Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          2kkQMC9w6iuy5FUJKwTEC39nWLFiGGKsFZpSaFybMes=
Subject key identifier:   27:68:99:7B:5E:30:FD:0C:92:D1:D6:96:25:CB:04:8E:C1:68:88:CE
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       018E88601AF71D758711C40B34F1D1806023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          1060
Signing time:             Fri 29 Mar 2024 04:03:03 +0000
Manifest this update:     Fri 29 Mar 2024 04:03:03 +0000
Manifest next update:     Sat 30 Mar 2024 04:03:03 +0000
Files and hashes:         1: MnRoEQdXZai1kPK79cLFZsSc1YI.roa (hash: vT8xkKjN82mqvIUR5Hxa89HhaLskUCwEEIcPYxnHHc4=)
                          2: My9GGVMb3nsRJK_wwRkR3BjurGk.roa (hash: JaoMHcJuNzmxHQGSLg/S4RXUVcStrIlSWyx8j34lrGc=)
                          3: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: YMRBsaMFxdf6oi86P2gW3ztVQENqa7SR0lq1FudQWqE=)
                          4: W1FSZVVHuNAFS1MPVML2o4sSYgg.roa (hash: DPFsng72tMTuRMwEWtUf24BXNSaRg9itP7rMRCg70P4=)
                          5: _5OV7Balrz66uhUswws9fG8M2DU.roa (hash: MByHNzelCCbyYvTI2j1wadVKiWo9jT7cXV+sLU1W5Wc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 04:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:88:60:1a:f7:1d:75:87:11:c4:0b:34:f1:d1:80:60:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Mar 29 04:03:03 2024 GMT
            Not After : Mar 30 04:03:03 2024 GMT
        Subject: CN=2768997b5e30fd0c92d1d69625cb048ec16888ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:7a:d1:2d:cf:ec:d4:81:c9:16:6d:b5:f3:
                    c8:4e:2d:df:5b:1b:05:18:37:5b:61:cf:e7:ab:55:
                    0c:7e:ba:aa:0f:58:2c:75:c2:aa:54:6c:af:a6:4d:
                    6a:b6:55:04:f2:b4:d4:c9:38:10:f4:74:55:cc:13:
                    64:a7:c4:2a:30:35:fa:00:c2:a1:67:1c:bb:56:87:
                    f8:01:a1:d1:db:c5:2b:d5:f3:4b:a7:f9:26:43:01:
                    3c:b4:9e:f6:99:1e:64:58:a6:65:2a:79:63:98:80:
                    25:d4:3a:25:38:88:c5:ce:64:43:f7:ad:82:c7:39:
                    61:69:63:09:36:0b:61:89:0f:fd:68:0a:0f:13:4c:
                    2f:8d:da:90:2c:8a:f1:a1:87:98:7a:8f:10:e9:68:
                    dc:81:18:88:53:f2:b4:76:f9:ad:81:93:fd:89:00:
                    3e:90:9b:19:44:ec:39:72:e6:8c:ba:9a:b0:54:a0:
                    02:b8:55:27:fd:bf:1f:53:ec:b6:e3:4b:45:d3:d0:
                    a8:1f:02:e0:3f:9b:71:d1:1c:24:a6:5b:57:6a:0f:
                    b5:6f:c7:de:19:ba:89:7d:08:8c:d2:91:9a:61:c2:
                    1c:d0:14:2f:1c:6b:04:25:2a:ee:70:31:43:c8:6f:
                    41:0b:83:0d:4d:f1:4d:6c:7f:f7:0f:c7:11:a6:73:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:99:7B:5E:30:FD:0C:92:D1:D6:96:25:CB:04:8E:C1:68:88:CE
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5e:f4:48:8b:08:92:e2:93:b1:93:f9:02:e3:fb:9a:7d:ea:
         96:6f:93:d6:bb:1e:8a:f1:9d:b6:bc:5c:71:1d:5c:27:01:5f:
         a8:ef:c8:75:0e:c1:37:5f:2e:30:3c:f9:e5:48:f8:da:a1:b4:
         49:b1:19:e0:d9:85:3a:78:58:c2:ad:37:69:dd:02:c6:dd:77:
         72:b4:6c:96:33:c5:93:27:7b:39:c8:6d:ec:04:23:1e:bb:08:
         b4:ca:e2:26:a6:10:9a:2d:79:2c:94:83:a3:62:76:f5:0a:0d:
         1a:de:e3:f9:08:7b:dd:bc:02:ac:25:0e:08:3d:17:bc:29:09:
         8e:a8:a2:34:f6:e6:e7:5d:50:dc:1c:b1:e9:99:ac:6b:89:fc:
         8f:e5:96:46:62:35:50:36:82:cf:c8:f9:fa:f4:1a:80:f7:2f:
         9c:59:ac:44:37:33:17:e1:2a:8c:d5:28:42:a3:d9:9e:60:2e:
         97:b2:16:de:7b:ee:f3:b4:d3:fe:83:ed:67:79:0a:46:df:e6:
         8c:3c:7f:49:6b:fe:45:26:fa:71:0a:b2:45:da:19:76:9e:74:
         ca:2f:f9:0c:47:8b:de:fd:65:2e:48:80:1c:97:d2:bc:8d:ea:
         86:59:77:78:00:b2:f2:2f:9d:35:f8:6d:f9:bc:11:3b:92:ba:
         55:3c:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 08:53:23 2024 by rpki-client on console-ams.rpki-client.org