18:00:38 +0000
Manifest next update:     Sat 18 May 2024 18:00:38 +0000
Files and hashes:         1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: YtLk1p12oYRf+4FMNEJIRjbcfuXAJ5oe+RyrzHDv7Kg=)
                          2: 9Jj_FghD_cirMjHIN_NP2u3z9qg.roa (hash: A+rgvS9wluMd7LCZFyQ63A+lTUwZsVwHsgXhWoZ+tWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:8a:c6:d4:d1:2c:b1:a9:de:75:80:88:38:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
        Validity
            Not Before: May 17 18:00:38 2024 GMT
            Not After : May 18 18:00:38 2024 GMT
        Subject: CN=c6715cab0f25e2f5679a76a3153d776adaae8008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:ff:01:23:b5:e9:94:1c:a4:64:2f:d4:39:
                    e4:c4:9a:35:f4:00:7f:be:c9:f4:a8:15:f6:ba:e3:
                    eb:ca:8c:15:47:ad:76:52:e4:59:c0:e6:9c:07:13:
                    d1:15:50:5a:2a:8b:a7:a6:3b:d5:15:04:39:31:47:
                    97:04:42:0a:c4:ec:d7:e6:ed:db:43:12:79:90:18:
                    1c:c9:29:b7:79:fd:3c:93:33:a2:d4:22:98:44:5e:
                    0a:55:4d:9e:ee:bd:b1:13:0d:f8:77:93:43:b4:bf:
                    e9:14:81:78:e9:6c:92:82:20:d0:34:f2:92:d6:98:
                    8a:19:34:27:72:17:69:ff:bd:9d:ed:2a:5f:5b:3c:
                    87:ec:73:28:9a:72:83:b1:a6:20:9f:da:0c:29:ee:
                    f2:3d:ea:de:ee:1e:95:e9:d3:56:c8:4e:60:c5:c1:
                    f7:5e:62:f5:91:14:e3:16:d7:50:7c:92:0d:ef:85:
                    2b:16:8e:39:b1:83:8f:1a:ee:13:6e:ea:42:e4:cb:
                    87:8e:b0:e5:77:38:41:6a:c7:f3:e6:01:16:1c:06:
                    4a:ed:15:d9:dc:ca:16:6e:1b:2b:9f:2d:ac:08:d3:
                    35:97:17:dc:72:ca:ad:39:3c:92:50:ae:45:3f:20:
                    70:c8:eb:30:2a:50:7a:54:cc:0f:87:8b:2f:92:95:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:5C:AB:0F:25:E2:F5:67:9A:76:A3:15:3D:77:6A:DA:AE:80:08
            X509v3 Authority Key Identifier:
                keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:93:94:f7:c1:4c:40:98:a3:4d:f8:70:fd:75:6a:4d:3a:
         3b:30:99:0d:b2:ec:6a:d6:63:06:b6:61:46:81:95:ae:c5:8b:
         b0:c3:75:c0:a8:15:d3:2c:f1:46:28:b3:c0:14:23:df:15:57:
         12:b9:65:fa:d2:ba:31:ed:67:92:d9:4c:19:5f:14:07:ea:14:
         99:43:81:f1:f8:35:17:22:b3:a0:c6:fb:be:d6:38:f4:66:38:
         8f:cd:07:b0:ea:e2:b7:1d:bd:f3:62:81:85:69:97:7c:70:95:
         b9:be:2b:e1:5d:ae:ae:08:ab:f6:a6:cd:e4:d9:f3:5f:61:b0:
         0b:64:2a:64:f5:c1:93:db:b5:c7:a8:ad:b3:a2:ca:f2:d0:6f:
         67:30:30:94:5b:16:b9:b9:e2:ec:7a:e3:11:53:fd:12:ac:8f:
         16:4b:9a:ba:36:16:1d:dd:2c:f1:90:a3:4c:bd:9d:8a:01:a5:
         1a:e0:fb:1e:da:45:1f:9b:7e:ba:af:ff:9e:66:9f:bb:3b:68:
         33:97:1f:d4:2b:6c:51:6e:0e:6f:62:b3:1f:6a:64:20:9c:0e:
         67:f2:c7:72:40:32:4f:8a:f4:87:ff:9a:b7:dd:ac:93:95:d9:
         7e:07:a5:0f:b1:59:6a:d1:ee:8a:6a:cc:5b:66:f4:ad:9e:f0:
         6a:a9:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:49 2024 by rpki-client on console-fra.rpki-client.org