Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File:                     4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier:          slG5v7yMGYBxqOAU0KXtDbf8mQakt0gCUo2GNrXq7Aw=
Subject key identifier:   AF:36:DE:BE:C2:9C:DE:8A:51:86:6F:05:DA:1D:73:BD:D1:1F:F5:25
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer:       /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial:       018F5A3A048306D3DBE590E6321E91DD0E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number:          1160
Signing time:             Wed 08 May 2024 22:01:42 +0000
Manifest this update:     Wed 08 May 2024 22:01:42 +0000
Manifest next update:     Thu 09 May 2024 22:01:42 +0000
Files and hashes:         1: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: pVNg8nafzgHx7qmCSKefS5qKvB9ktOtcHNInlrSjiDY=)
                          2: Lfqi2MybHHcxNp1u3Cq7LTdY9-I.roa (hash: qgV4c4wlnvjkIvX1RKI+Yi/+fQkzx06X+sAUww1eesU=)
                          3: NDbYPOpUJCl8mW2QMtd1UqFSNrs.roa (hash: NAEHHhrUrRJOowMKAO5ZZXJRQ49sRLRO9wyfmRpEsEA=)
                          4: draUA7cJWxml56_41HFEOeWgKwo.roa (hash: hH3qjGPGdpe639DGMC06i4ooFRBVGXV/5BfstTFrbj8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:3a:04:83:06:d3:db:e5:90:e6:32:1e:91:dd:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
        Validity
            Not Before: May  8 22:01:42 2024 GMT
            Not After : May  9 22:01:42 2024 GMT
        Subject: CN=af36debec29cde8a51866f05da1d73bdd11ff525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:43:3c:8a:2b:36:3e:a5:e9:71:cd:00:83:bf:
                    0b:5c:c3:34:b6:63:ea:9d:1d:b3:cd:1b:7d:7f:6d:
                    db:07:f4:b3:cf:14:22:1d:c9:76:fa:65:e5:27:20:
                    f7:22:70:99:c5:de:3c:28:af:59:2b:54:2a:ed:5f:
                    7b:fb:9a:f1:41:ff:8a:5d:15:09:b2:f4:fc:41:c6:
                    9a:54:38:18:1e:e4:64:a6:ad:72:f0:d6:5d:89:3a:
                    53:5d:f3:d8:bc:fc:f4:f1:a6:85:e4:67:b2:0f:69:
                    84:15:1f:36:89:d5:86:ec:4a:33:d1:c2:66:f6:6d:
                    ea:d7:24:07:9e:ff:96:04:12:95:7e:73:c2:4a:66:
                    38:20:77:47:4c:93:9d:0a:0e:42:bd:a0:c0:cf:32:
                    86:53:9d:86:b9:6b:e3:70:a8:16:32:73:a1:93:a7:
                    f6:fc:54:69:7b:86:45:16:1f:b8:f9:4d:89:60:d1:
                    31:de:5a:8d:79:f5:82:44:f9:0f:fc:5d:5e:f8:3c:
                    d4:b5:ce:17:b1:64:19:a4:da:e7:21:8e:ab:82:bd:
                    cd:24:a5:36:f5:c4:3b:71:da:59:4d:61:e5:9b:d1:
                    e3:fe:d8:d2:15:ce:79:12:b3:20:63:13:1c:9f:fb:
                    64:02:de:3f:21:b3:d9:bd:55:5c:ea:1e:ac:14:68:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:DE:BE:C2:9C:DE:8A:51:86:6F:05:DA:1D:73:BD:D1:1F:F5:25
            X509v3 Authority Key Identifier:
                keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:84:ea:56:b1:14:ae:32:f8:82:c7:97:3f:45:c6:74:ed:
         d5:3c:fb:d0:df:0f:f7:07:8d:ef:8b:d6:b3:71:07:02:34:07:
         c9:8c:09:4b:7c:63:95:15:01:2f:6e:ee:51:d3:f9:6f:d1:b6:
         bc:5c:39:fa:58:26:19:a2:83:15:d3:30:a1:67:a1:91:37:ee:
         9d:29:db:f2:dc:e7:12:af:a3:32:7c:ba:f4:fc:04:b6:c5:31:
         9e:50:ab:59:a2:76:b4:c6:72:a3:ec:b6:43:99:41:9e:8d:e5:
         b1:5c:72:41:d6:c0:15:3c:8e:a7:53:19:24:e4:ed:2e:1e:05:
         e4:c2:92:c8:fc:b9:62:75:e7:49:c2:08:a6:aa:f5:96:56:85:
         48:48:51:5a:bf:88:e9:76:42:3f:9f:fb:d8:f6:a4:2c:42:2e:
         90:b1:87:4a:73:27:9c:88:1b:e3:ef:30:49:49:d2:5f:88:fb:
         9d:a4:33:52:68:e0:22:d7:4e:1f:17:9a:07:50:9c:fb:ac:67:
         b4:ba:96:ad:cf:ad:d4:67:23:2d:47:7c:06:59:90:96:0d:ef:
         e9:ec:23:f1:56:ac:78:8c:92:2c:2e:57:1d:ba:4b:58:63:cd:
         41:bb:f7:51:3a:ca:2d:22:ac:a8:91:b9:8c:d8:94:58:80:fe:
         df:bb:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:57:06 2024 by rpki-client on console-ams.rpki-client.org