Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File:                     E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier:          hq3zmLX2DrgaDt7ClBSvs9SMwSKNj/Tz/iZ7uPXDzcQ=
Subject key identifier:   11:76:B5:89:6D:1D:D8:89:54:E6:0F:34:B0:A0:38:42:2F:CB:86:DA
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer:       /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial:       018F505AE63AC854180ADB4A96115C722B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number:          10B4
Signing time:             Tue 07 May 2024 00:01:25 +0000
Manifest this update:     Tue 07 May 2024 00:01:25 +0000
Manifest next update:     Wed 08 May 2024 00:01:25 +0000
Files and hashes:         1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: 7aficd//Pcrc1lGyOHj8pNX8m2iH21x9GR/WWZDTPBk=)
                          2: wM1Xtp5Gyx91AmfiAm92MOlWexA.roa (hash: 7/LHzfjQOYia0QbwxMj0DALuLQfsf3Zsz4Bb04utlok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 00:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:5a:e6:3a:c8:54:18:0a:db:4a:96:11:5c:72:2b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
        Validity
            Not Before: May  7 00:01:25 2024 GMT
            Not After : May  8 00:01:25 2024 GMT
        Subject: CN=1176b5896d1dd88954e60f34b0a038422fcb86da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:4e:37:37:b1:72:8b:db:f1:66:9d:9a:15:
                    33:19:55:82:c9:fa:fb:12:3a:7b:4f:95:9c:07:67:
                    b3:03:48:67:50:0f:0e:c8:88:97:35:47:73:66:fc:
                    19:71:bc:24:2d:56:5a:23:cd:97:5c:f3:fb:bc:34:
                    87:aa:dc:39:26:7f:1f:43:bd:9e:ff:5e:f6:f8:c7:
                    cc:44:b0:c4:08:ff:0e:1f:73:fc:ce:8f:40:7b:9b:
                    14:4f:fb:b7:4c:54:ec:26:7f:44:7e:4e:2f:1b:95:
                    e7:7b:5d:6b:d2:5e:03:86:9f:14:8c:c5:6b:67:a4:
                    f5:86:cf:d0:ba:13:a1:9a:b6:a7:73:8d:7a:9d:f3:
                    83:5f:07:45:e4:15:6c:63:6b:74:69:a3:f0:e1:4e:
                    c7:23:c5:f5:3b:12:0e:3b:01:88:53:ea:c4:f6:20:
                    08:4d:69:0e:74:64:42:40:d4:10:8d:87:5a:97:a8:
                    f8:ee:36:0b:b7:d3:d7:08:a8:c0:0c:a8:d7:e3:86:
                    9b:82:3d:7d:71:ca:5f:52:59:2f:0f:73:97:db:bb:
                    3c:18:e2:8b:f3:7f:08:80:74:c1:41:ec:b3:25:72:
                    c0:30:5e:4e:fb:14:b9:c5:8a:1e:3a:87:e5:07:b4:
                    c7:88:ad:56:a6:fc:d3:57:9b:4a:ed:7f:31:41:eb:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:76:B5:89:6D:1D:D8:89:54:E6:0F:34:B0:A0:38:42:2F:CB:86:DA
            X509v3 Authority Key Identifier:
                keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:01:20:5c:68:bb:8d:7f:b5:51:99:4c:a3:3b:82:91:fb:d6:
         57:0e:a7:0a:1a:a6:03:3c:f6:10:ad:47:4d:4d:bf:5b:82:7a:
         9f:09:b6:8f:23:11:df:09:20:e0:e8:ed:4c:28:52:a1:b6:51:
         7c:19:b7:7a:e5:bf:5c:1b:4e:64:6c:3f:64:49:fe:b3:9d:8d:
         9f:13:f6:f9:70:7d:ff:a3:54:94:92:f2:a1:31:f8:98:67:24:
         50:d0:08:1d:5e:cd:a5:91:be:01:07:08:86:03:de:11:ef:cd:
         1b:af:53:91:9b:3e:8d:73:3b:2b:10:d1:38:85:ff:c2:84:a4:
         63:fb:35:70:ea:90:c1:f0:3d:8d:f3:7a:12:31:f5:f6:fc:22:
         27:3b:27:2a:ce:f1:a0:26:82:19:c4:9a:65:be:56:a7:fa:11:
         e7:63:b8:3c:14:34:29:aa:11:1d:ad:70:4e:10:4f:b9:a8:b8:
         e0:0e:4e:be:68:e7:62:02:14:a2:bf:ff:4c:f6:bc:ea:5b:7b:
         7f:9d:f7:ce:a3:a2:e2:a9:ce:a5:3c:80:cc:01:d0:0c:07:76:
         89:aa:b4:e9:c1:3a:69:31:12:ec:c7:fd:5d:ca:24:a0:91:3c:
         5f:75:ac:d8:6c:6e:ec:1b:5a:86:d9:f9:98:57:82:db:d0:05:
         ee:f5:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:23:23 2024 by rpki-client on console-fra.rpki-client.org