Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File:                     4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier:          61iJcXjEGMZce6iuJWPA+XnRj2iG/TjkT6y09i4ANcc=
Subject key identifier:   56:88:55:B9:55:96:EA:8C:3C:46:D8:B0:BB:13:3A:E4:6B:61:09:AE
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer:       /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial:       018F4C1042FC3F980CF0A0AAB0151DAAB98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number:          0D51
Signing time:             Mon 06 May 2024 04:01:25 +0000
Manifest this update:     Mon 06 May 2024 04:01:25 +0000
Manifest next update:     Tue 07 May 2024 04:01:25 +0000
Files and hashes:         1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: KttEB8NKwQYGLrwjZwbmkLjR0dpmZIa7B/hQeEROhlU=)
                          2: 86ixkR6LNf2SLqVf7QVYvBXAPqY.roa (hash: VJuceZf3N3+HRKLDBpxx4Asg8X/VD8bBZobeUNd+0Wg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:42:fc:3f:98:0c:f0:a0:aa:b0:15:1d:aa:b9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
        Validity
            Not Before: May  6 04:01:25 2024 GMT
            Not After : May  7 04:01:25 2024 GMT
        Subject: CN=568855b95596ea8c3c46d8b0bb133ae46b6109ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:2b:6a:e9:7b:75:11:c4:4d:c2:90:79:c7:
                    23:1c:7d:e2:f9:11:3f:76:ac:81:36:26:c4:85:98:
                    81:14:f0:0e:d4:5c:0c:bc:19:fa:fe:bf:d2:50:41:
                    43:cd:69:ba:d0:44:c0:d3:2c:ac:15:69:49:46:67:
                    55:0e:a4:2d:b4:46:29:5a:25:e3:e8:aa:38:78:94:
                    67:72:44:5c:81:bd:6b:81:15:77:61:9a:63:d8:de:
                    70:71:9d:5a:7b:51:bc:80:0a:de:d7:92:5f:07:25:
                    d2:64:d6:0f:7a:85:dc:b7:c5:7c:97:df:c6:4e:32:
                    0b:34:f6:67:c1:fc:82:07:0e:43:e9:73:2a:34:0f:
                    fb:f3:8d:f5:f8:08:14:e2:52:61:0f:9f:53:06:8e:
                    47:62:f4:54:46:d1:7f:4e:12:f1:f3:74:0d:7d:88:
                    3a:19:0c:e0:87:09:cf:d5:30:ff:84:51:a9:a8:88:
                    b7:9b:91:33:d9:a5:a8:26:2f:21:16:0d:1c:d6:0c:
                    07:f8:bc:0c:c7:f0:a0:67:d7:51:57:7a:57:e9:03:
                    43:db:0c:67:fa:ef:6c:9a:72:30:ff:32:b8:ad:3a:
                    57:11:91:54:30:5c:bd:b6:19:b6:9b:82:a4:ba:2a:
                    49:79:cb:30:5e:55:6f:69:dd:e2:bc:c4:48:21:1a:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:55:B9:55:96:EA:8C:3C:46:D8:B0:BB:13:3A:E4:6B:61:09:AE
            X509v3 Authority Key Identifier:
                keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0f:8e:2a:69:4d:79:4a:b7:75:ac:36:7e:96:d0:65:0a:49:
         45:d9:b5:3d:7c:1f:23:5d:ce:d9:b6:cc:a6:ff:0c:e8:da:29:
         3c:1e:69:fb:a7:77:e8:90:0d:56:3c:13:a9:68:04:ba:ae:82:
         4c:d3:b7:b7:98:6b:80:9a:23:24:cf:99:36:6e:66:7a:c5:53:
         d5:4e:42:80:2a:82:8e:0d:86:56:0d:b8:ff:d6:4a:4f:ca:af:
         e2:20:96:72:d3:df:8d:d7:38:e0:bc:20:ad:7a:67:07:2e:0e:
         5d:55:f8:2c:42:2e:2a:51:6a:d1:eb:0a:63:06:f9:cc:25:f0:
         7e:38:f4:8e:fc:3b:1c:d1:22:af:a4:32:e1:5a:c1:30:3c:3f:
         d8:6c:b0:66:5d:34:94:33:3c:3b:33:44:47:4a:d7:7b:32:0a:
         ab:4b:74:5d:d2:b2:ca:6c:a6:16:d6:c9:27:6e:bf:c7:be:27:
         e5:ce:89:bf:c6:c7:a3:49:20:fc:c3:33:62:a1:8a:2d:b5:4a:
         00:3f:33:1f:e3:62:f8:53:5c:4e:5a:f5:2a:47:d8:4c:31:20:
         7e:c0:9b:10:ca:01:dc:2a:e7:52:9c:a9:3e:19:2f:fe:98:ee:
         d1:98:57:58:4e:d3:27:b8:49:e7:3f:73:8c:de:a6:09:a4:c7:
         2d:37:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:34:14 2024 by rpki-client on console-fra.rpki-client.org