Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File:                     4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier:          +940OFOyXILs/3acK/eEX2Bu1W7ltNlk8QBAkovgvek=
Subject key identifier:   69:80:B7:8D:07:E1:2E:53:10:A2:14:29:DE:BB:B3:21:2A:47:40:7C
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer:       /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial:       018F3A0AF78F68E07C638CC3A6CF5456F53D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 16:02:28 +0000
Manifest this update:     Thu 02 May 2024 16:02:28 +0000
Manifest next update:     Fri 03 May 2024 16:02:28 +0000
Files and hashes:         1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: d5pjX3HVerhL/EZHIWAVdoH0dkqei8V3yegZGAR0MpM=)
                          2: 85tR4jdkrZaJIexRAPdN96a-kDU.roa (hash: mX516Up9az2ztePnHPWu6mTcGRaRMcIbhNaqba0aneA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:f7:8f:68:e0:7c:63:8c:c3:a6:cf:54:56:f5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
        Validity
            Not Before: May  2 16:02:28 2024 GMT
            Not After : May  3 16:02:28 2024 GMT
        Subject: CN=6980b78d07e12e5310a21429debbb3212a47407c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:82:13:16:99:ce:02:d1:1d:4e:12:a3:45:
                    e7:ae:37:0d:d9:73:da:06:6c:05:8f:bd:c2:cb:90:
                    c7:0a:d4:08:40:6f:a2:55:22:38:60:76:31:fc:9e:
                    34:17:c9:44:8c:84:38:a7:a8:a3:1c:25:8d:38:2d:
                    ea:d8:26:a6:8f:ae:b6:49:49:7a:b4:44:cb:88:58:
                    66:bf:84:cd:fc:b1:d9:5e:45:97:97:85:17:1e:75:
                    0b:df:e4:99:71:fd:b6:ff:ea:74:d8:c0:3c:5b:42:
                    0d:3a:06:7f:4a:cd:36:4e:00:29:6f:5b:f1:0f:3d:
                    f2:a6:1a:b5:6d:f0:dc:89:42:c4:71:af:7f:46:55:
                    bb:8a:0c:5b:64:f5:97:51:a7:a6:e2:1c:eb:30:c6:
                    14:24:e5:94:b6:7e:d0:f4:96:67:b7:e3:f7:c1:e3:
                    27:82:57:ea:41:51:1e:ce:6b:92:11:b0:60:b7:11:
                    4c:99:40:7a:b4:0c:dc:c3:0a:19:bd:78:ae:11:bf:
                    13:f3:29:db:3f:98:a7:5d:85:1c:4c:76:3c:d7:3b:
                    e8:77:b6:5a:85:d4:13:67:5a:a1:1f:cc:16:7d:8e:
                    2a:24:2d:e2:50:f8:cd:4b:af:5e:68:2d:e8:32:36:
                    1c:56:76:a0:1e:58:f6:f8:1b:96:ee:88:fa:28:37:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:80:B7:8D:07:E1:2E:53:10:A2:14:29:DE:BB:B3:21:2A:47:40:7C
            X509v3 Authority Key Identifier:
                keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:62:24:d0:b3:42:96:6a:d5:40:9a:8d:2f:6b:ce:d5:4e:2b:
         18:ef:ac:3d:d7:e5:78:56:e6:24:71:92:1b:4c:57:8a:6f:e8:
         06:50:e7:97:91:e7:c4:0d:b4:e2:35:57:af:69:37:07:af:4c:
         1a:60:9d:7e:0c:1f:0d:39:34:b3:33:2e:78:52:bb:e4:41:08:
         b9:0a:d9:a5:2b:27:bd:f3:81:5a:1c:b8:b5:38:14:75:ba:f3:
         54:b9:1c:81:b6:f4:99:5d:7b:5d:16:80:55:af:e0:b4:c1:ea:
         6e:de:43:f7:b1:b4:d5:5c:b5:e7:d4:94:8f:50:d8:20:03:e5:
         33:45:ff:d2:f4:61:66:2a:be:45:a3:85:ba:2e:c0:c6:c4:49:
         1d:cc:c3:ca:b0:70:cc:40:33:48:02:06:e6:c7:81:62:3f:bc:
         9d:79:4a:9a:a0:5c:12:3e:65:09:31:d7:2a:24:ac:57:6d:f4:
         d5:a7:d6:d2:28:41:56:e4:d9:6c:87:02:8c:9b:22:41:7f:12:
         ac:db:e5:70:5c:3b:80:d2:96:ba:18:60:8b:12:3b:13:aa:3a:
         9b:59:ec:7d:ef:8e:b3:a6:b6:4b:aa:59:41:cc:7d:7b:67:1f:
         5a:3e:d8:c4:69:21:e0:7c:d4:38:8e:1b:84:8c:a2:b0:41:ed:
         6a:a9:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:21:24 2024 by rpki-client on console-fra.rpki-client.org