Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File:                     4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier:          exeU+TXdbWw8RY8M+df/ojSKHgyydQe3uCs3j+gE/2E=
Subject key identifier:   76:91:3C:A5:E9:F7:16:BD:80:79:87:92:C2:01:27:3E:4F:AB:70:91
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer:       /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial:       018F8E2603185CBA7550FC69540CB46B4847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number:          10CE
Signing time:             Sun 19 May 2024 00:00:06 +0000
Manifest this update:     Sun 19 May 2024 00:00:06 +0000
Manifest next update:     Mon 20 May 2024 00:00:06 +0000
Files and hashes:         1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: 2YUSy49CanU4GtNyyue+CiV4VPSTaffFNA1cD6VWGck=)
                          2: d8m9dM-uzmVxKl_pXbbOHjsLUh4.roa (hash: kUAFtzR33CNSGZ+MdOv3sCZmS9PpoLvWy+IX2Bxcg9U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:03:18:5c:ba:75:50:fc:69:54:0c:b4:6b:48:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
        Validity
            Not Before: May 19 00:00:06 2024 GMT
            Not After : May 20 00:00:06 2024 GMT
        Subject: CN=76913ca5e9f716bd80798792c201273e4fab7091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:75:e6:25:f0:64:a6:ee:9d:30:96:de:87:
                    db:d5:33:c0:16:5c:00:87:d4:09:53:05:a3:6f:a7:
                    70:08:54:2f:3c:6f:8e:9b:8f:fe:ee:bd:83:f1:29:
                    0d:06:ca:88:be:51:a2:b7:fd:96:03:19:73:6d:b2:
                    7c:3d:e9:7d:8b:12:cb:f7:d3:d1:25:08:c0:dc:6b:
                    d6:f6:75:37:e3:1b:4a:7b:4d:62:ca:9f:fe:8a:b2:
                    ff:c3:36:98:b0:cb:05:a4:49:6b:19:a5:fd:e8:56:
                    a4:a8:e4:ef:d4:43:ca:22:07:d5:50:92:dc:89:b1:
                    e4:ae:b3:4c:00:31:8d:b3:85:b3:97:b8:fd:84:22:
                    a4:2e:68:33:d3:b4:00:42:e2:28:cb:f7:3c:f1:47:
                    67:d2:d6:fc:c6:be:3a:50:ef:ab:70:ac:14:5c:71:
                    06:0b:35:ae:f3:90:11:ce:46:35:1c:aa:08:b1:30:
                    69:ad:be:36:e1:63:bf:ba:5e:eb:0f:b8:7c:15:f9:
                    f9:c3:cb:91:32:58:20:50:a2:b5:ba:06:99:46:6f:
                    2c:0a:db:55:47:b3:fb:2a:73:66:5a:e5:a3:7e:79:
                    b2:98:9b:dd:84:9d:9c:3e:61:3c:82:80:52:93:ce:
                    e2:9a:98:d1:91:e0:8e:b0:98:e1:6b:06:16:0c:ef:
                    57:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:91:3C:A5:E9:F7:16:BD:80:79:87:92:C2:01:27:3E:4F:AB:70:91
            X509v3 Authority Key Identifier:
                keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:18:7c:59:a1:51:f9:3d:df:a0:8f:ee:0c:2d:4e:30:21:53:
         21:cb:e4:20:1e:fa:a0:1f:04:02:df:f0:bc:a3:73:f9:24:1d:
         46:5b:a7:e3:81:13:3c:bb:8d:74:1a:9a:bf:a7:1e:f2:b9:e7:
         3c:5d:b8:52:47:c5:c3:bc:03:41:6d:a2:52:3c:27:a8:1a:b7:
         5d:61:d3:83:bc:88:c6:ec:e5:da:0d:c2:c0:ee:72:be:0d:86:
         13:39:99:0a:a6:1d:17:b7:bc:f1:a0:cc:62:1d:c2:24:34:09:
         d7:d9:e3:a7:2d:61:7b:a3:5f:8e:52:cd:93:3b:99:b8:57:e6:
         c8:8f:b3:a4:df:5f:41:92:6d:6d:39:7a:d2:28:ab:42:d1:fc:
         d2:e5:37:16:63:18:d7:27:3a:0b:22:c7:66:de:3d:85:56:91:
         d0:a1:f5:4d:4e:02:c4:73:ba:05:80:a4:ce:e8:b6:55:a0:25:
         f3:66:b6:0b:c7:c1:2c:99:16:ad:86:29:5d:0a:62:f8:e1:01:
         6f:94:53:e8:e8:b9:06:f1:84:70:57:0c:94:24:f2:03:9a:34:
         59:65:d3:72:eb:b5:54:37:78:bf:82:a1:99:fe:68:01:be:73:
         f9:d9:58:a6:36:b8:d0:83:9c:08:3d:ef:91:65:3f:01:d4:41:
         8f:d2:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:07:21 2024 by rpki-client on console-fra.rpki-client.org