Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File:                     E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier:          4h/cRv8XdEvpeq/85kTEGt1ztH8S+/Qhg/EPRxiybwU=
Subject key identifier:   4B:BD:23:EB:7B:C9:9D:E5:99:CC:25:5A:34:9D:C4:0C:48:0D:52:91
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer:       /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial:       018F2049C92EE1EC03148698D57FE8434C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number:          113F
Signing time:             Sat 27 Apr 2024 16:00:57 +0000
Manifest this update:     Sat 27 Apr 2024 16:00:57 +0000
Manifest next update:     Sun 28 Apr 2024 16:00:57 +0000
Files and hashes:         1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: 9ydl9UIusSB9noT2LjNRdvqTxBlrafqdrUxLy3I9S2Y=)
                          2: MrMrnmFfd6AYjieruSsSVwZ1gsU.roa (hash: JVL/pAyF32oJdvawFzIH9Wm22jiYzpU2AXoggB3rOnU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:49:c9:2e:e1:ec:03:14:86:98:d5:7f:e8:43:4c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
        Validity
            Not Before: Apr 27 16:00:57 2024 GMT
            Not After : Apr 28 16:00:57 2024 GMT
        Subject: CN=4bbd23eb7bc99de599cc255a349dc40c480d5291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:b7:3d:21:20:08:5a:f6:f8:ce:f0:76:a5:
                    e2:55:af:98:99:7d:4e:51:65:00:67:bd:0c:b9:d0:
                    db:fb:a8:cf:f5:6e:07:ad:36:0f:ba:81:bc:be:93:
                    86:2e:e0:de:5e:ea:c1:f6:20:a7:57:5c:af:bf:87:
                    f7:16:2f:ad:04:d2:6e:cf:95:6e:e1:34:9f:6d:8e:
                    a2:b7:f6:71:12:1d:29:cd:ff:47:08:4a:bf:dc:8f:
                    9f:a1:e7:10:ea:eb:e8:ab:f2:34:0b:42:77:43:6a:
                    09:2e:f1:2e:3f:8a:6d:4f:11:d4:f8:1a:a3:86:8f:
                    a8:b2:02:f4:03:41:2f:e1:96:75:39:06:15:0d:72:
                    ee:36:0f:ce:0e:32:74:12:4e:1f:d8:e0:61:e0:6c:
                    65:dd:5a:92:fe:85:11:2c:cd:4c:09:67:dc:1c:4c:
                    e5:84:4f:b0:77:0a:d6:13:f6:63:6c:35:f1:bb:15:
                    08:03:c9:84:94:92:16:3b:ed:5d:4e:69:2a:a0:a9:
                    15:ff:8c:96:30:e3:8a:4a:d0:91:36:37:90:f9:b2:
                    de:48:7a:68:0c:41:19:4e:ab:fa:9d:ab:bf:0b:6b:
                    32:e1:cb:65:3d:d0:5d:0e:0a:0b:9f:4a:cc:ac:cf:
                    2b:ab:11:1b:2e:15:8e:d5:b0:c3:dc:27:55:35:90:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BD:23:EB:7B:C9:9D:E5:99:CC:25:5A:34:9D:C4:0C:48:0D:52:91
            X509v3 Authority Key Identifier:
                keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:35:b5:45:fd:7a:2e:f8:57:e1:a6:0b:9e:32:76:8d:e5:21:
         16:60:1f:08:34:41:c3:ff:63:af:42:a7:79:88:07:28:0e:36:
         ab:ee:48:e3:31:43:ef:fd:35:0a:86:3c:b0:df:89:a3:29:61:
         67:1c:5a:d5:35:1e:0a:45:a9:e0:7b:32:b8:b8:b0:2b:13:34:
         14:cd:0f:9f:d3:cc:7c:1c:c7:5d:b3:48:e5:09:3c:71:1f:d0:
         50:02:01:40:14:56:c4:ed:85:d7:76:1c:cd:ba:cd:08:4c:2f:
         8f:12:87:73:27:45:9e:e4:d8:9e:e2:b1:a8:dd:f3:16:ab:d0:
         14:9d:c0:e8:da:28:f7:28:ba:9b:6b:0a:7c:6d:12:9a:75:35:
         5f:5b:ba:21:26:19:76:d9:68:2f:a4:64:93:0f:a4:6c:22:b8:
         f8:2c:0b:e7:85:70:bb:a3:a3:0e:e4:6c:60:3b:8e:f8:84:fe:
         4a:70:dd:05:35:3f:97:bb:8b:f5:fb:d7:dc:a5:80:d8:da:f5:
         b5:cb:90:64:1d:46:95:29:c7:b0:d3:94:85:26:06:e6:00:9b:
         98:73:15:51:92:d5:46:74:59:42:84:d5:14:a2:84:25:f2:66:
         1f:4b:f2:fd:ee:03:44:29:5d:b2:21:ad:b7:62:cf:59:fc:5e:
         09:c9:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:56:53 2024 by rpki-client on console-ams.rpki-client.org