Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File:                     s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier:          NIpZdVKgozPWGXomimc5k7jML20YXRWTmt/HCvUsLHQ=
Subject key identifier:   F3:0A:80:29:E7:51:96:C2:D5:94:B3:49:70:53:F0:FA:00:45:98:06
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer:       /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial:       018F8748D99ED930C220B457575FAAF2EC47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number:          0500
Signing time:             Fri 17 May 2024 16:00:49 +0000
Manifest this update:     Fri 17 May 2024 16:00:49 +0000
Manifest next update:     Sat 18 May 2024 16:00:49 +0000
Files and hashes:         1: kd-huYOFeAFyVclO_6ZSHUMAuVo.roa (hash: tTdelJxdufLhNKZwQj7Kbj7/oLoQxsHtczMCE/ofzRc=)
                          2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: MmP/bLDRgbaaatEtaGjwcHpglWrmTwE183pS49t6WQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d9:9e:d9:30:c2:20:b4:57:57:5f:aa:f2:ec:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
        Validity
            Not Before: May 17 16:00:49 2024 GMT
            Not After : May 18 16:00:49 2024 GMT
        Subject: CN=f30a8029e75196c2d594b3497053f0fa00459806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:16:d1:7d:5c:5c:97:88:14:25:a2:ca:91:
                    d5:73:fc:34:72:63:e9:ae:fc:54:4d:4b:be:c3:59:
                    79:54:a2:15:1b:78:b7:00:cb:25:fe:24:8e:64:1e:
                    81:fb:c6:05:41:8a:15:56:2d:85:62:b0:9b:d0:bb:
                    d0:13:1b:3c:ac:92:99:28:99:02:bd:18:81:19:65:
                    22:48:e4:e0:72:c1:63:a0:bd:8d:2e:8a:77:12:50:
                    ee:8e:f3:1b:b5:e4:8d:f1:31:bf:03:3b:8d:0e:88:
                    13:41:bb:9e:f9:46:02:63:77:ec:3a:2d:2b:65:3e:
                    e1:08:f1:1f:41:65:af:69:9c:6d:c1:49:21:e2:21:
                    88:23:51:cb:34:fd:5b:cf:90:20:58:46:07:02:02:
                    37:f3:38:ac:2b:a6:88:19:8d:e9:90:01:82:82:50:
                    85:21:ac:21:21:e6:02:79:b4:aa:74:30:03:20:b8:
                    11:cd:96:98:02:72:2f:a2:ed:1d:3d:4b:90:41:03:
                    ae:04:10:1b:4c:e2:e6:c4:9f:e6:7b:2d:8c:a3:fc:
                    a3:84:30:34:d4:6e:b8:1e:00:40:df:e2:95:02:88:
                    85:14:6f:c1:4b:db:05:36:10:72:cf:33:7e:35:5d:
                    95:5d:31:f1:e6:9e:20:0d:9b:ed:3c:15:de:ee:7c:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:80:29:E7:51:96:C2:D5:94:B3:49:70:53:F0:FA:00:45:98:06
            X509v3 Authority Key Identifier:
                keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:11:4a:7e:08:85:d6:b2:30:73:33:49:0e:70:f0:d4:dd:e2:
         fe:f1:c0:04:cc:47:9f:a6:20:03:8b:8c:ff:27:f9:1b:72:df:
         4e:cf:78:9c:d0:b3:38:28:5d:43:24:22:73:c9:69:76:f2:08:
         3f:3a:2a:b7:86:5b:5b:57:59:44:c0:dc:01:9e:3c:08:1f:35:
         cd:4c:6a:c1:7d:05:c5:57:ec:25:c2:2e:de:7a:65:e6:1d:40:
         3c:03:0e:69:1e:0b:0c:70:61:2a:b4:e5:cb:7c:ec:69:59:4c:
         37:e0:95:d3:45:b9:9b:2a:d4:03:5e:14:be:e8:a0:52:34:6a:
         d4:03:23:d8:3d:d2:c9:81:e7:a4:7d:a3:1b:98:31:59:98:83:
         c9:57:40:4c:6d:82:d0:b8:c8:8e:e9:6c:ff:41:1c:ef:2e:ef:
         ee:c7:5e:20:8b:1d:8c:64:63:de:75:86:0b:f0:f6:84:3c:2e:
         21:0e:be:50:94:06:ab:ca:dc:d0:eb:9f:82:cd:8e:a6:88:b9:
         37:03:92:e2:3f:b0:b7:16:6f:1d:74:a0:e0:ab:e2:e3:a5:77:
         b0:3c:1e:43:b2:c7:ad:62:5a:7e:55:64:ad:67:57:cb:02:af:
         a2:60:b4:7d:18:2e:15:e2:86:24:99:fd:df:cb:c7:7a:22:ab:
         63:e6:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:22:19 2024 by rpki-client on console-fra.rpki-client.org