Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File:                     4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier:          P/sExvWqgGRHe0ARRfZLIY+wArdAd/ssEFf1CjFYhW8=
Subject key identifier:   8F:00:30:CA:88:D3:D3:CC:59:01:38:96:81:5C:51:F3:DC:21:6B:4D
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer:       /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial:       018F392E601A69FCCC01A81F8544B3E5276B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number:          1152
Signing time:             Thu 02 May 2024 12:01:31 +0000
Manifest this update:     Thu 02 May 2024 12:01:31 +0000
Manifest next update:     Fri 03 May 2024 12:01:31 +0000
Files and hashes:         1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: s5RdsFaV7S+ZixR7UGnTIJ/wAbjHbbv+GgxWysijzp8=)
                          2: YgQ89rkl9jvV6rLw-Z3NCQCItp0.roa (hash: St5+oKmDInc2kI6N55PGDT+Ery6915EesQ4gsgyIy54=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:2e:60:1a:69:fc:cc:01:a8:1f:85:44:b3:e5:27:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
        Validity
            Not Before: May  2 12:01:31 2024 GMT
            Not After : May  3 12:01:31 2024 GMT
        Subject: CN=8f0030ca88d3d3cc59013896815c51f3dc216b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:25:48:3c:ff:a8:ee:a2:7f:4a:f6:7c:30:
                    c6:18:3c:1b:9c:37:9f:9c:11:46:a6:07:83:f2:03:
                    fe:fa:29:59:17:48:61:93:18:45:88:00:cc:d3:b1:
                    99:b5:98:3e:87:73:25:7f:e2:42:f5:4b:ca:49:7e:
                    25:cf:fe:fb:61:75:43:fc:24:42:98:d5:04:5d:04:
                    95:7e:d8:78:8b:95:5c:69:09:8b:69:b6:7f:78:ed:
                    81:4a:d0:f7:c8:a0:14:8b:2f:10:fd:27:0d:94:c4:
                    3c:35:1e:63:ab:50:25:85:39:c1:0b:18:fa:91:cb:
                    f8:58:0a:bf:94:4b:14:98:64:bf:51:37:d2:ea:22:
                    c4:4f:83:25:ff:8f:3b:2d:c4:6b:3e:62:86:86:b3:
                    6c:8c:b1:b9:f2:ce:45:dd:e4:a7:f8:77:1f:e2:ca:
                    bd:c5:9a:df:3a:23:59:08:89:05:de:22:4f:21:fb:
                    82:ab:f1:67:61:35:ac:8a:77:1e:8f:b5:0e:56:ca:
                    da:fe:26:53:2a:61:d8:64:92:07:f5:32:d8:c8:62:
                    b4:c3:1a:d9:68:ec:4c:66:61:5a:db:d8:98:e3:fb:
                    8c:05:ab:27:44:b0:4a:84:80:6a:03:b8:ae:36:c1:
                    79:53:c7:17:a2:2b:ac:70:0a:c5:39:07:b3:b3:29:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:30:CA:88:D3:D3:CC:59:01:38:96:81:5C:51:F3:DC:21:6B:4D
            X509v3 Authority Key Identifier:
                keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:89:70:8b:1b:a0:86:c3:a4:c2:26:e9:ee:93:cc:1d:d8:9d:
         be:0e:8b:73:06:c3:ae:b0:33:89:bc:53:f2:ef:07:18:10:8a:
         0a:39:58:02:ac:c0:71:28:4c:fa:1e:1a:6c:37:cd:f0:e5:b8:
         6a:59:76:9a:98:1c:40:9b:09:bb:bc:bd:ba:9a:62:38:f7:12:
         23:4e:cf:73:62:ff:08:24:ee:85:76:c1:a0:d2:41:8d:21:ab:
         58:e3:d6:01:52:0c:4b:d6:cd:37:86:a0:67:75:d7:5c:48:b2:
         bc:5d:83:f1:ba:24:b6:0d:44:13:1c:44:03:38:6f:20:14:0c:
         2d:a8:cb:96:e3:ea:45:06:1a:ee:96:a4:88:bd:91:aa:18:db:
         74:e8:71:6f:d9:c1:97:4c:57:aa:d8:46:ac:10:ea:a6:d6:6a:
         00:5f:14:86:28:63:3e:cd:65:31:eb:e1:05:00:cb:c3:68:75:
         8f:8e:e5:a6:b4:36:e3:70:24:53:ac:02:93:a8:de:47:65:d3:
         ea:08:e9:39:2c:70:1a:87:f3:fd:ec:75:b4:d4:da:a7:fe:31:
         39:28:2a:ce:ff:ef:12:84:9b:66:48:7c:cb:ee:c4:6b:bf:6a:
         e3:f5:9e:c7:e2:ac:83:24:26:c6:c2:6a:7f:da:5a:e3:98:58:
         2f:b7:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:20:06 2024 by rpki-client on console-fra.rpki-client.org