Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File:                     r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier:          4Lm4BlDDUFi33bp6AGCZv/s5yielOC5VvMI8vmBG3E8=
Subject key identifier:   AA:F1:BE:5C:7A:FB:9C:07:28:71:B9:19:A7:5E:93:1F:89:4F:E4:CA
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer:       /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial:       018F874B584148C0AB1A9A549DC6D9182368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number:          05EE
Signing time:             Fri 17 May 2024 16:03:32 +0000
Manifest this update:     Fri 17 May 2024 16:03:32 +0000
Manifest next update:     Sat 18 May 2024 16:03:32 +0000
Files and hashes:         1: SRe5U6xfMvljIQdriCAN0I5HsZw.roa (hash: q4kBl9STjyY8/TkFWNKya+BNT+MH+oUHQTwAcWBuXWM=)
                          2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: BlBHj/Vxqk+QGGKxrnvMJExgHeCAczi8nwTYeY0KE04=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:58:41:48:c0:ab:1a:9a:54:9d:c6:d9:18:23:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
        Validity
            Not Before: May 17 16:03:32 2024 GMT
            Not After : May 18 16:03:32 2024 GMT
        Subject: CN=aaf1be5c7afb9c072871b919a75e931f894fe4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:29:96:bf:dc:45:5f:59:d7:62:c9:2d:2d:
                    27:e2:89:f4:7c:c9:a5:48:5f:71:c8:f4:de:15:2d:
                    f6:28:36:e0:68:e3:b2:db:15:01:7c:01:a8:a0:db:
                    8b:8a:49:1e:62:98:d5:e7:25:46:42:e3:4e:9e:be:
                    f9:d8:14:dc:41:89:97:85:f0:53:95:2d:82:93:61:
                    75:df:af:df:a9:ed:02:e7:7a:8b:f6:11:d0:6e:08:
                    0e:f9:07:af:2a:f8:8a:2a:3d:65:d6:30:2b:7b:52:
                    de:34:fb:0a:06:10:d9:ba:f9:c6:19:d3:74:6d:a2:
                    ac:69:57:30:e0:d9:9b:43:2e:70:90:dc:14:d7:dc:
                    b0:90:63:cc:40:70:d2:3b:83:5b:f2:2c:b4:9a:bb:
                    37:83:02:b8:d7:6a:09:53:01:b1:f9:a0:68:bd:f7:
                    fe:16:c1:85:9d:da:e4:0d:c2:0d:8f:ca:96:1e:09:
                    37:2d:69:64:33:cf:bc:c1:b3:b3:b6:a3:4b:22:6d:
                    dc:e7:d4:59:e0:a9:02:55:05:5d:72:36:48:ad:fe:
                    2a:3a:07:31:ee:49:bb:dc:b3:c6:43:73:62:83:10:
                    ed:48:9c:ac:fe:88:b5:cd:dd:61:09:88:07:39:3e:
                    ad:14:74:2b:23:84:ba:0f:cb:c8:50:ee:29:6b:bf:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F1:BE:5C:7A:FB:9C:07:28:71:B9:19:A7:5E:93:1F:89:4F:E4:CA
            X509v3 Authority Key Identifier:
                keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:db:80:3d:bc:20:99:3a:de:09:77:b1:db:30:25:96:ab:
         c2:de:ae:57:de:03:22:65:ee:85:3f:fe:5b:c8:b0:dd:c6:5f:
         e4:41:37:04:c6:ad:ff:18:3d:03:9d:67:fa:57:6d:2d:bb:45:
         3a:14:08:a6:34:c7:ce:b0:99:2a:a2:05:f7:7e:b5:33:7e:28:
         30:6e:c7:22:4e:50:ff:36:da:a8:61:f2:a8:09:20:ec:6e:3c:
         ec:a7:30:24:4e:46:2f:aa:e3:d2:fa:08:84:cd:28:70:74:d6:
         e7:77:2f:fb:f3:4e:6d:02:99:01:9e:77:6b:6d:be:f4:d8:6f:
         f2:11:0d:8b:f9:4e:7d:c3:48:dd:a6:03:12:0e:ae:83:90:7c:
         b3:28:75:1a:b3:70:c9:2d:48:4b:09:b4:af:87:9a:4f:38:37:
         77:e3:fa:cb:66:7e:bf:7b:5c:ca:fd:0b:0d:68:4c:1f:ce:e2:
         d8:72:0c:b8:3b:15:bf:93:f2:c3:36:09:ea:aa:20:d6:26:2e:
         d1:43:fd:16:d1:ac:55:b0:79:92:18:cb:92:0e:74:45:a2:18:
         75:ce:10:81:50:ac:db:48:0c:46:bd:8a:51:5e:48:74:4b:f9:
         8f:7e:e9:18:8b:e0:6b:63:b0:9a:7e:ec:1d:ba:a0:fc:bf:fb:
         6e:55:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:42 2024 by rpki-client on console-ams.rpki-client.org