Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File:                     4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier:          KjcjKEpu2fy+WsJ4BLAqs9pfQJ4lCWAY4gf68/t+K/c=
Subject key identifier:   3B:FB:DB:6F:4F:8C:E1:6B:3F:43:A6:40:70:03:24:86:E6:AE:11:1B
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer:       /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial:       018F3AAE7D95DEE45B5292430B409F27F350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number:          0F20
Signing time:             Thu 02 May 2024 19:01:04 +0000
Manifest this update:     Thu 02 May 2024 19:01:04 +0000
Manifest next update:     Fri 03 May 2024 19:01:04 +0000
Files and hashes:         1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: otgTA2ikLv8fjTdF9g6Mgq2zX7j9CDarVQOYCHSlY6k=)
                          2: OtmHe6wlStTf3BdewEyLhVuegNE.roa (hash: osEsDYToZ8XY4cFAOnPSIAA1CNPHAj9gRtgNnrlKWMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:7d:95:de:e4:5b:52:92:43:0b:40:9f:27:f3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
        Validity
            Not Before: May  2 19:01:04 2024 GMT
            Not After : May  3 19:01:04 2024 GMT
        Subject: CN=3bfbdb6f4f8ce16b3f43a64070032486e6ae111b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:e7:cb:0e:05:ed:69:57:a1:44:45:a4:fd:
                    e5:71:dd:aa:ba:f2:56:af:fd:bb:f5:0b:61:cb:56:
                    23:e9:15:83:87:5d:f4:2c:ba:d9:36:36:8f:35:14:
                    4d:92:d2:2d:d1:d3:37:1d:60:2c:c2:86:b1:3a:10:
                    68:57:a6:62:6f:58:be:40:07:a3:a0:a1:23:f4:87:
                    fa:27:1b:65:cc:2e:b4:b6:c4:b2:fe:b7:be:ad:66:
                    ac:00:d4:15:82:20:92:81:cc:b6:61:cb:cd:14:de:
                    60:f9:1c:9f:19:38:b1:b8:6b:06:b2:f5:f0:e4:24:
                    02:74:cd:db:b2:1b:94:79:16:b3:58:8a:3c:5e:c5:
                    7b:e2:34:16:9c:8a:74:83:85:4e:13:24:46:57:87:
                    23:64:ea:85:66:14:32:93:62:c0:40:b2:4b:d2:0a:
                    d2:77:87:43:48:0d:87:73:d3:3a:17:a9:ed:66:eb:
                    01:b0:37:98:63:fc:15:ce:c4:e1:aa:4e:ba:36:b9:
                    a8:97:82:a6:49:d2:26:c6:c9:dc:b5:7c:56:4a:d5:
                    33:cb:9f:e7:d5:84:e5:5b:76:ec:72:64:bb:09:f7:
                    04:7d:6e:85:ed:a9:5c:42:83:ac:12:3c:9f:b6:51:
                    f0:9f:e1:6e:5a:08:b6:bd:d1:e1:6c:54:28:f8:cb:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FB:DB:6F:4F:8C:E1:6B:3F:43:A6:40:70:03:24:86:E6:AE:11:1B
            X509v3 Authority Key Identifier:
                keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6e:be:3d:af:5e:03:a1:ae:95:9a:98:2d:77:dd:2f:4f:41:
         c2:4a:53:32:bb:16:86:1a:ed:ad:5e:88:95:54:ea:5d:d4:d0:
         dc:b0:0e:8b:53:e9:04:38:9d:3b:56:37:79:c6:73:0e:25:d7:
         e6:f5:4a:dd:32:4f:26:03:25:d0:42:30:32:96:0f:d9:8a:f0:
         04:f1:f0:aa:2a:1e:0b:e0:cc:ce:da:50:1e:7b:5c:65:86:3d:
         92:97:43:da:6d:28:40:b4:85:33:4d:65:12:cc:9d:63:da:35:
         66:4c:7a:65:e2:0e:91:f6:a8:80:5d:46:62:90:14:d6:68:52:
         a1:f2:1e:a7:85:ef:33:19:49:69:b6:a0:af:4e:51:93:f1:4e:
         62:c9:e6:36:f0:ae:2f:ab:4c:d8:1b:fc:98:2b:8b:97:b3:46:
         9f:68:4a:7e:2f:76:a3:b3:34:b9:a1:f8:2a:78:ed:1d:3e:ca:
         ee:e6:55:02:b7:f8:1f:ed:3d:96:82:27:a1:a4:0d:b1:45:2c:
         81:6c:f0:c5:96:f6:f3:c0:41:bf:84:62:22:dc:31:b5:53:1d:
         b5:bc:a2:19:e6:10:9e:ea:b2:6f:f4:59:76:5e:c3:2f:30:f6:
         3f:97:df:44:2a:0a:83:05:d7:b1:76:e4:33:1c:43:89:39:12:
         05:64:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:21:09 2024 by rpki-client on console-fra.rpki-client.org