Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File:                     4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier:          eFrkxwYwrSEA5XyGlYRW3Ni9jxzlVNc/AG3GgHvZA58=
Subject key identifier:   58:E4:FA:18:EB:D5:D5:58:1C:51:98:34:6E:96:94:D5:F8:98:2E:BA
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer:       /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial:       018FD8D3108FED47F2F2FA654AE26E29CEDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number:          0E33
Signing time:             Sun 02 Jun 2024 12:01:01 +0000
Manifest this update:     Sun 02 Jun 2024 12:01:01 +0000
Manifest next update:     Mon 03 Jun 2024 12:01:01 +0000
Files and hashes:         1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: 4KEPI3wFhA1/xr3pL9r0BYrtUKoI1Fv1vhzidwYoVT4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:d3:10:8f:ed:47:f2:f2:fa:65:4a:e2:6e:29:ce:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
        Validity
            Not Before: Jun  2 12:01:01 2024 GMT
            Not After : Jun  3 12:01:01 2024 GMT
        Subject: CN=58e4fa18ebd5d5581c5198346e9694d5f8982eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:6e:6c:a8:e7:4b:36:91:e1:c4:b2:04:8d:
                    25:e1:fc:31:58:38:f3:81:28:b9:e0:1a:05:73:3d:
                    ca:2b:7f:ed:05:df:f6:83:70:fc:0d:08:6a:90:54:
                    99:11:1d:e4:37:8b:21:c8:30:9f:30:b9:6b:0c:6a:
                    7f:d5:a5:46:26:be:f8:c3:95:a2:c3:31:6a:dc:b5:
                    f7:91:2d:0d:84:0a:7f:de:cd:de:a5:39:a5:4d:2e:
                    1c:fa:7c:69:2e:53:59:9f:74:a9:d7:c7:d1:73:fb:
                    da:3d:30:eb:b3:33:f2:ad:7d:a8:49:17:ef:5a:3f:
                    23:49:66:59:cc:9e:14:28:77:c4:65:5e:66:80:ee:
                    5a:66:21:e5:9f:11:f6:16:00:d3:23:d5:48:d2:07:
                    71:48:15:e1:08:cf:24:fc:ec:62:bd:30:9a:a8:5e:
                    3b:ac:a5:f1:a4:69:a0:75:79:0d:67:3e:ed:32:ad:
                    30:66:28:a3:96:b1:9d:7e:fc:79:b9:f6:9e:51:93:
                    b7:f8:84:67:60:8e:7f:84:cd:77:8b:8e:8f:9d:61:
                    20:c4:9c:a5:d3:8a:eb:ce:c8:fa:8e:53:7e:d8:4e:
                    7b:0b:18:48:5c:71:79:04:37:17:f5:fa:6a:ca:75:
                    d7:8e:96:1d:48:bf:54:52:bc:0f:57:ca:f0:ab:f8:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E4:FA:18:EB:D5:D5:58:1C:51:98:34:6E:96:94:D5:F8:98:2E:BA
            X509v3 Authority Key Identifier:
                keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:01:d7:41:2b:78:7a:2f:ce:da:05:2e:85:94:e0:55:6b:13:
         3b:39:a1:0a:b3:30:b5:4f:74:28:14:e8:a0:04:ba:4a:29:e9:
         80:ec:71:ed:9d:b6:f8:bb:2e:3a:dc:b3:e5:90:f0:db:f2:0a:
         8a:98:fe:d7:88:fd:7e:4a:38:54:73:77:bc:5b:0b:85:fc:af:
         ba:51:7a:d0:50:8d:c9:fb:c1:9a:26:20:93:b1:0e:52:88:05:
         ac:fa:e3:f8:ae:a6:6f:d8:48:90:13:d4:5a:e5:fe:50:79:58:
         0b:46:c0:9f:9b:bc:95:0b:c8:fe:d3:0b:7f:94:a2:6c:78:7a:
         fc:94:c4:91:c3:cf:04:0b:b7:1b:96:45:2c:8f:e4:3e:0c:7c:
         8d:4b:71:d2:8c:73:63:2f:e4:93:fc:67:9f:27:89:0c:10:1e:
         22:2b:0c:cb:05:34:d7:13:d7:2a:80:a4:0a:8d:4e:a7:bf:2f:
         77:fc:27:54:66:32:0c:3f:16:6f:c1:93:cf:8c:f0:72:d1:01:
         a3:ed:bb:e6:7c:bb:52:07:9a:f2:f0:dc:49:54:17:31:26:78:
         f5:5f:1d:f9:ae:b6:f9:6e:67:3a:92:58:cd:fb:2c:d6:22:33:
         45:76:e3:e3:67:54:65:00:be:51:bc:4b:ee:be:d6:03:2b:7e:
         26:81:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:12:15 2024 by rpki-client on console-ams.rpki-client.org