Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File:                     4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier:          kCZA/OP5l+iXr7VXkcQtvPlurwnG9LW58tgQfT4zvE8=
Subject key identifier:   34:9F:8F:44:7E:CC:F7:FF:CB:16:0D:4E:AE:2F:11:68:20:D1:F6:A5
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer:       /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial:       018F87495F28D3D74F42E683A282CB4C93E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number:          0280
Signing time:             Fri 17 May 2024 16:01:23 +0000
Manifest this update:     Fri 17 May 2024 16:01:23 +0000
Manifest next update:     Sat 18 May 2024 16:01:23 +0000
Files and hashes:         1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: AUrz4DcK0rn/qvTcbmXib48AqL1AOEVxk+f3mFK6SpY=)
                          2: _g1p4GIGycWDBLGPYHOf6gwR4Q4.roa (hash: +vIyLR5+kpGhA+qzdTW9S2QKLkp3mFVrKWfxHEgpw9M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5f:28:d3:d7:4f:42:e6:83:a2:82:cb:4c:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
        Validity
            Not Before: May 17 16:01:23 2024 GMT
            Not After : May 18 16:01:23 2024 GMT
        Subject: CN=349f8f447eccf7ffcb160d4eae2f116820d1f6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:04:dd:0a:c1:a3:cb:1d:64:70:eb:27:44:
                    5c:a6:45:88:be:c2:dc:35:76:48:bb:53:ba:61:19:
                    26:d3:88:22:22:98:55:70:65:21:a1:ab:b5:21:c1:
                    fa:fa:b6:e7:34:17:4d:c8:30:a8:70:14:a5:3c:a5:
                    60:89:1a:b1:ea:38:d8:68:64:42:fd:6e:a8:85:28:
                    16:4c:fc:ac:54:3b:a7:36:dd:b8:5a:b3:99:1e:a6:
                    3a:fa:16:20:d3:c0:9d:b2:ab:f7:ac:8e:b5:5c:91:
                    02:4f:41:5c:f6:1e:d1:38:c0:63:19:90:87:a7:fd:
                    17:f7:ea:26:4d:f6:69:38:0d:c5:29:be:57:1a:1e:
                    f6:ec:dc:09:fa:d7:79:58:0e:16:cf:cd:8f:e8:eb:
                    5e:36:32:91:eb:1e:58:95:2c:90:bc:0e:21:e0:14:
                    5e:3d:69:4c:2a:58:e3:5b:74:44:35:f1:2e:d1:13:
                    6f:88:30:a1:ca:21:09:44:53:22:01:d4:e0:d2:49:
                    e8:50:43:f0:47:2f:97:89:cc:c2:76:cd:07:23:a4:
                    54:57:56:02:3d:b3:a0:ce:e9:33:94:86:4e:da:52:
                    93:96:61:1e:b8:7a:22:6b:d4:cd:12:a2:f5:e3:e9:
                    1f:22:a3:d0:77:13:df:56:21:58:9f:2f:d0:7d:f6:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9F:8F:44:7E:CC:F7:FF:CB:16:0D:4E:AE:2F:11:68:20:D1:F6:A5
            X509v3 Authority Key Identifier:
                keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f6:5d:b5:f4:23:00:22:cf:f7:6e:c7:76:01:2c:f1:70:e4:
         80:bf:cb:32:48:09:48:d9:c8:c3:00:89:12:6e:8f:e6:f0:33:
         37:ac:75:e4:04:32:4e:1c:10:3c:5a:a0:76:f7:80:c8:5c:0c:
         f2:76:0b:80:53:06:2b:c0:30:1b:38:f4:e6:15:26:20:3e:b6:
         e6:1a:b8:22:80:e3:fb:e4:4d:2b:e6:d1:80:2f:0d:28:d9:02:
         b1:2d:94:a6:8c:93:c1:a1:4d:9d:31:b5:b6:a1:78:f2:3d:27:
         f9:b4:68:d0:8a:0d:9e:98:c9:06:48:b9:b8:9a:60:54:f5:f7:
         8f:bc:2a:96:ab:bf:fd:18:5d:50:e6:e3:c7:1e:9d:6e:2d:12:
         fa:00:0b:98:3b:60:9e:75:2a:6f:fa:21:d3:72:e1:20:43:b0:
         b7:d3:e5:66:ed:52:f6:f5:a4:1a:e2:a9:69:42:c6:39:ae:dd:
         63:89:6f:b4:68:cd:90:74:57:a7:0c:c9:29:19:c1:d6:29:e1:
         30:69:51:81:1f:7c:87:a6:26:a0:51:76:c0:02:76:76:da:f2:
         14:b6:23:64:91:37:b0:e0:d8:ee:f9:3a:f5:d2:ef:34:30:ad:
         96:86:c5:13:9c:f6:29:f6:30:30:58:78:58:28:fe:87:e7:62:
         3e:d0:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:12 2024 by rpki-client on console-fra.rpki-client.org