Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File:                     4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier:          D99/NfOVrA5VG9+06k2JSmuwwBFGKOcK2c0qT7dl1ZM=
Subject key identifier:   A4:27:3C:21:75:AA:91:1E:E1:F2:E3:C8:5A:0A:57:5A:A2:BA:6A:93
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer:       /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial:       018F497F0DD1A6BAF33A4DA6D3786D76E72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number:          0827
Signing time:             Sun 05 May 2024 16:03:34 +0000
Manifest this update:     Sun 05 May 2024 16:03:34 +0000
Manifest next update:     Mon 06 May 2024 16:03:34 +0000
Files and hashes:         1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: c5EIumhl8rsaPFFbL6aZ4wXMdm1sMD0ycaDjDnLRdHw=)
                          2: Kn7IdnJqodb8Rc8NeEQeCN4hPzM.roa (hash: urR6YuVc3QUJIx0ybZOHv3/W5NbahK6U276JYeYVviA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:0d:d1:a6:ba:f3:3a:4d:a6:d3:78:6d:76:e7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
        Validity
            Not Before: May  5 16:03:34 2024 GMT
            Not After : May  6 16:03:34 2024 GMT
        Subject: CN=a4273c2175aa911ee1f2e3c85a0a575aa2ba6a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:57:d5:c2:70:c9:00:b9:11:63:82:43:b3:
                    06:0c:64:4a:c9:ad:dd:b1:96:04:11:a6:64:c0:ea:
                    51:e0:78:ca:da:52:46:85:0a:32:91:9e:49:b8:6f:
                    97:5d:12:97:d4:f9:c9:0e:06:b3:0e:67:e4:9d:31:
                    e8:a3:97:cc:14:c2:3f:8c:96:1e:c0:17:0a:06:c8:
                    79:52:a6:ea:9f:05:6f:a7:f2:71:72:f9:01:db:0a:
                    03:60:7c:c9:e2:fa:ba:83:8c:a7:2b:f1:97:d0:e8:
                    7d:33:03:48:0e:c4:b7:69:1a:61:53:21:91:20:2a:
                    51:6b:1b:f2:8e:99:56:44:6b:40:44:3e:9c:62:8e:
                    cb:70:12:c6:c9:5f:78:1d:0f:08:31:f9:e4:00:a7:
                    ea:0a:73:09:80:85:b3:2b:31:49:f9:29:04:36:1f:
                    67:03:1d:86:99:85:a4:49:7a:67:df:81:55:51:47:
                    47:42:5a:1b:47:69:d1:15:6e:cc:bf:54:52:28:88:
                    5f:68:e2:18:80:c5:ac:af:3d:c8:db:0d:c9:63:85:
                    52:be:77:9f:e2:9d:51:1c:9c:e4:5b:e7:99:da:bc:
                    2f:78:77:cd:c2:74:14:eb:7a:50:7d:c7:32:d4:a8:
                    54:1c:bf:99:1b:71:19:7b:af:ce:7e:de:57:41:f4:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:27:3C:21:75:AA:91:1E:E1:F2:E3:C8:5A:0A:57:5A:A2:BA:6A:93
            X509v3 Authority Key Identifier:
                keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:38:22:b8:e4:c4:01:93:2d:41:b9:d1:a5:c6:2a:f0:23:d8:
         5c:9e:1c:95:1c:a8:28:95:40:e5:a0:84:ca:93:fd:98:48:d8:
         d3:79:81:ec:f0:d0:4d:a2:48:c7:59:c1:12:34:53:6d:3e:f8:
         76:ac:07:7f:27:6b:92:3c:5e:42:e7:6a:60:e5:92:e3:44:19:
         32:96:4b:d0:4c:12:b0:2a:96:b1:2a:d0:be:59:2a:32:62:27:
         a1:72:9b:bf:3f:ca:15:fd:c1:ab:68:9e:e4:60:f7:50:99:f8:
         90:c6:cd:40:70:27:c1:c0:52:02:5b:4a:75:ec:cc:ce:fd:fc:
         b6:71:75:d2:bb:e0:73:bf:32:1a:95:25:f7:3e:65:30:6b:76:
         25:24:ef:17:55:77:ca:e1:e2:7e:e1:6e:60:a5:09:82:67:a2:
         20:85:d5:8b:a6:6a:fc:f7:2e:11:d6:6e:30:20:23:c6:32:15:
         59:c8:91:67:e1:1a:a5:d2:2c:93:53:da:09:e1:7f:97:74:81:
         95:14:eb:e6:e3:0f:76:87:bd:d1:11:9f:a0:f2:1f:c5:94:98:
         7e:b8:bf:ab:ee:4a:08:ec:46:5b:cc:e7:9a:89:1c:09:7e:b7:
         5f:ec:b7:9e:35:92:c0:92:13:73:d9:fd:d5:6d:b8:39:c7:bc:
         5f:70:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:06:18 2024 by rpki-client on console-fra.rpki-client.org