Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File:                     4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier:          cFmMArnhyhjLzuMdEOWGv4oPoFMNHDKG0sTdoXxH5Ac=
Subject key identifier:   76:8A:BF:A4:9A:2C:38:C8:8E:C5:89:1D:E0:7A:90:00:13:FD:35:26
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer:       /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial:       018F362E03AEC43115CD8637AD2F554B6851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number:          114A
Signing time:             Wed 01 May 2024 22:02:16 +0000
Manifest this update:     Wed 01 May 2024 22:02:16 +0000
Manifest next update:     Thu 02 May 2024 22:02:16 +0000
Files and hashes:         1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: qrECylH7002g9+wBccDvkIzor2fB0YWVD7tMe6CTT1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:03:ae:c4:31:15:cd:86:37:ad:2f:55:4b:68:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
        Validity
            Not Before: May  1 22:02:16 2024 GMT
            Not After : May  2 22:02:16 2024 GMT
        Subject: CN=768abfa49a2c38c88ec5891de07a900013fd3526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:7b:72:ab:60:d0:c3:06:39:99:66:a1:88:
                    9e:15:db:ab:46:3e:61:7f:79:4f:d1:3c:5f:e9:5f:
                    7f:2f:d9:81:52:f2:c9:c8:b7:cd:73:5f:1f:09:b8:
                    b5:5e:43:ed:b6:33:87:4d:73:74:29:ae:ae:c3:99:
                    ff:d9:50:6f:a6:1a:f0:37:79:24:c0:24:60:c3:ef:
                    08:13:8d:fc:29:27:0e:67:dc:55:ec:f7:be:53:04:
                    15:36:76:4b:b9:55:80:b7:61:c5:22:88:64:d7:90:
                    1a:4f:30:48:59:ec:cb:f8:9b:28:f2:1f:0a:13:67:
                    be:40:9b:38:15:62:d3:34:d9:d6:45:33:bd:7c:b7:
                    81:c1:e0:e4:9a:4d:65:f3:5d:65:e0:d1:8d:a3:e4:
                    34:f1:e8:9f:c0:79:56:3f:72:bb:c3:33:1c:46:71:
                    ac:ba:ba:e5:76:f5:59:ed:ca:f4:68:e5:e4:df:74:
                    ee:dc:ca:37:6b:e9:b9:f2:08:5d:6e:a9:49:db:73:
                    4a:19:66:d6:2b:92:0e:56:ca:13:a0:9f:44:28:c3:
                    e3:65:6b:0c:ff:5c:b4:77:0f:d5:f0:bd:74:f3:cb:
                    7a:30:e0:f2:7b:10:a7:dc:e9:ba:6e:e7:fd:01:26:
                    b6:ff:56:39:3a:f1:d2:63:0f:d6:0a:76:06:99:10:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:BF:A4:9A:2C:38:C8:8E:C5:89:1D:E0:7A:90:00:13:FD:35:26
            X509v3 Authority Key Identifier:
                keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:99:36:46:32:73:29:43:07:fb:eb:db:08:69:c4:03:64:b8:
         38:0f:2d:96:8c:5e:ef:db:71:fb:bf:7e:83:1e:68:8e:5e:e9:
         0d:b0:9f:ca:0c:93:2a:c7:1b:93:35:e5:d1:c1:41:fa:37:19:
         3a:85:71:bb:16:c9:18:46:3a:43:e7:0a:8e:dc:68:f0:b7:e3:
         4c:9f:fa:cb:8d:bc:a6:90:b9:6d:c7:94:ae:c1:56:21:3b:6c:
         44:c4:6a:3c:64:36:34:08:30:6d:bf:8a:0d:01:16:c4:f5:16:
         dd:d8:0e:f2:e9:b4:c3:55:2f:08:3d:38:c7:90:e2:fe:6f:e5:
         b4:46:46:c2:23:d3:1b:13:8a:99:6d:5c:b3:47:b5:a8:42:83:
         b5:47:d0:f4:f3:18:ca:d1:f3:4e:2f:3b:5c:47:ba:ef:48:d4:
         6b:ed:21:65:13:82:1d:92:e1:ec:14:bc:5f:93:75:0f:4f:a0:
         06:53:90:55:84:50:d2:59:6d:8d:26:5a:e4:d5:60:a1:8c:bf:
         44:ad:34:d7:83:48:df:f7:c4:d8:d8:b9:06:57:7f:a1:43:e0:
         5b:17:2f:7a:47:26:42:02:05:80:79:9f:a6:6d:81:a8:89:0e:
         67:38:cd:79:82:53:ed:79:fe:20:ef:cc:95:b6:ab:9e:fa:0d:
         57:ae:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:02:44 2024 by rpki-client on console-fra.rpki-client.org