Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          yMLd+WjA4UBIXSXWhPxx6kg55wAbkhtZW9wNPSrgOJo=
Subject key identifier:   66:CB:D3:5F:69:B4:31:4D:F1:FE:08:15:B4:26:5A:F3:EA:BA:5D:DC
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       018F5326D2861CBED359C1A6E38E36EA73D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          0E6A
Signing time:             Tue 07 May 2024 13:03:24 +0000
Manifest this update:     Tue 07 May 2024 13:03:24 +0000
Manifest next update:     Wed 08 May 2024 13:03:24 +0000
Files and hashes:         1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: +ALEiXWa9ZBiVvLTQKbCf0YzydcKPlMDMCcI8LBAXNQ=)
                          2: GN5ooKWmubFblC_XJKzwUF6yxHg.roa (hash: ox/84r+Ls8W5QoXkvwuKkZbXHujdPD0R00KGe0e9ab8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:d2:86:1c:be:d3:59:c1:a6:e3:8e:36:ea:73:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: May  7 13:03:24 2024 GMT
            Not After : May  8 13:03:24 2024 GMT
        Subject: CN=66cbd35f69b4314df1fe0815b4265af3eaba5ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:26:36:57:bf:da:71:99:87:0b:25:06:c1:
                    f9:4f:19:91:14:cd:f7:37:79:5e:4f:fc:3e:4b:44:
                    71:dc:1c:a1:0b:f0:a1:f5:cc:9e:5e:fc:c8:ec:da:
                    73:a9:a2:e0:fc:51:a2:7a:02:a2:30:2b:dc:96:59:
                    71:18:32:11:0e:48:cf:12:c8:cf:c3:8a:36:36:b4:
                    48:07:15:9e:91:d2:37:f6:45:ab:8b:b8:ff:05:a2:
                    a3:8d:11:21:8f:2d:33:7e:97:a5:ed:54:a8:2f:a9:
                    46:27:69:bb:45:2e:98:06:92:a5:1b:c8:45:f5:b1:
                    ec:2d:75:90:0c:18:87:a3:1b:43:75:58:df:fc:85:
                    1b:2e:fe:a7:59:8d:2f:41:1a:5f:d0:77:24:b9:97:
                    2b:e5:6a:3c:0a:42:77:8f:dd:6d:27:6c:63:8c:e4:
                    60:f3:6e:d0:12:82:4b:9a:8d:36:80:41:f8:d9:0b:
                    42:1d:a0:63:94:18:82:27:7e:00:27:31:8c:7a:33:
                    ca:c5:80:7f:2e:6c:7a:7d:0f:c0:73:b0:f9:1d:c1:
                    ff:f5:66:db:18:09:9c:99:70:38:fa:dc:48:17:5e:
                    66:e1:81:5f:b5:78:02:10:fc:ec:43:fa:a3:24:44:
                    13:6c:f0:52:89:67:25:f3:74:27:59:ff:0c:10:e2:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CB:D3:5F:69:B4:31:4D:F1:FE:08:15:B4:26:5A:F3:EA:BA:5D:DC
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:bc:e9:e5:29:99:40:a4:09:5b:d0:42:3c:b1:f0:d6:67:
         77:9c:d5:4e:13:d8:98:7c:8a:85:ae:86:ee:00:03:aa:34:ac:
         21:e9:df:70:f7:27:cc:22:3c:5e:d0:53:2e:01:b8:96:7b:cd:
         e7:b2:32:28:b4:2f:4e:67:54:73:0b:80:9f:5e:be:35:7a:2b:
         8d:89:4e:c4:cf:23:20:01:1d:b3:17:84:35:df:ae:50:3b:46:
         86:eb:f7:af:5e:7b:86:46:a1:83:e0:92:63:59:57:df:6e:5d:
         d4:6e:49:29:ba:65:77:c4:dc:0c:7e:52:a4:c7:ff:61:a7:2c:
         b7:01:46:61:73:2a:c3:8f:e7:ec:dc:94:12:fa:28:94:ff:b7:
         96:cd:14:bf:d8:9a:c3:46:84:80:c3:d9:e3:d5:37:af:25:d0:
         29:96:bf:48:40:55:3f:d5:f9:19:e9:56:52:10:91:71:95:31:
         4d:2d:b2:a2:38:72:16:4b:0b:ba:83:c9:a1:5d:f0:e4:ad:78:
         5f:d8:81:a4:c3:61:96:cb:4d:dd:24:0c:7d:9a:ad:1b:8d:fa:
         5a:75:50:ec:4d:06:b4:ed:8d:48:f4:63:04:63:47:a7:18:56:
         f6:80:d9:8d:57:e7:18:58:6e:ab:ac:6a:3f:12:12:81:4d:05:
         88:e6:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:42:52 2024 by rpki-client on console-ams.rpki-client.org