Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.mft
File:                     4N9GqDgKhBImdN1gz3fsCSIEi70.mft (raw, json)
Hash identifier:          f1wcV0IOx2LNb5lWz42l2CPc1CFZBAgvIuW0WXDZXO0=
Subject key identifier:   B7:21:B5:C8:DE:88:6D:E3:9E:A5:09:39:B5:B1:69:40:C2:77:98:F6
Authority key identifier: E0:DF:46:A8:38:0A:84:12:26:74:DD:60:CF:77:EC:09:22:04:8B:BD
Certificate issuer:       /CN=e0df46a8380a84122674dd60cf77ec0922048bbd
Certificate serial:       018F8748E100F0CB9344789DA39689E0C7A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N9GqDgKhBImdN1gz3fsCSIEi70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.mft
Manifest number:          4F
Signing time:             Fri 17 May 2024 16:00:51 +0000
Manifest this update:     Fri 17 May 2024 16:00:51 +0000
Manifest next update:     Sat 18 May 2024 16:00:51 +0000
Files and hashes:         1: 4N9GqDgKhBImdN1gz3fsCSIEi70.crl (hash: 2kFVrIIgKMpQUAZHc6XgJ22o0IoEKOTbVFcocGxb1oI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N9GqDgKhBImdN1gz3fsCSIEi70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e1:00:f0:cb:93:44:78:9d:a3:96:89:e0:c7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0df46a8380a84122674dd60cf77ec0922048bbd
        Validity
            Not Before: May 17 16:00:51 2024 GMT
            Not After : May 18 16:00:51 2024 GMT
        Subject: CN=b721b5c8de886de39ea50939b5b16940c27798f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:27:e2:2b:81:e8:c6:aa:0b:1a:38:41:ee:
                    db:e3:32:0f:dd:aa:30:00:96:45:bd:08:75:fa:bc:
                    3a:b4:4a:f2:40:80:83:d9:69:28:93:18:9c:aa:c7:
                    24:fe:7c:ca:3f:0e:63:98:56:ec:9d:92:cb:57:dd:
                    13:ec:ef:54:7f:83:93:33:23:bf:59:a2:67:50:20:
                    06:98:95:f9:b9:aa:67:1b:b6:b5:44:73:f9:86:3e:
                    af:38:92:67:59:30:fa:a1:c0:11:7e:92:6d:4e:8c:
                    2f:7f:15:80:01:ac:a4:7b:f8:8f:f0:f8:dd:a9:b6:
                    5c:c9:9e:1e:f3:84:22:58:d7:9f:d4:39:3f:e7:6f:
                    72:20:9f:da:4f:c7:4d:05:5a:8c:43:b4:e6:a1:65:
                    1f:39:f4:2d:e2:eb:ac:12:ab:2f:ad:c2:e8:60:6c:
                    f2:7c:22:2f:4b:96:80:80:40:61:ce:aa:d7:43:d8:
                    ec:bd:0e:5a:29:8a:08:d3:32:68:65:9b:2b:99:00:
                    b8:44:22:f2:26:a3:57:8f:fc:cf:4f:08:7e:97:ad:
                    ea:89:49:5b:bc:d4:4a:0d:ac:6c:d5:3d:1f:d9:10:
                    da:c7:35:7e:8e:ca:2e:6c:c6:0a:a3:20:c1:0b:28:
                    c0:d8:70:d1:56:1a:7c:33:8b:5c:99:4b:dc:cc:9a:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:21:B5:C8:DE:88:6D:E3:9E:A5:09:39:B5:B1:69:40:C2:77:98:F6
            X509v3 Authority Key Identifier:
                keyid:E0:DF:46:A8:38:0A:84:12:26:74:DD:60:CF:77:EC:09:22:04:8B:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N9GqDgKhBImdN1gz3fsCSIEi70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:50:c3:09:04:d3:9b:49:1f:5a:ea:b2:1a:b8:61:e2:2d:
         7f:16:d9:e4:15:5e:1e:d6:23:03:30:7b:d7:ba:03:d2:7d:53:
         ff:45:23:3b:70:04:ba:ba:f6:ac:57:7d:88:3c:86:72:25:46:
         71:18:8c:d9:de:f0:7d:d9:d9:72:dc:8b:5c:fc:1f:05:50:78:
         01:be:b9:da:3c:67:b8:87:8b:48:ff:ab:21:ca:a0:ca:1a:df:
         98:34:c5:03:19:0a:53:74:f7:4b:43:04:8d:5e:71:bd:8f:00:
         69:1e:2a:e7:c0:01:4e:73:f6:03:dc:a2:2a:34:ec:83:91:33:
         6c:66:71:41:52:26:4e:c6:a5:c7:2a:62:e6:04:5a:8d:4d:01:
         09:e2:c3:75:4b:30:65:e8:f4:06:3b:80:15:a5:c3:d4:89:a4:
         80:33:9c:e3:e4:97:18:1f:39:6b:1e:2e:7e:ea:76:65:39:75:
         3f:2a:07:cd:96:7c:ff:ba:44:dc:d9:fc:6a:cb:20:39:c2:2e:
         b9:cb:b7:32:a1:65:f4:3e:81:ec:c7:34:a9:75:49:2f:e1:99:
         ac:e0:96:5c:06:b5:bf:0e:7f:f1:79:43:1d:0e:86:a9:66:10:
         2e:8a:d3:50:f3:d6:a6:71:82:90:c9:0b:e5:e6:e9:d6:86:60:
         54:bc:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:06:08 2024 by rpki-client on console-fra.rpki-client.org