Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File:                     4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier:          Y8jtc8VgTBkq8sIYJkZ4Xk4quqCGn8G+X4WvqKc8oEM=
Subject key identifier:   E9:13:4D:EA:7C:BE:8A:95:CD:55:5E:39:0C:C7:6F:D0:49:5C:05:D5
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer:       /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial:       018F460E3C061D72E48E3448A87552FA9FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number:          03BD
Signing time:             Sun 05 May 2024 00:01:28 +0000
Manifest this update:     Sun 05 May 2024 00:01:28 +0000
Manifest next update:     Mon 06 May 2024 00:01:28 +0000
Files and hashes:         1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: KYK6RPtuUU4FHGH0zYYE6XO0fyWQmDw2oHz7UcrSQTM=)
                          2: BGG7KTRMxBjpw3JBHlfwsft8Xy8.roa (hash: 83qc4KluA8oQhp4VuQfW0BTn8gDqJlW3kEVoNCCs/KU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:3c:06:1d:72:e4:8e:34:48:a8:75:52:fa:9f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
        Validity
            Not Before: May  5 00:01:28 2024 GMT
            Not After : May  6 00:01:28 2024 GMT
        Subject: CN=e9134dea7cbe8a95cd555e390cc76fd0495c05d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:03:50:49:ad:a9:80:96:04:a7:85:af:5b:
                    cb:79:22:b3:d6:d5:d3:d5:5f:7c:a8:9c:d3:ba:f3:
                    07:4b:a3:e3:10:c2:ad:0a:2d:5a:9b:36:f8:da:8c:
                    6e:12:6f:e8:c8:16:a6:6b:62:a4:15:2c:af:59:4c:
                    81:72:29:30:7f:30:93:4b:5a:5a:7c:e8:d9:04:6a:
                    62:90:6a:7c:40:da:9f:b9:ec:08:3a:79:f0:01:1f:
                    1a:dc:ac:83:26:80:e3:6b:e0:fa:49:2b:f5:54:c8:
                    59:17:f4:57:b8:39:72:e4:a3:a4:f0:e9:64:d6:d9:
                    c3:58:15:31:4a:0f:d9:fd:0b:a3:c7:1f:89:9b:1b:
                    bc:b6:ee:c4:31:3a:94:55:bb:25:ae:41:3e:36:20:
                    fa:27:9c:3c:81:5f:87:bb:96:99:63:2d:45:6a:51:
                    29:57:6c:23:67:19:58:a8:ad:fe:e8:74:03:4a:e0:
                    73:b0:cd:d3:8d:d4:9e:e7:4a:b3:17:38:1c:83:78:
                    30:68:d3:8d:fd:41:32:20:55:fb:f0:dc:d0:33:c9:
                    45:a6:b7:e8:7c:7f:48:ac:b5:9a:b1:30:9a:74:d8:
                    5e:87:d9:8f:46:07:d6:f8:5f:2e:2e:d1:ba:2b:76:
                    7d:2b:31:d3:4a:e4:97:0e:79:c0:e0:3d:af:67:1f:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:13:4D:EA:7C:BE:8A:95:CD:55:5E:39:0C:C7:6F:D0:49:5C:05:D5
            X509v3 Authority Key Identifier:
                keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:10:1a:9b:bf:9f:c0:7a:a6:d2:56:58:c5:76:c0:fc:95:02:
         15:0e:6d:27:71:51:be:93:68:8d:16:21:e2:af:4b:dc:00:49:
         ef:0f:9c:56:5b:a2:17:8f:fb:bc:6a:7c:bd:81:55:2a:b0:26:
         ca:2d:dd:7f:7f:ed:11:c1:f2:83:92:46:4a:f0:5b:21:e6:3b:
         26:55:f3:04:12:53:96:a6:1f:11:a9:64:d4:35:d8:b0:75:e5:
         66:55:e3:de:39:c2:73:8e:d6:1a:31:e9:59:6e:98:19:95:6b:
         45:f8:40:2b:69:e8:e8:b0:e2:bd:78:6a:2b:37:84:19:20:39:
         a6:0f:22:54:5b:c0:09:89:f6:34:29:4d:3f:4f:59:54:d2:70:
         a7:85:2d:93:de:9f:fd:53:3c:cb:0c:09:a2:3e:12:f8:22:f4:
         1a:a7:29:e4:cb:73:02:9f:9c:1c:ab:db:79:f2:c3:3d:30:b8:
         1c:c9:06:3b:20:b5:1c:39:2e:cb:5a:da:af:35:cc:f9:67:1c:
         d5:cc:ad:bd:05:4c:6a:dd:ba:c5:8d:f1:3e:ce:d6:9a:e2:cf:
         2a:a7:74:af:99:22:06:47:57:ad:cb:33:bc:93:32:f2:7e:0a:
         2c:3d:1d:2a:81:f1:16:d2:35:6e:71:fe:d5:9b:f2:24:93:87:
         b0:76:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:50:33 2024 by rpki-client on console-fra.rpki-client.org