Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File:                     4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier:          bJalxVJS/Xxew6g0frHPPHMLz0XAgee+VvM8Be/JEnw=
Subject key identifier:   2E:8B:BD:4E:CB:94:04:25:40:9D:CB:69:15:C4:70:9D:A8:48:7B:F0
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer:       /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial:       018F4DC7DE115BA42639C59B0AC309D8CD44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 12:01:34 +0000
Manifest this update:     Mon 06 May 2024 12:01:34 +0000
Manifest next update:     Tue 07 May 2024 12:01:34 +0000
Files and hashes:         1: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: WkWiAnOJqKBlld+NhUaYgwQpHLju2L9xnk+t9K77aHc=)
                          2: CBvPXd8nLoqyEbU7A9FiANC3U50.roa (hash: HpbvrgjDd2DlSkE1aifhPxK0Je9fTyvzFGYxz98z94k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:de:11:5b:a4:26:39:c5:9b:0a:c3:09:d8:cd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
        Validity
            Not Before: May  6 12:01:34 2024 GMT
            Not After : May  7 12:01:34 2024 GMT
        Subject: CN=2e8bbd4ecb940425409dcb6915c4709da8487bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:b7:4c:14:ee:9c:0e:b0:f8:40:aa:48:cb:
                    28:88:ae:ee:36:a4:14:f0:5e:29:61:9b:df:fb:70:
                    32:20:1c:48:02:8c:5e:f2:9c:4d:6d:07:cb:80:b8:
                    a2:b8:a3:d7:6b:cf:0b:ba:49:0c:fe:1c:a2:5a:39:
                    78:84:fc:f6:68:4b:c8:c1:75:55:a1:2c:fa:92:90:
                    45:3e:7f:ab:58:29:c2:ec:ef:47:c4:22:e5:ec:ae:
                    5f:21:44:e6:30:43:4d:e6:7b:fb:5c:ca:88:23:4d:
                    7b:88:4a:e4:1b:0d:06:63:b9:0f:6b:17:a3:49:82:
                    d2:06:13:c1:20:fb:0b:fb:a7:cd:ef:8f:09:ba:8d:
                    23:f7:8f:49:d1:47:30:5e:b7:07:c1:0a:fe:64:2e:
                    17:6b:a3:ba:db:2b:8a:4d:19:03:c7:07:59:fd:29:
                    cd:67:b3:d3:1a:9e:a4:49:ad:1c:4d:45:80:13:37:
                    d2:49:a4:f9:5f:42:ad:66:5b:00:84:22:df:28:5c:
                    d6:16:ee:d2:06:06:b2:bf:9b:83:dd:f3:d4:c1:c7:
                    6b:55:3a:1c:e3:49:5d:bf:bc:fe:1d:44:38:64:46:
                    05:97:54:37:8f:80:7e:0c:ec:12:f3:56:dd:c9:2a:
                    71:b1:aa:9a:4f:fe:64:e6:89:8d:b2:cf:32:a6:5d:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8B:BD:4E:CB:94:04:25:40:9D:CB:69:15:C4:70:9D:A8:48:7B:F0
            X509v3 Authority Key Identifier:
                keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:30:6b:71:59:49:74:48:9f:bb:35:2e:75:ed:63:c3:bc:7b:
         1f:35:28:c8:04:17:54:cc:0e:28:5b:8a:56:db:8c:d9:8c:a2:
         3d:ea:fb:e7:7b:91:2e:f6:88:e5:ea:e6:6e:b9:1b:eb:93:33:
         5c:3d:11:91:90:ab:50:73:36:09:1c:be:96:bb:f9:ec:49:6f:
         ff:6a:60:78:6f:14:e0:f0:2a:b9:f4:34:57:3a:13:f5:e4:1c:
         ca:3a:1c:85:bd:a9:7c:ec:02:0b:e2:fc:69:3f:e8:5d:af:0c:
         3b:7d:1a:c1:5c:f8:c4:ae:a7:05:9f:57:b3:b6:33:2a:1b:9a:
         80:b2:c2:f2:8d:95:cb:ad:89:8a:39:ec:35:76:47:16:b3:4e:
         56:a6:ae:ff:99:03:e5:90:2e:4f:b3:01:26:6e:5b:74:52:b3:
         f6:8c:55:4e:e2:e8:bc:1b:fd:07:ee:32:21:f4:9c:73:78:e4:
         ed:29:d1:59:e8:9c:b8:16:9c:63:c3:1e:c4:29:4e:f6:c1:68:
         09:b4:54:cc:e9:61:4b:71:ca:04:71:71:fa:4f:93:10:7c:77:
         5b:c6:27:e0:a2:00:a2:92:70:d1:9e:62:a1:00:77:fe:82:ac:
         d0:b4:f3:29:a3:7f:02:d8:ae:4f:9e:b4:9a:38:43:ca:b2:ce:
         82:bc:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:39:39 2024 by rpki-client on console-fra.rpki-client.org