Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File:                     4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier:          fFhGDziUY9G+pLqqR0Zc7Kj7ua1qIexR1ZH9DNwHIhg=
Subject key identifier:   83:F1:4E:21:8D:E9:11:02:49:8E:ED:F5:A3:B7:03:54:C4:AA:FE:E5
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer:       /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial:       018F3BF80D3FEE17E92D0ECCCB92839EF53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number:          0862
Signing time:             Fri 03 May 2024 01:01:03 +0000
Manifest this update:     Fri 03 May 2024 01:01:03 +0000
Manifest next update:     Sat 04 May 2024 01:01:03 +0000
Files and hashes:         1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: gpf/VcW9g5PZFIOXIe7C6uC4k/NE8BS3MoRSn3CvRZ4=)
                          2: IZxZA3pm5OrdkdL1Ys6bqtWPoEo.roa (hash: foPYY06M4SInhKrJmFVkPoAH3p1uu5X7njpsjhS8f1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:0d:3f:ee:17:e9:2d:0e:cc:cb:92:83:9e:f5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
        Validity
            Not Before: May  3 01:01:03 2024 GMT
            Not After : May  4 01:01:03 2024 GMT
        Subject: CN=83f14e218de91102498eedf5a3b70354c4aafee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:fa:6a:db:79:e6:9c:e4:2d:77:68:6a:55:
                    e0:c7:20:6b:5a:72:4d:ec:97:19:ce:fc:17:96:0f:
                    16:e8:c2:37:7a:01:26:bd:bb:4f:96:61:6f:00:08:
                    b7:55:0a:c3:2e:66:2e:4d:8d:67:e7:4f:e1:ad:a7:
                    08:f9:26:7c:1d:2e:98:e1:a0:fc:f5:39:58:1c:90:
                    ed:59:f3:a6:e7:ae:6d:85:7b:7e:42:3e:93:28:6c:
                    8e:24:f3:d5:fa:61:be:22:71:24:62:38:f2:35:1d:
                    fa:6b:91:86:e0:a7:be:34:49:6f:52:e2:4f:99:ea:
                    13:0b:f0:c3:4b:63:91:ec:66:31:78:ab:c3:80:37:
                    97:5a:d3:41:08:59:05:08:42:6a:40:eb:50:21:b8:
                    ee:7f:f1:17:a3:3a:9f:49:91:62:ea:9b:3f:aa:a1:
                    89:f7:be:e5:0d:a5:5c:86:d3:f5:72:a2:bb:1e:9a:
                    31:3d:ea:a0:50:fe:6d:cc:c3:7e:c4:dd:1c:00:87:
                    b5:ab:a5:64:0f:6c:71:07:fa:9d:8b:03:24:b5:d8:
                    50:5e:7b:fe:bf:77:bc:07:df:be:3e:b7:34:e2:92:
                    c0:84:21:38:91:c2:11:82:87:03:ce:26:46:e7:73:
                    e7:9a:dc:06:db:72:14:cf:1f:f0:78:14:11:b5:4f:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F1:4E:21:8D:E9:11:02:49:8E:ED:F5:A3:B7:03:54:C4:AA:FE:E5
            X509v3 Authority Key Identifier:
                keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:6b:d9:41:f4:5e:51:55:ba:b3:24:12:99:55:e5:62:5b:
         8a:cd:a0:6f:7a:0c:5a:ca:25:b2:70:44:dd:69:a5:83:ec:54:
         9a:85:5b:4e:04:8c:db:8b:3a:44:d1:43:70:f5:a2:a9:10:fd:
         25:31:77:0b:c8:b9:ad:35:a5:12:c4:b3:67:7b:70:1c:3e:0f:
         ac:8f:50:89:94:0f:52:4f:a9:1a:bb:c9:97:e7:6f:6d:67:22:
         47:57:e1:fd:f0:d3:b3:5c:b0:35:9a:a1:52:fa:11:00:09:97:
         b0:b0:ef:d6:b8:ed:8e:32:94:e0:20:5f:b2:c4:38:28:77:e3:
         46:9d:16:e8:df:ca:23:56:5d:c6:cf:f0:e2:78:b4:25:eb:8b:
         43:13:81:cb:06:24:3f:48:80:3f:ed:86:a3:b4:3d:d3:bc:21:
         ce:1a:cd:47:83:a2:59:b9:0b:5d:3f:1d:cd:91:40:b0:47:8c:
         de:00:13:b1:05:84:48:30:29:43:3c:e5:37:8d:6e:aa:1f:9a:
         06:e8:97:7f:a4:b0:21:0d:a7:cb:04:eb:18:1b:5c:d5:24:c9:
         69:4a:02:04:e9:20:b3:5b:a2:92:41:ac:79:d3:2e:7f:8c:9a:
         bb:60:db:53:e8:84:fe:61:25:e4:dd:73:15:47:20:6a:76:fd:
         02:db:1e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:14:55 2024 by rpki-client on console-ams.rpki-client.org