Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File:                     4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier:          vMKVRmAtmuzAufwGpDkP/tyc5GTS1f1Jy8pxtPvb3D4=
Subject key identifier:   20:4F:10:30:13:D0:5E:CA:4E:6D:23:71:24:03:E3:0C:F1:FC:11:2B
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer:       /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial:       018F441F76CE229F910EE5A8A585B09F9DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number:          1152
Signing time:             Sat 04 May 2024 15:01:03 +0000
Manifest this update:     Sat 04 May 2024 15:01:03 +0000
Manifest next update:     Sun 05 May 2024 15:01:03 +0000
Files and hashes:         1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: Apwxlwv0kFxje/3FA/n+973WsUNof9DSgOzhd1lDFPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:76:ce:22:9f:91:0e:e5:a8:a5:85:b0:9f:9d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
        Validity
            Not Before: May  4 15:01:03 2024 GMT
            Not After : May  5 15:01:03 2024 GMT
        Subject: CN=204f103013d05eca4e6d23712403e30cf1fc112b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:bd:e4:2e:a7:e2:b6:12:b7:e0:16:4b:b6:
                    27:48:ac:c0:b2:73:5b:e3:73:88:c5:de:0b:d8:f2:
                    3d:00:91:a4:2f:0f:72:8d:b5:df:6f:1e:0d:2f:49:
                    57:9f:b8:5e:12:71:56:e8:1d:d5:32:10:a8:ce:e0:
                    a5:e0:e4:67:b9:43:16:a9:19:da:09:9d:bb:1a:8f:
                    47:86:b4:c1:45:92:bd:9a:82:1d:19:85:bc:0d:8f:
                    01:2e:3d:90:bc:fb:d4:4b:09:25:35:48:57:1e:5a:
                    fa:83:fe:46:58:9c:61:77:08:99:02:00:ef:24:07:
                    79:d3:e7:e0:a2:b0:3d:14:33:45:ad:fa:ca:61:6b:
                    d6:0a:16:cf:00:6c:41:c7:9f:32:22:0a:03:9e:9b:
                    87:21:79:3b:0b:a7:23:88:3a:84:70:ca:08:96:3b:
                    5c:5c:92:64:1d:77:7f:17:db:e1:fc:d5:8b:a4:64:
                    de:c7:9d:a3:3b:07:19:52:63:f9:d6:8f:41:6d:48:
                    47:75:96:87:d0:0b:ad:fe:70:58:9c:30:44:04:62:
                    c5:1e:b9:bb:3d:72:5f:02:18:fe:b2:3b:54:e5:dc:
                    1a:86:64:52:02:69:6e:8a:d1:20:c0:32:36:77:97:
                    8b:98:17:bb:76:d7:52:1c:f9:bb:04:7b:1f:28:38:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4F:10:30:13:D0:5E:CA:4E:6D:23:71:24:03:E3:0C:F1:FC:11:2B
            X509v3 Authority Key Identifier:
                keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:85:0b:c0:e5:58:98:b1:f8:12:fa:46:b7:f3:2b:ae:9f:6a:
         34:76:8d:f1:37:ac:8c:67:6b:fd:40:4f:4a:18:8c:1c:0e:a3:
         4a:5e:6a:19:64:93:1f:4d:b8:06:3e:4e:aa:30:1c:27:b9:73:
         e8:fc:ac:0e:7e:0c:a2:89:2e:eb:08:f7:ab:ad:d9:8e:3b:f9:
         c6:f0:46:23:17:df:09:85:88:bb:32:1b:ec:08:39:67:c4:6f:
         20:af:6a:74:6b:6a:c3:2d:34:6d:c2:9e:0b:1c:64:d6:72:9b:
         85:e0:79:72:43:b3:0f:70:69:e3:56:dc:b3:c5:59:89:57:7f:
         12:bf:4f:02:8c:aa:df:22:ce:35:9d:99:af:d1:02:95:bb:9b:
         bb:0b:37:16:42:a4:11:42:84:9c:d3:49:d5:4f:f6:94:3e:f4:
         03:57:0e:7b:d7:df:f8:72:44:67:12:e4:90:0d:69:0c:88:8a:
         49:ad:08:1a:96:b1:61:15:27:42:47:d3:b8:01:cf:db:c9:aa:
         21:e6:be:b2:4e:a9:cd:29:89:f8:f1:70:ab:07:8f:01:22:7c:
         06:4d:4f:bc:b3:25:36:9a:56:09:0a:2d:47:66:a4:59:78:ee:
         c0:54:ff:b3:13:9c:f3:56:b9:f0:f3:56:9b:72:29:ae:27:2f:
         dc:c5:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:47:00 2024 by rpki-client on console-fra.rpki-client.org