Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File:                     4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier:          xD5IR5j1q2A1DtZllgfRr23dDqbgL4svwhnSZqvbipc=
Subject key identifier:   AB:E1:66:D6:61:2E:C2:F9:53:97:F8:0E:D5:EB:C7:49:E7:D3:29:EA
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer:       /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial:       018F23EFA37A69EF1F00F01261A538E20483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number:          1148
Signing time:             Sun 28 Apr 2024 09:00:58 +0000
Manifest this update:     Sun 28 Apr 2024 09:00:58 +0000
Manifest next update:     Mon 29 Apr 2024 09:00:58 +0000
Files and hashes:         1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: oVDcRCd9JOBLpGKs4xm3TCNXCdwmLTnZlrFjMpCPYlw=)
                          2: B-VevEOfaxehRWXl1vj3ImIHqn0.roa (hash: Ofe1YYirqemlsn1hn8PmWGsDYPkCXHyJNAtJqaHjlwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:ef:a3:7a:69:ef:1f:00:f0:12:61:a5:38:e2:04:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
        Validity
            Not Before: Apr 28 09:00:58 2024 GMT
            Not After : Apr 29 09:00:58 2024 GMT
        Subject: CN=abe166d6612ec2f95397f80ed5ebc749e7d329ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:ca:25:5c:e0:e6:d5:5a:66:82:4f:22:a0:
                    3d:41:2d:78:cf:6c:a9:1b:a3:57:02:9c:e0:9b:67:
                    a1:e9:4b:42:46:b2:cc:4a:6c:12:27:c1:90:2e:25:
                    fd:33:f1:d4:ed:f5:43:a0:77:6e:fb:b8:e5:63:5c:
                    b8:e4:37:93:cf:49:85:46:48:e3:3c:e4:97:bb:0f:
                    69:13:0a:af:1d:c8:db:ab:f7:4b:89:b6:0c:90:2d:
                    9e:c1:2a:a3:30:4a:cc:29:df:89:fd:90:e4:0e:88:
                    97:00:4f:41:fe:11:18:0e:bd:df:66:d0:f6:a6:c4:
                    3b:2d:d2:3f:8d:8b:e8:60:de:26:51:6e:44:08:16:
                    76:30:c7:d6:3f:d1:55:b8:d9:78:5d:61:c0:64:5d:
                    82:e4:00:51:1e:61:13:dd:02:2a:53:e6:be:da:5d:
                    f0:3b:8a:8d:c1:74:34:e1:b3:80:97:ab:03:ae:18:
                    7b:a4:25:a8:bb:c6:25:cf:c6:d7:df:f8:52:63:bd:
                    1f:2c:ba:40:99:e1:65:c2:65:70:2c:65:be:b5:e6:
                    57:40:2c:3f:90:ab:d4:59:9e:d8:57:5d:98:92:78:
                    bd:93:33:1b:c8:81:bf:07:1d:11:45:a3:f5:3c:56:
                    e3:ab:28:00:dd:fc:2b:cf:4c:27:0c:c2:a5:29:bf:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:66:D6:61:2E:C2:F9:53:97:F8:0E:D5:EB:C7:49:E7:D3:29:EA
            X509v3 Authority Key Identifier:
                keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:21:52:07:53:b3:40:51:58:93:8b:64:d5:df:df:9a:31:70:
         f5:60:66:56:11:e7:f1:0f:e0:e0:47:01:c8:c7:73:84:5b:10:
         f7:e5:64:58:a8:ec:0d:e0:8a:85:ea:83:03:ea:dd:5f:b1:8d:
         06:83:14:c6:c6:4d:c4:04:5a:ad:10:4d:f3:ae:db:63:b1:02:
         52:d3:47:98:a2:76:90:33:19:71:9d:0a:ca:96:58:53:f4:c0:
         02:fc:bd:87:aa:81:92:94:8a:2d:0a:b3:0b:4e:ed:c5:1c:22:
         21:8b:50:e8:73:1b:2b:36:b4:cf:8c:79:47:a5:86:af:f2:74:
         a6:5e:dc:7a:78:b9:fc:22:a2:85:aa:89:f5:ed:a7:c1:14:83:
         8a:30:95:8b:75:df:d7:0a:17:f2:b9:1e:7b:55:24:4a:04:a8:
         ab:60:0f:3d:1b:3e:78:bc:1a:4a:71:09:89:a3:f7:d7:d8:76:
         04:61:0e:30:0a:1f:62:a5:3f:6a:44:8c:56:a8:5a:ba:62:80:
         4d:a0:51:b8:4a:3c:ae:42:4a:d4:db:e1:44:ff:9d:25:31:a7:
         64:78:76:a7:d2:20:62:09:9a:78:5a:24:88:e1:25:05:26:86:
         d3:cb:80:86:22:27:69:21:c1:65:b5:fd:44:9a:a9:ed:ae:8d:
         dd:ca:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:33:32 2024 by rpki-client on console-ams.rpki-client.org