Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File:                     A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier:          OP6jC0INZX5Mbzi1XMumb1Ck61wTYSG0trkFZ+fEYhc=
Subject key identifier:   62:2F:DA:09:E2:1B:14:95:D1:9B:77:2A:62:03:C5:4D:D1:F2:16:20
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer:       /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial:       018F4A221CB2D69919014220C025BA980686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number:          07ED
Signing time:             Sun 05 May 2024 19:01:40 +0000
Manifest this update:     Sun 05 May 2024 19:01:40 +0000
Manifest next update:     Mon 06 May 2024 19:01:40 +0000
Files and hashes:         1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: ZB2JutNXfdFP5qvLwhmNKVI3hO8Y10IAR570sDfzHtA=)
                          2: wYthNSrybyeQgUk5yZ4UZ4BFOAQ.roa (hash: sZcgnmG8qjbrJwEfEcW9qRXRayk1BiErZ7WUiE7LxyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 19:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:22:1c:b2:d6:99:19:01:42:20:c0:25:ba:98:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
        Validity
            Not Before: May  5 19:01:40 2024 GMT
            Not After : May  6 19:01:40 2024 GMT
        Subject: CN=622fda09e21b1495d19b772a6203c54dd1f21620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:c2:81:94:1a:d3:74:3f:7a:89:a2:f8:3d:
                    6f:86:d6:4a:f2:ae:b0:80:68:c5:f1:dc:c4:fd:7f:
                    41:0a:a4:7d:b1:fc:43:2d:ef:07:d9:d2:94:1c:ea:
                    73:58:c0:db:78:58:8e:e5:c0:31:f3:74:b9:e8:a5:
                    13:f9:52:6e:97:f2:90:c0:1b:98:8f:21:52:55:83:
                    51:60:4d:b3:75:50:4a:77:c5:5d:76:09:98:33:0d:
                    ee:7b:29:6e:78:66:ff:c3:8e:e3:45:0b:30:04:ee:
                    4f:0f:04:11:a9:7d:5a:4c:ee:fa:be:b9:95:6b:03:
                    7a:90:10:6e:34:ea:68:99:6a:cb:ec:c8:b7:14:02:
                    34:32:80:5b:66:7e:94:36:d1:97:39:1e:2d:50:d3:
                    db:b1:44:e3:6f:f8:31:80:d1:44:77:b8:ea:03:ae:
                    c9:8a:0d:63:53:ee:3f:15:53:a8:b3:8d:1b:f6:8e:
                    ef:c3:c7:f2:75:e1:9a:06:c0:9f:a4:68:e7:52:a7:
                    b5:44:f8:ce:4b:a5:b6:b2:a5:80:e1:29:f0:10:c7:
                    0d:99:11:af:1f:82:37:fe:b1:e5:64:d6:49:99:0b:
                    d3:db:4a:f4:df:98:cb:84:78:ab:14:77:6d:7a:38:
                    ff:67:f9:77:33:b8:36:63:18:39:59:45:2e:fe:20:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2F:DA:09:E2:1B:14:95:D1:9B:77:2A:62:03:C5:4D:D1:F2:16:20
            X509v3 Authority Key Identifier:
                keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b5:3c:72:d7:91:ab:76:69:21:f7:40:4c:91:b4:21:a3:fb:
         4a:39:2a:31:dd:58:ab:2c:3e:f8:99:3f:3a:23:8e:2e:87:07:
         6f:d0:67:58:3b:38:29:84:b6:0a:76:29:0a:d4:04:0c:ff:3a:
         92:01:c1:a2:77:29:3e:56:cc:b7:fe:89:15:1d:18:2e:98:be:
         22:8c:02:bb:91:cd:ca:b9:94:1e:38:5b:9d:09:d4:a7:20:d8:
         77:25:d9:dc:1f:b5:20:e9:3f:7b:b6:5b:7c:65:61:7e:0a:d2:
         74:fb:6d:ae:d9:26:23:57:03:6d:b4:e4:a5:97:e1:0b:d3:21:
         b9:05:81:53:23:04:65:33:fc:e4:b9:6a:34:c0:44:c0:0d:95:
         55:86:23:20:1b:e5:ef:30:09:21:3d:98:f5:7a:c3:31:85:bb:
         2b:55:59:b6:a2:46:a0:38:fe:27:94:bf:f7:da:46:46:73:f0:
         40:c6:a4:49:39:3b:9b:65:8a:88:75:4c:0f:4b:00:0e:ff:29:
         9e:90:01:96:fc:a5:7f:82:09:0d:2f:4e:04:51:2d:66:aa:41:
         9c:5f:79:f9:f3:9d:c5:e4:0f:91:0a:17:ac:b9:35:d4:8e:c6:
         b6:b4:9d:32:d8:da:52:7f:99:d6:bc:b3:74:03:e8:82:b2:41:
         1c:9f:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:10:18 2024 by rpki-client on console-ams.rpki-client.org