Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File:                     4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier:          kMEiRyVhUpJryOJjjQI0OH9rsytzSvyYR05DKzyREjQ=
Subject key identifier:   EB:7E:3B:8B:45:EB:43:6B:2F:96:A3:93:28:96:DA:49:2D:7D:91:15
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer:       /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial:       018F3A0A2427B769E6EBC58420BA7DD97C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number:          0DD5
Signing time:             Thu 02 May 2024 16:01:34 +0000
Manifest this update:     Thu 02 May 2024 16:01:34 +0000
Manifest next update:     Fri 03 May 2024 16:01:34 +0000
Files and hashes:         1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: +U6O9/MUUHJyrT31houb3Y92BXLtxdM7NABrfSFGn0A=)
                          2: IW-TGfri_dG_RNekiIHn5eFtDGc.roa (hash: fVaLb48sN2XlE68xvOgdEJuU6nOCuSKE8OIkXluQaXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:24:27:b7:69:e6:eb:c5:84:20:ba:7d:d9:7c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
        Validity
            Not Before: May  2 16:01:34 2024 GMT
            Not After : May  3 16:01:34 2024 GMT
        Subject: CN=eb7e3b8b45eb436b2f96a3932896da492d7d9115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:8f:a6:b3:26:a3:68:8d:86:7d:ce:1d:87:
                    fb:e4:f1:38:d8:0f:a3:fc:5a:86:fa:71:60:33:46:
                    bb:d6:0c:4b:50:9e:49:f5:11:0e:8f:a5:90:81:15:
                    c3:e9:dd:ac:d1:64:e7:62:ef:9c:22:83:cc:63:f2:
                    c4:12:7c:69:83:ff:25:65:71:61:08:dd:fe:2e:fa:
                    2a:36:ae:cb:fe:ce:ac:f2:79:b4:98:f6:0d:0f:bd:
                    2a:e6:65:27:6c:8b:cf:76:14:7b:b5:d8:ec:83:38:
                    0d:42:5a:10:47:73:6e:d8:60:9c:dd:51:1a:91:62:
                    23:c0:55:a8:ff:68:88:55:6f:53:f3:ea:dc:fe:f3:
                    bd:85:67:c4:3a:7a:92:b0:51:31:74:ff:81:e2:e8:
                    92:7b:34:0d:18:2c:2b:2a:97:8f:ca:90:74:c3:06:
                    0b:83:45:f7:9a:8b:a5:41:e7:fe:f4:54:0e:a2:66:
                    fd:49:a6:b2:4d:c1:a1:8d:5f:6e:2a:d6:a9:16:d9:
                    fd:2e:8f:37:5b:7b:4f:15:9c:68:0c:bd:73:89:0b:
                    ac:08:a7:aa:28:3f:c2:f1:56:b9:e4:c7:1a:71:38:
                    d4:5a:10:c9:c1:d3:2a:d2:92:4a:a8:c2:e4:6b:cf:
                    e4:bb:71:57:70:da:fc:5d:25:27:4d:c5:c5:c4:88:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:3B:8B:45:EB:43:6B:2F:96:A3:93:28:96:DA:49:2D:7D:91:15
            X509v3 Authority Key Identifier:
                keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e0:11:5b:b8:95:ff:9f:41:41:e9:15:3d:29:69:31:71:82:
         08:77:41:80:96:16:cf:e3:0c:75:49:5b:ad:0b:3b:6f:2b:51:
         b6:45:02:94:c9:39:62:d2:b2:d0:f1:bb:c4:0d:a6:29:9b:27:
         2f:07:02:2f:c2:54:b3:77:ea:69:4a:56:52:25:13:7e:ab:ed:
         ba:57:68:0d:6b:d0:97:bc:d4:b9:24:bf:2e:5f:92:22:82:cf:
         eb:60:6f:9f:03:8c:3c:28:77:f2:4f:3c:e6:0d:37:7b:3b:38:
         f4:05:dc:67:84:61:f6:5a:a6:9f:7a:1d:40:43:c7:41:29:9a:
         97:9a:ba:ad:c4:0d:c1:4b:ed:04:02:1b:ab:dd:66:6f:84:f5:
         64:28:3d:4e:1d:b9:1b:29:94:67:d7:07:c6:09:93:1a:ca:5f:
         a8:6b:6f:f5:e3:f1:c0:05:a3:fc:ff:dc:c7:92:ee:8c:14:9a:
         59:01:20:cb:17:8b:a2:bb:50:4b:6d:f0:93:f6:d3:ac:a7:ec:
         1c:4b:85:aa:37:5d:19:49:62:a0:28:d6:df:d1:4b:6d:db:6e:
         d5:cf:1a:bb:88:88:d7:70:75:bc:be:f0:f2:0c:c6:0e:6f:8b:
         81:3f:b9:b9:73:c8:a3:f1:83:da:41:0b:df:46:69:b1:84:cd:
         bc:72:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:39:54 2024 by rpki-client on console-fra.rpki-client.org