Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
File:                     4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json)
Hash identifier:          wvgi3wtz50VUFKAmWxXr6ZZIlwG1bTnhmrzFw4MwxC8=
Subject key identifier:   96:88:07:D1:BB:A3:DB:05:6E:62:2C:F6:C3:B7:7A:ED:5E:17:35:75
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Certificate issuer:       /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial:       018F339994DF46DD1C89FB2001202EE9EE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
Manifest number:          0BE3
Signing time:             Wed 01 May 2024 10:00:54 +0000
Manifest this update:     Wed 01 May 2024 10:00:54 +0000
Manifest next update:     Thu 02 May 2024 10:00:54 +0000
Files and hashes:         1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: 0BfWjYjv83zLABNEu7U006PhFOFeIcR9viaaxG01mb0=)
                          2: GWP30Jb6N4G90fbey7hX1Wke47k.roa (hash: NWla0IlFuqkifksGaS02wskbol4inVUlVuKoV+28YNU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:99:94:df:46:dd:1c:89:fb:20:01:20:2e:e9:ee:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
        Validity
            Not Before: May  1 10:00:54 2024 GMT
            Not After : May  2 10:00:54 2024 GMT
        Subject: CN=968807d1bba3db056e622cf6c3b77aed5e173575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:91:e5:fc:23:8d:a0:1a:a7:b4:ae:7e:82:
                    f3:e3:c6:cd:2e:f8:5a:ce:5e:d5:bf:ac:8c:bf:13:
                    64:6e:8a:6c:5b:24:b4:55:4e:91:fa:c7:3b:62:03:
                    cb:78:0b:d0:af:b9:84:e4:32:04:29:db:5d:b8:68:
                    a0:06:43:55:9a:92:a6:eb:01:02:67:4a:94:ae:6b:
                    ef:1f:5d:53:10:07:a9:cb:fb:58:45:55:96:df:6c:
                    5e:e6:a7:e1:93:5b:ba:bd:2f:c7:45:b3:ec:65:df:
                    03:77:af:92:53:c3:dd:43:c6:35:38:d6:c4:ff:5d:
                    7a:04:b2:ae:3e:08:9c:b5:bc:e5:03:9a:af:ff:b1:
                    24:78:27:16:d7:a5:d2:15:35:26:54:96:8c:14:34:
                    20:c5:8c:07:ec:d8:5a:6a:86:a9:cf:cb:33:46:ed:
                    ff:15:6a:56:1d:74:2a:58:8f:c4:07:9d:09:62:c7:
                    6a:57:b1:b2:76:ae:aa:ff:bf:3a:9c:e1:62:55:be:
                    5c:54:15:00:63:e5:a6:c3:6d:df:fb:ac:8a:e6:f6:
                    8a:ac:11:9a:fb:8b:c1:dc:0b:74:47:0b:e4:af:42:
                    85:d7:61:8e:28:5d:0b:e8:94:ee:8e:7b:70:84:bc:
                    b1:91:ae:60:2f:78:41:94:e1:39:15:da:2a:2c:11:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:88:07:D1:BB:A3:DB:05:6E:62:2C:F6:C3:B7:7A:ED:5E:17:35:75
            X509v3 Authority Key Identifier:
                keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:de:d6:ae:29:1e:1c:ea:a8:4e:70:38:58:35:34:d2:52:a0:
         c2:08:76:10:0e:fd:dd:9f:9c:ca:03:b6:a7:17:5c:24:f8:b1:
         e9:c7:7c:4b:e4:a4:18:8f:36:ef:16:b7:11:13:8f:44:b2:1a:
         8d:f6:c1:e8:4c:78:5a:36:ad:1f:2f:d8:a1:3f:d1:e9:49:b4:
         57:4a:a3:ab:13:ed:1a:9c:0e:0e:f6:b7:0e:14:67:f7:8b:39:
         c8:19:b0:80:c3:68:39:89:88:f7:ad:15:f0:60:93:7c:2c:ec:
         bd:3a:be:06:05:c3:91:ff:f1:23:5c:24:9e:c8:08:b6:d9:cd:
         ef:81:c4:c4:d7:a8:9a:cb:76:6c:5a:d1:6f:4a:4e:48:91:23:
         98:d1:b6:3a:4e:6c:63:6a:ed:47:f7:57:09:ae:37:ba:ef:0c:
         fd:47:9e:af:fb:39:cd:54:c0:76:2c:f5:93:30:4d:cf:3d:a3:
         bb:64:30:fd:d3:5a:25:25:11:09:88:84:32:1b:dc:ab:26:f9:
         4e:e7:95:84:5d:58:aa:bd:03:7a:3b:72:1d:dc:c6:dd:e8:83:
         f1:cb:9f:05:dc:36:9e:a3:e0:9f:ee:f0:99:76:46:71:75:c1:
         f6:96:2f:3b:b2:57:b3:2a:12:b1:9b:7e:d1:13:5f:d8:19:da:
         c4:25:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:17:23 2024 by rpki-client on console-ams.rpki-client.org