Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
File:                     4GMUdXVI8HToT68_y7e4LYLe8-U.mft (raw, json)
Hash identifier:          qFwvbO+U8TzwvwzxwZKcgvR2NAQ7W9u0F5mEvM/G8s0=
Subject key identifier:   DF:B4:6C:0A:71:93:42:F5:B4:0D:92:8A:FE:7B:49:52:3C:CE:B1:A6
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Certificate issuer:       /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial:       018F1F01B2E340642455E98977F93B558502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
Manifest number:          1145
Signing time:             Sat 27 Apr 2024 10:02:35 +0000
Manifest this update:     Sat 27 Apr 2024 10:02:35 +0000
Manifest next update:     Sun 28 Apr 2024 10:02:35 +0000
Files and hashes:         1: 4GMUdXVI8HToT68_y7e4LYLe8-U.crl (hash: F8LGNyngX/4OENUeBLl2zhV06uO6gNLvdaESRNMQe9U=)
                          2: g0KrjuBVKQP76QP82FIaAG5OXWQ.roa (hash: 31XXneOF1Y3dvnPAQ5XHQzbpOM/hZPCLbFNShiqjuTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:01:b2:e3:40:64:24:55:e9:89:77:f9:3b:55:85:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
        Validity
            Not Before: Apr 27 10:02:35 2024 GMT
            Not After : Apr 28 10:02:35 2024 GMT
        Subject: CN=dfb46c0a719342f5b40d928afe7b49523cceb1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:29:36:20:f3:ca:72:52:d0:77:3c:b9:3b:
                    a8:53:10:63:4e:db:bd:00:32:d1:46:4b:95:18:d4:
                    da:a3:87:57:8c:52:d2:90:4d:cc:f5:18:92:fb:38:
                    e7:0f:51:08:01:a9:c6:82:11:0c:eb:12:0f:56:4a:
                    a5:b4:02:34:1f:04:fc:77:49:02:c1:8c:78:aa:14:
                    b6:02:ea:93:0b:5b:c1:bf:40:32:5a:3e:17:ae:d7:
                    22:40:df:88:c6:31:7b:af:07:80:82:ba:d5:9b:2b:
                    5c:4d:c6:33:73:8f:d8:d1:18:9c:2a:12:69:dd:87:
                    07:8e:3e:67:6f:02:59:b2:d3:2f:0b:18:33:58:df:
                    c8:ee:41:25:7f:a8:11:22:fe:1d:d7:8f:d7:b4:d9:
                    55:44:67:ab:1d:3b:60:80:24:06:45:c1:32:6a:53:
                    70:a7:19:4a:5b:40:1a:ba:70:70:ed:7f:b4:f9:ab:
                    88:7b:66:5d:f7:5a:c1:e4:09:06:ff:3d:7b:12:40:
                    c4:8e:59:c4:25:fb:1c:0b:90:e7:a6:4a:3b:9f:8c:
                    0d:7f:18:b4:2e:e7:62:7b:ed:16:3b:ed:af:71:f7:
                    6a:14:1c:76:7b:dd:e9:d0:a9:b2:d8:10:71:47:2f:
                    2e:3d:6f:80:7b:63:fc:4c:e9:43:d4:de:d3:c7:03:
                    01:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B4:6C:0A:71:93:42:F5:B4:0D:92:8A:FE:7B:49:52:3C:CE:B1:A6
            X509v3 Authority Key Identifier:
                keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:69:89:27:c0:54:28:87:a5:f3:75:11:7d:3c:d1:05:41:
         87:5a:0f:fe:34:86:a3:72:7c:ed:1e:b3:83:e6:35:7c:a3:b9:
         84:23:d5:87:05:65:52:fd:6c:86:5d:34:99:28:62:a2:ba:76:
         4f:8b:12:54:f4:58:b1:76:d6:a7:89:77:e3:22:82:13:e4:ab:
         b4:20:3b:2e:63:80:9f:cc:17:e3:99:5e:07:44:f0:c5:02:00:
         80:f2:d9:8e:e8:5b:62:20:66:f8:b2:67:12:2d:0d:1c:2c:4f:
         28:77:ed:7b:24:ae:db:67:3b:03:df:4d:b9:3e:a2:c9:5f:75:
         c9:f4:df:67:00:bd:aa:24:d3:a3:36:83:e5:5a:ba:7a:14:43:
         67:b6:de:8e:0a:ab:ea:20:33:d8:f0:da:d8:53:12:e4:02:8a:
         a2:d8:7a:17:50:2b:16:22:ca:43:cd:41:f9:10:b0:0e:2c:d3:
         fb:4f:59:25:0a:88:dc:a7:c1:b3:69:d6:87:b4:fe:a5:fb:8c:
         94:1b:cd:3e:80:1c:db:a0:18:ac:f9:11:c8:bf:c3:88:2a:31:
         80:6a:fd:48:e5:10:5d:71:18:3d:52:9b:9d:d6:87:43:09:ce:
         75:c9:f0:0f:6e:5a:65:f3:9d:36:e5:89:1b:18:eb:59:f0:47:
         bd:2d:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:08:57 2024 by rpki-client on console-ams.rpki-client.org