Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File:                     4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier:          ayUakolxCHSBo8RX/SfTGF0Z+ZasnIqW3HCX1GOKlbU=
Subject key identifier:   A5:7C:6E:D8:B5:00:74:7F:64:25:FF:74:AD:94:1C:28:5C:4A:43:81
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer:       /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial:       018F41C33C73AAE2E4B13DF32F0C8B653221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number:          0A3F
Signing time:             Sat 04 May 2024 04:01:05 +0000
Manifest this update:     Sat 04 May 2024 04:01:05 +0000
Manifest next update:     Sun 05 May 2024 04:01:05 +0000
Files and hashes:         1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: MG3C8j1ysoS9/r71iuGdhQkI5SUj6QJ2Npb2VDhYzlA=)
                          2: 8mFb3fMndMnorzMdD7cIA1PgoDQ.roa (hash: upCPUYIC4Si5umIdsLHPSpv7k9AGsf+Ft1xLsZP33uw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:3c:73:aa:e2:e4:b1:3d:f3:2f:0c:8b:65:32:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
        Validity
            Not Before: May  4 04:01:05 2024 GMT
            Not After : May  5 04:01:05 2024 GMT
        Subject: CN=a57c6ed8b500747f6425ff74ad941c285c4a4381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:be:d6:10:b2:22:a9:b2:05:af:76:de:4d:
                    7f:46:c2:cc:b8:4f:aa:99:e6:18:aa:0f:f9:e7:a9:
                    d3:47:49:20:b0:2c:69:0c:aa:da:af:16:8e:2d:04:
                    f2:83:cb:c5:23:2f:00:b5:84:50:f2:3b:5a:3d:18:
                    41:90:24:f7:09:40:a9:7c:bb:c5:05:21:59:4c:55:
                    70:d4:34:8f:8e:78:2f:fc:98:e9:f1:11:05:2a:9b:
                    42:79:99:6a:60:7a:2b:b0:fa:a0:ca:98:14:f1:df:
                    e3:23:4c:41:f5:de:c6:a3:90:04:b4:ba:c6:7f:8b:
                    02:7c:70:08:7a:78:7b:9e:3a:c3:97:d7:c0:32:7b:
                    9a:80:b4:be:ba:f4:65:45:d4:a5:3e:95:e1:13:80:
                    ee:5c:32:a3:a5:4e:e8:82:1c:75:50:e9:db:00:cb:
                    18:51:24:d4:88:a5:26:70:a6:40:99:de:ab:08:cf:
                    31:b0:44:50:4a:17:90:29:a0:13:10:6f:e9:bb:34:
                    31:5d:2f:4a:5b:92:dc:2c:9e:88:a0:21:3f:05:c3:
                    58:73:b0:e4:cd:f5:39:5a:a9:99:97:6c:4d:91:d7:
                    36:16:b9:a2:54:a1:b9:05:42:3f:cb:25:73:f9:19:
                    0a:ee:22:4e:08:d7:55:56:ed:cf:76:ef:27:35:29:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7C:6E:D8:B5:00:74:7F:64:25:FF:74:AD:94:1C:28:5C:4A:43:81
            X509v3 Authority Key Identifier:
                keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d1:ca:74:e9:ea:ee:fa:4f:bf:84:a0:39:97:26:f3:30:d4:
         82:23:d3:51:91:13:da:b7:b4:4e:b6:38:db:bf:86:98:c4:c0:
         31:c5:09:9f:44:ad:bb:29:ff:d1:da:0a:2f:6e:4f:86:c2:04:
         30:75:a0:f1:b9:af:a2:fe:f4:e1:31:d9:1c:4b:2c:7f:2d:ee:
         1d:2e:89:cd:7c:92:53:e2:3e:da:64:89:1f:2b:0d:55:49:13:
         d6:04:d0:53:40:f0:7b:81:6f:d6:9b:6c:8d:69:21:20:4a:a0:
         0b:43:10:0b:89:ec:96:1d:80:a8:85:04:89:6d:47:0a:da:27:
         aa:ef:44:40:74:d4:31:8c:54:ba:97:e1:22:56:b7:a8:02:f9:
         91:98:04:53:bd:e3:d9:3a:1a:d7:fb:aa:59:c8:38:c1:5d:69:
         4f:ff:f3:e7:20:f8:95:88:b4:65:b4:f8:45:8e:be:78:d4:0e:
         e5:b0:02:dd:2f:a2:27:a5:da:51:0b:6c:9d:a1:90:57:05:4b:
         ce:cb:bf:88:8e:60:82:1b:34:14:f0:37:2a:11:3d:99:95:3c:
         9d:df:0d:51:f2:08:4b:9c:4a:42:ce:4b:ce:8e:47:26:5a:7f:
         dd:b8:21:e2:a6:60:aa:99:86:35:ab:40:3b:cd:18:c1:41:40:
         81:82:7a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:42:41 2024 by rpki-client on console-ams.rpki-client.org