Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File:                     4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier:          KSoJ3WH2BPHTSOC5PBX2C54wmd9Fij/YqJC+/raX/7E=
Subject key identifier:   98:5D:39:7F:56:40:36:D3:FB:1C:85:9D:72:34:33:45:AE:0F:DD:7E
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer:       /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial:       018F38C035F1686F20F30BF4AB4C1D7A36F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number:          104A
Signing time:             Thu 02 May 2024 10:01:11 +0000
Manifest this update:     Thu 02 May 2024 10:01:11 +0000
Manifest next update:     Fri 03 May 2024 10:01:11 +0000
Files and hashes:         1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: Ci19WD1JVDs/AA9NIfum1P0N+LhaVnXHaR2OKtQrGrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:c0:35:f1:68:6f:20:f3:0b:f4:ab:4c:1d:7a:36:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
        Validity
            Not Before: May  2 10:01:11 2024 GMT
            Not After : May  3 10:01:11 2024 GMT
        Subject: CN=985d397f564036d3fb1c859d72343345ae0fdd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:55:a9:8f:da:71:87:f7:44:df:e5:a4:47:
                    cf:f7:72:29:10:a0:6d:b3:0f:4f:a4:17:e3:fb:99:
                    d3:62:b9:1e:d9:a6:10:ce:5e:13:23:55:61:87:de:
                    94:1a:16:4b:b0:8d:58:7d:99:75:e6:10:42:7d:f1:
                    3c:5d:5d:be:18:34:22:ed:db:a7:ba:cb:7e:f8:7f:
                    d3:7d:d4:4a:da:6b:df:f9:e3:3e:49:20:bf:fb:70:
                    8f:b1:07:ac:e0:8f:61:00:6c:c2:13:82:ad:1c:78:
                    8c:8e:58:4e:fe:c6:1a:2a:36:50:31:5d:7f:8e:5a:
                    d9:a1:1c:87:e0:25:07:80:6a:c9:30:5a:d2:42:a3:
                    5d:f8:a7:a1:29:74:1f:aa:24:b0:0f:6d:d5:7e:0e:
                    f6:33:a9:e9:3a:20:48:5d:df:d6:be:a6:30:c7:da:
                    70:7a:46:65:6f:ab:3f:9d:04:1e:4e:b6:95:8f:52:
                    34:d6:45:54:14:fe:ac:6f:c3:45:b0:00:57:4e:0b:
                    15:8c:03:73:7e:e1:a7:3d:7d:4c:6f:72:34:30:fd:
                    13:1c:ff:7e:e8:20:e0:0f:a3:86:23:03:b4:e1:1c:
                    09:68:da:fc:47:f1:c8:d4:4d:c1:51:ae:2d:43:74:
                    9b:10:bf:ee:44:9e:96:43:fc:b5:de:41:5c:df:45:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5D:39:7F:56:40:36:D3:FB:1C:85:9D:72:34:33:45:AE:0F:DD:7E
            X509v3 Authority Key Identifier:
                keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1f:a9:45:6e:d2:75:6b:e6:55:28:1c:0b:d3:52:32:7c:e3:
         f1:ef:35:8d:d9:f2:c3:c0:6e:17:b5:87:b7:8e:9d:17:7d:e2:
         0a:cd:c5:dd:5d:df:77:d4:5e:0f:f8:23:94:e1:62:8d:d5:4d:
         c2:a0:9c:95:b5:d7:6e:90:1c:14:8c:08:88:14:76:0a:84:1d:
         08:a5:f8:ac:66:da:93:df:ce:15:7c:06:c9:48:c4:70:c1:dd:
         4a:e1:26:19:55:e8:63:0b:01:d3:4a:73:70:16:87:65:fe:c3:
         7a:ae:ae:d2:e7:98:e1:13:78:b1:c9:11:67:dd:64:00:c2:17:
         cd:7b:30:d0:82:f3:8a:68:b9:a0:da:93:4b:05:91:ef:f9:8d:
         57:e9:15:8e:d1:2b:a5:e6:7a:65:b8:c4:cd:0f:76:55:47:aa:
         e4:73:7d:f3:18:8f:98:a5:b0:93:75:13:6f:c8:5f:2f:0d:45:
         f3:9c:32:53:5a:d8:7d:64:86:c9:31:f2:54:f5:e3:d7:08:b3:
         55:86:6e:92:e6:ed:20:bb:ed:e4:53:88:79:22:2c:6c:a4:9c:
         59:0e:6a:b8:b6:d1:53:ab:77:2a:ea:86:5d:83:a9:00:44:34:
         65:ac:e3:42:2a:b1:ea:e4:8d:53:e2:f0:77:e8:bd:05:ce:48:
         f6:e6:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:27:07 2024 by rpki-client on console-ams.rpki-client.org