Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File:                     4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier:          /MC/XLi0N0lSuXnEwM0jUehr8yn+/0nxuBrtwaVlSNE=
Subject key identifier:   97:3D:8F:9E:70:57:EC:C7:08:AD:3A:5C:4E:74:25:1C:7D:E0:47:1F
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer:       /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial:       018F5139A4958E24EFBA9605EA673346CF2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number:          08F4
Signing time:             Tue 07 May 2024 04:04:43 +0000
Manifest this update:     Tue 07 May 2024 04:04:43 +0000
Manifest next update:     Wed 08 May 2024 04:04:43 +0000
Files and hashes:         1: 32-qdCb4rRhilbjnHet2fMhBWGw.roa (hash: dXa97wPgzTjpUWXTYgEdhKS7xoJUe7N0dNw+vnFtWR8=)
                          2: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: xLek02I7p8SQhyEALktSlY1/oDV6qGnfliF5pKPyrIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:39:a4:95:8e:24:ef:ba:96:05:ea:67:33:46:cf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
        Validity
            Not Before: May  7 04:04:43 2024 GMT
            Not After : May  8 04:04:43 2024 GMT
        Subject: CN=973d8f9e7057ecc708ad3a5c4e74251c7de0471f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:56:b6:6b:fd:6f:e4:5d:08:88:38:a6:5a:
                    27:3d:59:31:21:e7:0a:c0:fa:12:c2:a8:43:11:b7:
                    55:08:70:2f:ed:f3:ec:b6:29:b0:92:4d:c7:95:8a:
                    66:1b:c7:73:fd:05:e9:8d:f5:66:5a:af:5a:d1:cd:
                    d7:ae:46:11:72:bc:f8:0f:51:18:4a:b2:1a:f7:dc:
                    ee:6a:94:10:e6:96:a1:27:f6:5e:95:c5:6d:a0:72:
                    24:d5:c2:79:62:3a:2e:29:04:2a:15:ee:3b:b6:33:
                    84:8c:35:a8:34:9b:f0:f3:46:4d:87:63:d9:92:3f:
                    46:0a:f0:bb:4f:78:94:7b:84:2b:e4:61:5a:b7:3c:
                    59:76:74:b1:38:f3:4d:53:1e:27:f9:e2:e8:38:92:
                    07:32:3c:66:f8:cf:51:ad:73:19:37:b6:73:a4:01:
                    ac:c6:ea:ac:57:07:bf:1e:87:e0:98:af:9f:61:e7:
                    e1:cc:6a:de:53:55:ba:fc:15:d0:d4:36:55:79:ed:
                    21:ce:da:c6:43:d9:96:47:3e:aa:df:86:50:9d:be:
                    b6:6b:ec:01:fc:ca:8f:37:de:36:68:74:6c:fd:3f:
                    a5:bd:bc:5c:57:b4:64:8c:ac:99:ae:3e:c9:0c:9a:
                    bf:2d:d0:1e:ac:bd:2d:a8:60:ae:17:f1:4e:36:14:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3D:8F:9E:70:57:EC:C7:08:AD:3A:5C:4E:74:25:1C:7D:E0:47:1F
            X509v3 Authority Key Identifier:
                keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:75:df:e3:36:c0:59:f0:f6:55:ff:ce:67:c2:00:a6:65:cd:
         17:45:7a:90:ea:ac:9e:29:95:05:2d:6b:f1:4f:d4:c2:cf:a8:
         d0:66:82:ca:8d:f8:76:60:5c:b5:8c:d4:da:15:58:00:2e:4b:
         d9:65:46:20:90:18:69:82:57:52:b9:60:ca:31:e4:5d:60:52:
         08:2e:d9:cc:92:90:87:5b:19:9f:22:81:d4:fb:a7:21:16:73:
         99:69:ef:bc:23:e1:de:75:3f:d7:3a:ac:f0:2c:6d:d9:cf:85:
         12:2c:a0:c9:70:bd:72:d7:9c:20:b4:a3:46:08:f6:b8:60:cc:
         66:82:b2:34:bf:56:f2:3a:9d:9a:af:e9:24:3e:99:16:63:ee:
         dd:76:db:1c:4c:78:b0:e7:c3:6a:b7:86:6b:b9:5c:03:99:67:
         66:46:d6:a8:e0:78:76:ab:7d:f4:c9:cf:90:72:65:a3:7e:bd:
         4b:86:c6:fa:95:b1:7c:a1:94:cb:4e:9e:df:f0:3f:21:3f:6e:
         5e:21:88:ce:85:91:b3:50:87:41:28:3b:0b:02:42:62:b3:59:
         7b:48:5d:46:e2:85:f1:1d:ec:bd:5a:28:97:29:47:1f:b6:41:
         6d:94:f5:33:fe:d2:6e:97:a5:42:72:2b:0b:ae:c0:2c:b6:1f:
         19:16:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:03:13 2024 by rpki-client on console-fra.rpki-client.org