Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File:                     CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier:          fQ52rIa47lXLy0hBqD7UazUhQ+DYUls5dCyoMLSCLTI=
Subject key identifier:   3E:D8:90:6F:C5:10:C9:72:B8:9C:AE:75:56:7F:B8:87:0C:F6:73:5F
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer:       /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial:       018F3D41EE4ABE57626807187EDEEB50C264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 07:01:21 +0000
Manifest this update:     Fri 03 May 2024 07:01:21 +0000
Manifest next update:     Sat 04 May 2024 07:01:21 +0000
Files and hashes:         1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: w4izA0wyokEoXbXuGxk4dfErjPWKC/X98qlm7vSfBxA=)
                          2: w2ISO6UBr0Jj2m9QThqbaB-v58c.roa (hash: 42SWRxYwJOie5xt+8ZQa5qOdvJwXJD8mg2o+XG9DlWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:41:ee:4a:be:57:62:68:07:18:7e:de:eb:50:c2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
        Validity
            Not Before: May  3 07:01:21 2024 GMT
            Not After : May  4 07:01:21 2024 GMT
        Subject: CN=3ed8906fc510c972b89cae75567fb8870cf6735f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:99:2e:21:fa:3f:5e:ea:8a:b6:68:61:41:
                    f3:c7:1f:d3:8c:1c:e4:94:2a:a1:f0:61:cb:4e:ba:
                    bf:97:c9:c1:b9:82:ce:22:92:0c:05:ff:d4:43:8a:
                    09:a4:da:e6:a8:fb:a3:35:19:bd:1c:32:80:e5:f2:
                    af:30:ed:45:b1:76:88:0a:40:f2:66:c8:6c:4d:ec:
                    36:1d:25:6e:d9:1f:be:f9:07:7d:bd:8f:64:64:e6:
                    e6:51:03:27:54:12:9d:f2:64:f7:04:79:15:9f:07:
                    8f:2d:6a:bb:8e:c8:b4:fd:23:7e:29:00:c4:f5:79:
                    98:d2:3a:c5:43:d8:f3:01:76:c6:81:22:65:d0:46:
                    32:63:87:03:6b:52:0a:15:cc:58:2c:72:4a:4b:da:
                    4b:4a:88:21:b4:ca:d2:06:87:a8:e1:22:b4:73:99:
                    af:be:6c:77:f6:3c:ef:75:f2:63:6e:18:2c:c3:bc:
                    96:c6:f2:ef:d1:fa:b4:09:68:14:4c:ef:c6:fb:d3:
                    ac:16:13:8a:4a:6a:8e:ca:73:a1:b2:ce:e3:3f:3c:
                    e6:fb:b6:b3:3e:b5:97:b4:b1:03:3d:99:e2:3a:e7:
                    fa:b3:94:ed:55:c3:72:c0:89:f8:d4:d7:9e:96:d0:
                    95:2f:c7:21:7a:14:4c:a7:96:22:a3:ae:8e:8c:d3:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D8:90:6F:C5:10:C9:72:B8:9C:AE:75:56:7F:B8:87:0C:F6:73:5F
            X509v3 Authority Key Identifier:
                keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:c2:19:eb:2e:40:8b:75:0d:2b:20:c5:b4:67:d3:5d:67:
         ef:e8:84:55:96:e9:23:0d:da:8c:6d:b3:d6:00:11:2c:4e:aa:
         f2:d9:59:ea:04:d0:d7:97:cc:91:9c:7a:28:5b:66:81:68:2d:
         91:f1:f4:ea:52:e0:7b:c8:ff:5e:00:13:22:0a:f9:61:95:3b:
         01:20:c2:21:1b:d7:f9:2b:ca:9a:19:75:20:64:6a:75:87:8d:
         1d:5e:1c:9d:fe:4e:4b:d2:4f:5c:c1:7c:84:d9:3d:bd:db:52:
         14:e4:e2:fa:04:d9:dd:53:68:db:12:78:29:fb:ad:96:68:b2:
         be:41:53:19:09:43:54:cf:fa:09:5b:e1:a8:04:92:79:44:86:
         ce:04:3a:3f:d0:70:02:da:c2:91:28:8c:cc:93:72:fb:01:5f:
         fa:10:cb:63:f7:40:63:d9:52:c3:3c:3a:2f:57:42:9c:b8:a8:
         80:da:ef:09:ad:d5:88:4d:98:09:7c:d3:26:34:3e:f0:06:24:
         b7:27:ca:d2:75:09:64:bd:84:1e:c9:21:f1:b4:a2:99:c7:e4:
         a6:66:0d:44:66:36:93:0b:dd:40:2a:b1:aa:4d:72:c8:c5:a3:
         7c:da:69:3a:cf:f5:c1:8b:a5:88:5c:24:74:ac:39:88:ec:fb:
         a3:13:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:55:04 2024 by rpki-client on console-fra.rpki-client.org