Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft
File:                     4qSQ41rZxh_VM04qHoVtgX0XMMI.mft (raw, json)
Hash identifier:          /SvGGAyjqMMTVaNliqL/ne3jTlB50Zl/YFp+mtt28vA=
Subject key identifier:   85:8C:FA:2F:D1:C1:0F:74:67:AF:EC:C6:8C:1A:39:95:D2:AD:C4:56
Authority key identifier: E2:A4:90:E3:5A:D9:C6:1F:D5:33:4E:2A:1E:85:6D:81:7D:17:30:C2
Certificate issuer:       /CN=e2a490e35ad9c61fd5334e2a1e856d817d1730c2
Certificate serial:       018F532593BE17465E6011EC828C2A88C585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qSQ41rZxh_VM04qHoVtgX0XMMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft
Manifest number:          0468
Signing time:             Tue 07 May 2024 13:02:02 +0000
Manifest this update:     Tue 07 May 2024 13:02:02 +0000
Manifest next update:     Wed 08 May 2024 13:02:02 +0000
Files and hashes:         1: 4qSQ41rZxh_VM04qHoVtgX0XMMI.crl (hash: EGoGTKFyWV0sIZVE2Mxb10sUdkSoPI8PbnVwYMxJ750=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qSQ41rZxh_VM04qHoVtgX0XMMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:93:be:17:46:5e:60:11:ec:82:8c:2a:88:c5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a490e35ad9c61fd5334e2a1e856d817d1730c2
        Validity
            Not Before: May  7 13:02:02 2024 GMT
            Not After : May  8 13:02:02 2024 GMT
        Subject: CN=858cfa2fd1c10f7467afecc68c1a3995d2adc456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:8a:35:8a:88:d5:13:7c:61:4a:fc:6e:7a:
                    cf:d5:b0:f5:83:67:3a:41:cf:5e:fe:44:27:67:63:
                    13:7c:87:82:e6:79:bc:f1:2e:98:8b:a3:32:a2:a2:
                    99:4f:ae:67:ec:4a:26:63:cf:26:01:65:0c:4a:dc:
                    b1:b2:a8:aa:ca:e5:87:51:6a:d4:36:19:89:6d:18:
                    30:2c:f0:b2:4b:d2:36:25:a8:9a:34:e1:a7:80:fd:
                    6e:39:78:70:db:b4:f7:89:bc:15:0d:90:88:ab:74:
                    42:08:68:0b:a5:9e:20:8a:2c:b3:52:73:22:96:dc:
                    2e:31:68:92:e8:f0:0e:65:a1:97:24:2b:dd:88:0b:
                    c5:16:99:91:05:60:4a:a6:45:6e:3d:22:ec:18:10:
                    44:64:75:d0:7e:02:37:33:93:f5:ab:56:25:a6:eb:
                    7f:f1:e3:8d:32:4a:07:ca:b0:a2:e0:44:69:56:ea:
                    89:26:f8:1c:1b:54:48:83:84:5d:b6:f8:a1:b4:16:
                    aa:a1:26:14:be:15:ed:db:74:8b:07:10:48:28:05:
                    7c:55:4d:64:8b:46:71:91:4f:50:4c:31:cf:53:79:
                    69:d2:23:51:b4:67:c6:dd:94:79:bc:e0:c9:3d:5b:
                    ba:6d:8e:59:62:69:db:83:64:29:9d:5f:84:95:7c:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8C:FA:2F:D1:C1:0F:74:67:AF:EC:C6:8C:1A:39:95:D2:AD:C4:56
            X509v3 Authority Key Identifier:
                keyid:E2:A4:90:E3:5A:D9:C6:1F:D5:33:4E:2A:1E:85:6D:81:7D:17:30:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qSQ41rZxh_VM04qHoVtgX0XMMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:43:db:0e:01:e0:0e:02:1f:f5:62:02:17:1f:eb:57:63:92:
         63:17:97:ed:02:11:4c:cc:77:a4:70:e2:e1:ac:f2:49:3d:9f:
         36:9e:11:47:00:a2:02:bd:21:e9:40:e0:eb:c8:81:e9:75:e6:
         82:85:d5:ea:77:7d:57:fc:f7:1c:6b:4e:50:33:a9:09:99:0b:
         a8:6f:60:1c:00:82:15:63:17:8d:14:a0:4c:e4:2e:5d:dc:ad:
         4d:ed:21:e0:7e:c7:82:cc:c0:a9:8f:f7:13:05:d8:7d:40:44:
         7a:c4:ef:93:4a:17:cd:44:00:c2:1e:a3:0f:48:9f:1c:97:c6:
         24:5a:ac:90:e4:e9:dd:90:72:82:04:e7:a4:a3:dc:91:0d:28:
         b4:ad:77:80:c0:65:5e:4c:bb:f1:52:0a:cb:f3:ac:ae:ba:43:
         17:f2:1b:f3:08:f1:24:c7:04:14:1f:ab:69:4f:10:72:68:66:
         4a:a1:55:44:5b:8a:70:3d:04:20:08:96:6b:33:10:b5:2f:50:
         8a:fc:62:4e:ef:ae:22:66:e8:4b:7a:84:cc:21:27:b1:54:b4:
         2b:d4:28:06:70:28:7e:11:43:23:12:61:13:2a:87:a1:d3:79:
         a6:80:ac:9a:a1:0f:4c:9c:68:68:a8:dc:ee:bf:dd:86:87:ec:
         0a:57:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:55:05 2024 by rpki-client on console-ams.rpki-client.org