Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
File:                     Ivlg_e70BzVat4Nty2uQJvRCk-o.mft (raw, json)
Hash identifier:          axY8FiXoUZHqdO/27ekt83OZHqzmLDnYcO4hSctJ4Ko=
Subject key identifier:   CF:44:24:D3:03:E5:82:2C:17:DE:37:81:C2:72:54:75:D9:BB:2B:33
Authority key identifier: 22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
Certificate issuer:       /CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Certificate serial:       018F57028060192AF882A5D4441EA62F6EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
Manifest number:          04C7
Signing time:             Wed 08 May 2024 07:02:12 +0000
Manifest this update:     Wed 08 May 2024 07:02:12 +0000
Manifest next update:     Thu 09 May 2024 07:02:12 +0000
Files and hashes:         1: Ivlg_e70BzVat4Nty2uQJvRCk-o.crl (hash: qxwZvukE2kHb0yRSVAg1QIgaRBIy/26p9sh+rYEsntw=)
                          2: JMSB-Af1_1eesYRiARk_EfaVV8A.roa (hash: G5peJStO0zqmy1CiRlRy5qkY8WGTQVvVZ4vqr254cCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:80:60:19:2a:f8:82:a5:d4:44:1e:a6:2f:6e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f960fdeef407355ab7836dcb6b9026f44293ea
        Validity
            Not Before: May  8 07:02:12 2024 GMT
            Not After : May  9 07:02:12 2024 GMT
        Subject: CN=cf4424d303e5822c17de3781c2725475d9bb2b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:89:d3:75:21:95:dc:8d:ea:ae:7e:fe:5c:
                    e6:b1:2c:10:1f:14:99:78:46:92:88:d9:c6:c9:55:
                    d7:f3:08:ea:db:fb:6a:f4:2f:79:62:00:c7:4c:77:
                    8c:da:7d:62:77:55:68:0f:ff:6d:d2:5c:2f:2b:4f:
                    f3:a9:65:00:89:01:a5:6c:50:29:eb:6a:3d:78:84:
                    71:25:75:62:b6:88:8a:74:9c:4c:1d:db:10:da:e6:
                    3a:20:9c:0a:51:bc:22:0a:03:68:34:86:72:74:c8:
                    f0:0d:a2:75:8d:98:26:42:a9:45:6d:d6:2f:58:d5:
                    2f:ff:bb:c6:70:22:7f:bc:fc:81:56:90:08:e3:9d:
                    91:26:c1:47:de:cb:f2:40:e1:0d:bc:97:5d:cf:4f:
                    c2:3a:bf:ed:3b:e1:07:ff:81:45:0e:92:6f:02:57:
                    54:67:11:63:81:a8:69:9a:47:4b:22:02:e6:ed:b4:
                    64:89:8a:7a:74:50:3d:68:e9:1d:e3:ff:72:4b:44:
                    c2:3f:55:5d:d4:cb:70:2d:98:41:1c:13:25:7c:3c:
                    db:c2:cf:55:c1:b0:a7:74:0d:fe:3e:ce:11:12:ef:
                    11:50:6e:fa:af:9b:41:4a:8f:b9:3a:5f:16:cb:bc:
                    7b:2b:03:cc:4e:a2:9f:0e:6e:e8:c2:f2:00:50:ad:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:44:24:D3:03:E5:82:2C:17:DE:37:81:C2:72:54:75:D9:BB:2B:33
            X509v3 Authority Key Identifier:
                keyid:22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e4:40:76:7b:ab:b8:72:20:80:40:dd:51:30:55:c5:86:0e:
         e5:de:e2:11:b0:ad:99:e4:c7:27:09:e0:2e:ae:4f:ac:62:48:
         c4:d4:43:3f:29:82:0e:35:d7:35:ba:d4:43:29:e7:25:26:57:
         99:de:c4:6f:0e:e1:cb:c9:3d:49:ad:7c:59:e1:79:87:11:4d:
         e2:71:3b:70:0b:2a:5f:ba:14:a7:6f:17:ec:17:cd:48:70:84:
         de:2e:28:9b:23:0a:e9:9c:de:23:36:80:aa:a7:99:c4:26:a2:
         1e:9d:4d:7a:5e:21:37:0f:a4:d5:3d:a6:41:b0:4b:a1:42:6f:
         f7:80:32:15:f7:0a:aa:d4:05:88:5e:c4:02:f8:1d:2d:43:17:
         75:bb:fa:97:8f:99:6b:7b:f9:6c:ee:c6:50:f4:f8:bf:83:76:
         f9:62:40:af:61:46:36:ef:ba:ca:79:51:bb:7c:39:08:89:99:
         b3:1b:80:d9:b6:5c:04:43:d7:5e:b3:b8:9a:3b:9e:ca:eb:4f:
         aa:83:9c:f4:a6:78:a3:58:61:de:42:df:63:00:8f:0c:4b:1b:
         fe:73:ff:0f:ee:a7:26:c2:47:35:7d:1d:65:c9:e3:28:4a:e0:
         d0:d8:b0:09:b0:9b:33:7c:3d:38:6e:99:fd:ca:da:6c:1f:c1:
         16:fa:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:27:50 2024 by rpki-client on console-ams.rpki-client.org