Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File:                     4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier:          CYagC/8crqUr5cvFrQvH6Gey9pB2xFzMTElIllubOL8=
Subject key identifier:   35:95:18:DF:A9:28:D2:FE:AF:E4:79:95:ED:DA:F4:0C:7A:FF:3E:11
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer:       /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial:       018F505B1B6CEAB4500C07D3CD3A3C895188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number:          074E
Signing time:             Tue 07 May 2024 00:01:39 +0000
Manifest this update:     Tue 07 May 2024 00:01:39 +0000
Manifest next update:     Wed 08 May 2024 00:01:39 +0000
Files and hashes:         1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: M6o+l0Jq/nSlzwHyCtdF6sqfkuD7tNpzk1YZfhSq6f0=)
                          2: qlLxpm32xr2I6Mnyr9sxTUj-5Ys.roa (hash: /iuk7ks/0LwmjAi9X5Ct+RK3xmw5ka0D358QH3DA7xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 00:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:5b:1b:6c:ea:b4:50:0c:07:d3:cd:3a:3c:89:51:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
        Validity
            Not Before: May  7 00:01:39 2024 GMT
            Not After : May  8 00:01:39 2024 GMT
        Subject: CN=359518dfa928d2feafe47995eddaf40c7aff3e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:df:5a:ae:6d:ae:b0:23:7f:dc:4e:bf:c5:
                    eb:7e:6d:a6:f7:5d:40:a6:88:d2:9f:41:97:d3:71:
                    05:d5:f7:e5:38:b9:2f:58:57:0a:1c:bd:45:7b:3f:
                    af:e0:77:f1:8b:2d:99:fa:87:b7:b0:9a:7e:d8:68:
                    f4:48:42:8f:ab:67:1e:5b:6e:c1:84:4b:74:32:18:
                    e6:d1:07:36:da:56:1e:6e:c3:4b:06:a5:c4:1f:24:
                    d0:c4:ca:02:1f:8d:fc:b3:44:f9:f0:10:44:31:44:
                    f2:10:5b:f4:6a:a7:10:73:d3:0f:15:3b:de:00:9a:
                    bd:fa:0a:ca:ee:3f:3c:b3:5c:35:f7:ad:6a:20:b5:
                    7e:f9:a7:90:d7:e7:52:d6:3b:e2:27:88:75:cb:54:
                    d5:b4:3e:a7:ec:ff:7a:b8:e1:30:6b:d2:6a:c4:99:
                    08:03:81:20:36:1b:d7:ce:ee:0d:4b:a4:db:2a:62:
                    a6:9c:9a:e9:9d:96:9d:f0:59:75:02:f1:4a:b3:b4:
                    c9:b8:6c:fd:55:bf:97:24:b8:44:81:92:6f:4b:d1:
                    56:7f:4f:77:b5:5e:d7:b0:00:5f:e8:58:d8:bc:84:
                    19:25:ab:de:7f:62:e6:72:78:93:1a:e4:a5:e1:e3:
                    08:a6:bf:42:a1:d5:b3:62:5d:de:ed:70:47:36:c6:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:95:18:DF:A9:28:D2:FE:AF:E4:79:95:ED:DA:F4:0C:7A:FF:3E:11
            X509v3 Authority Key Identifier:
                keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:29:db:cf:3c:c8:76:d2:61:b4:3b:e5:40:9e:20:8a:6a:86:
         1d:92:71:b0:53:56:2b:2c:54:a3:a4:65:51:0e:2d:d7:e0:56:
         fc:fb:21:f6:73:47:39:3e:e3:2e:0e:83:ce:d5:3b:b9:dd:e5:
         68:6b:35:1f:f6:b3:f1:a5:c4:a8:9d:c9:39:07:b8:e0:7b:c5:
         7a:a1:d3:d9:6f:c0:1c:d0:17:da:06:38:4d:71:32:44:1d:63:
         66:44:ca:47:0f:42:ee:63:68:38:cf:18:1c:51:f9:42:e3:9d:
         7f:7c:45:f9:60:37:cb:ab:75:96:7b:d1:bc:6e:bb:1c:26:fb:
         e1:7a:93:c7:3c:60:e5:2a:3f:53:dd:5b:4d:4f:b1:83:4b:af:
         11:03:8f:31:d8:82:a3:25:d7:15:e1:39:f5:f7:49:87:63:c7:
         41:d4:c2:2e:ca:8a:9d:45:5b:3a:13:36:58:3d:bb:d8:71:27:
         74:ae:18:07:de:fd:ca:c6:c9:5a:e9:55:fe:9d:61:f2:59:e2:
         a8:d3:8a:e5:52:2d:2a:64:2e:e3:22:7d:80:a4:ac:26:69:2d:
         80:a2:0c:12:50:d5:3e:41:25:0b:56:12:f6:71:01:bf:cf:7f:
         ea:d5:08:b0:74:d5:bf:dc:fc:28:9a:98:23:b1:51:12:c0:2c:
         8d:ee:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:24:11 2024 by rpki-client on console-ams.rpki-client.org