Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
File:                     IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json)
Hash identifier:          KqqFKTjcVIM9+jZPgtQTDhaKZZKFVJNsFsJBNqGNvQ8=
Subject key identifier:   88:11:1C:09:15:2A:F4:C4:3E:76:CE:8A:C6:29:63:26:45:C3:50:10
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Certificate issuer:       /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial:       018F45A17BA9E275EB7A13317ED3761EF4E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
Manifest number:          0A54
Signing time:             Sat 04 May 2024 22:02:41 +0000
Manifest this update:     Sat 04 May 2024 22:02:41 +0000
Manifest next update:     Sun 05 May 2024 22:02:41 +0000
Files and hashes:         1: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: KEvK9G+V4B3xsxOx2Vfzz24gEwusDGexk5biIjDEO9o=)
                          2: YDcOcS4BDijxGUm52MVujMALznU.roa (hash: 9fXFjxrddCVHb8/c+T7FN2KMIyg5DTXsaaF2pZMZpG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:7b:a9:e2:75:eb:7a:13:31:7e:d3:76:1e:f4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207799027329f22682764573af2115da95a9f6bf
        Validity
            Not Before: May  4 22:02:41 2024 GMT
            Not After : May  5 22:02:41 2024 GMT
        Subject: CN=88111c09152af4c43e76ce8ac629632645c35010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:6e:74:1c:5a:04:f2:80:9e:35:90:44:3a:
                    4b:c2:75:9a:ca:53:51:ab:3b:b0:12:d5:2e:fc:f7:
                    57:de:48:69:80:9f:e7:f3:53:b0:c7:ae:95:b9:26:
                    ee:7f:90:4a:a7:24:3c:ff:57:db:18:11:eb:8d:bb:
                    5b:c4:17:d7:61:12:05:a7:f9:06:2d:94:e6:f7:c7:
                    a3:eb:c9:34:57:84:33:24:7a:b1:a7:80:fd:3d:f1:
                    8d:3d:dc:ef:6f:1f:22:07:64:6f:08:4a:0e:c9:54:
                    87:93:6d:55:35:d4:cb:75:6e:e2:f1:d9:c5:3a:44:
                    d1:76:cf:87:76:44:43:55:34:b8:31:5d:5b:60:05:
                    46:aa:fc:58:0a:74:47:ab:07:42:81:1e:98:8e:39:
                    ab:75:a6:bf:13:93:08:1b:e3:17:af:ec:05:68:4f:
                    e9:7a:4d:10:a7:f7:cf:4a:95:4b:bf:76:d2:dd:c1:
                    c3:d8:95:7e:2e:5f:1a:0d:92:2f:ea:1a:6c:b0:c5:
                    1f:41:02:49:59:55:ad:68:5e:fc:99:54:91:47:dc:
                    cd:cf:d9:02:a9:af:34:1b:23:4c:69:96:c2:ae:8a:
                    f7:ff:85:ef:fa:c6:0d:b8:61:4e:e3:eb:20:85:ad:
                    46:7c:8f:8a:4f:16:ab:0c:48:78:84:62:f5:55:45:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:11:1C:09:15:2A:F4:C4:3E:76:CE:8A:C6:29:63:26:45:C3:50:10
            X509v3 Authority Key Identifier:
                keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:1b:0d:57:64:b9:b0:83:3e:b9:6d:98:13:b1:ac:4d:6d:
         52:67:a1:6c:25:64:23:2a:83:1c:82:01:a3:5c:f9:19:7f:57:
         88:64:7e:c2:e4:e0:90:67:87:14:d0:c7:b8:82:00:c4:05:23:
         b6:a6:e4:22:74:d2:5a:29:d3:47:da:0e:64:75:87:db:ad:68:
         91:c3:45:3f:c8:8e:ba:a0:1e:62:34:5e:3d:65:96:17:69:64:
         14:8d:64:e1:fd:2d:2f:88:e6:fb:14:59:bf:e7:e6:f6:5a:06:
         45:1c:63:d0:27:1f:c2:90:22:6c:19:09:35:b6:b5:f5:6e:9b:
         0b:f3:ef:96:a9:c3:a9:c5:72:74:20:f3:e8:74:b7:13:d4:af:
         21:09:f5:51:00:85:99:77:12:cb:e5:00:47:df:cc:d6:7d:d3:
         14:11:95:66:f0:99:4a:22:37:70:fb:27:82:da:87:a8:d1:77:
         d8:c7:a4:98:b0:d1:66:bd:4b:72:81:52:00:77:f4:7a:a1:82:
         97:d8:91:75:ec:08:08:7f:43:dd:d6:38:09:d3:52:84:bb:32:
         ad:c2:40:6e:9d:92:ee:2e:4c:ec:b1:2c:41:7b:cf:d3:04:26:
         96:19:7b:a7:7f:1d:52:8e:7d:f2:1b:7d:5d:56:9c:6c:9f:23:
         06:d1:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:20:35 2024 by rpki-client on console-ams.rpki-client.org