Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File:                     4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier:          +Df6eq7CCHNdM2LXZW/wBw/Q4ZZiaBxweuX6Z9BUeVI=
Subject key identifier:   B9:A1:20:16:D4:CB:CC:D2:60:F4:22:23:23:80:05:FE:E5:7B:1D:6A
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer:       /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial:       018F362E473B7C2CEECAD48D5B66FF04A3D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number:          114F
Signing time:             Wed 01 May 2024 22:02:33 +0000
Manifest this update:     Wed 01 May 2024 22:02:33 +0000
Manifest next update:     Thu 02 May 2024 22:02:33 +0000
Files and hashes:         1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: /XbowkWfjiJcgKayYCd6OG0WwW8lHO5oFxaGKEfw6U0=)
                          2: gh7vYTUG1hOvMTKmmRGw-tGeYFg.roa (hash: sR6uyKixJoZpYifkcIdbmxtDNCxj0cgVxTr7fQC6rZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:47:3b:7c:2c:ee:ca:d4:8d:5b:66:ff:04:a3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
        Validity
            Not Before: May  1 22:02:33 2024 GMT
            Not After : May  2 22:02:33 2024 GMT
        Subject: CN=b9a12016d4cbccd260f42223238005fee57b1d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:2c:14:cc:7b:92:8b:fb:98:c4:b8:db:0a:
                    eb:2b:28:43:69:97:f9:c0:a5:c9:08:7b:6a:7e:6d:
                    de:58:ab:af:4e:fc:bf:41:68:3d:e5:ba:65:e7:1d:
                    10:16:e2:93:0f:17:6e:9c:45:3a:f3:03:c3:9a:ea:
                    7d:73:1c:1d:f2:b8:2a:68:a7:7d:0a:65:59:b0:66:
                    e4:cc:c6:2e:9c:ff:25:57:da:d0:a5:13:89:70:86:
                    dc:fe:05:a6:2f:c7:e4:68:93:31:9e:ad:bf:12:ca:
                    82:6e:9d:69:db:ff:9b:b0:3c:d5:00:eb:89:5c:a0:
                    11:e3:f9:07:c4:15:17:d0:06:7a:c7:94:e4:56:2f:
                    04:7d:2e:59:a5:64:da:83:3c:a6:1e:cd:30:74:a7:
                    58:98:02:72:a0:a4:3b:33:23:44:b0:bc:18:0f:8c:
                    ef:b6:f8:90:2d:79:b7:b2:c4:b3:65:c0:70:b2:b2:
                    18:07:13:8b:cc:fc:4a:ce:a3:fc:30:70:a1:c9:b8:
                    74:b6:6c:a9:2b:d4:ed:33:ab:b9:dc:f7:18:94:27:
                    59:02:43:ea:f9:6c:4a:80:68:73:2c:65:06:f1:5a:
                    02:b7:10:85:ad:e6:79:fd:e8:10:cd:60:3b:23:bd:
                    7f:22:74:62:9f:ab:14:93:34:4d:26:cd:54:e1:7a:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A1:20:16:D4:CB:CC:D2:60:F4:22:23:23:80:05:FE:E5:7B:1D:6A
            X509v3 Authority Key Identifier:
                keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:de:0e:cc:18:da:ce:d1:81:2c:5f:26:e4:ba:2d:e6:cb:b4:
         46:52:73:ab:b4:0a:4f:e8:85:de:f6:cc:3c:89:e1:5c:17:4f:
         3e:c2:69:f9:eb:ba:62:d3:ed:59:8a:35:75:24:fc:b5:89:d6:
         cd:f4:58:e5:e6:76:e5:81:84:1e:76:92:45:dd:44:04:97:83:
         0b:69:c7:b6:14:61:9b:39:e8:29:4d:dd:6c:82:e1:e0:eb:b8:
         76:87:12:a7:53:ae:62:bc:63:c7:07:93:00:7e:77:b1:69:b8:
         91:96:e8:e4:2c:eb:d5:dd:21:f7:a9:27:7b:6d:45:4d:3d:ed:
         21:6e:37:b9:f7:59:a5:90:54:6c:f0:82:d8:22:cb:37:cd:ed:
         37:8a:78:d8:f3:bc:ca:c2:c4:88:54:23:34:bc:26:ec:d7:bf:
         1c:ef:f2:3d:e2:91:4b:8d:de:c0:0a:7f:6d:16:b5:fc:d8:6c:
         cc:76:d7:40:22:20:1c:d0:70:82:22:b6:10:a6:0f:76:09:53:
         01:b8:d7:4a:27:76:38:59:54:0b:18:66:b5:b3:de:71:87:6d:
         c6:eb:8f:52:54:c5:78:fd:e0:6f:20:a5:8c:68:20:52:bb:07:
         42:68:40:cf:a8:df:2e:bf:09:a9:35:4b:c1:28:61:87:bd:68:
         30:f8:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:44:58 2024 by rpki-client on console-fra.rpki-client.org