Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File:                     ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier:          3XQmfh3kc5K352uo6Ydmg33iwOIhde4lfxrQD9FYvuc=
Subject key identifier:   31:93:04:15:D6:85:C0:BD:61:90:45:7A:62:48:52:E6:F3:F4:68:8F
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer:       /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial:       018F42D65A383A22E023A934339847796F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number:          1157
Signing time:             Sat 04 May 2024 09:01:35 +0000
Manifest this update:     Sat 04 May 2024 09:01:35 +0000
Manifest next update:     Sun 05 May 2024 09:01:35 +0000
Files and hashes:         1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: pKMFYR8u6tEEe0+qj9Km42VzhdFIznS06uHE6WHvf7k=)
                          2: OxRvAqtvpYB92785RREIKA4HsQI.roa (hash: 8Zp7Qu4ZTGEtBAdmpRtAWc/j63bqXDO6Hdvr+3eEx1I=)
                          3: VQjQkTkLXx2PM7AXiDEtCRX7BD4.roa (hash: JEN4BR7aSsYhB3PsaV5Lgj3YGaN/BXoWBAWcYvNGUik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 09:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:d6:5a:38:3a:22:e0:23:a9:34:33:98:47:79:6f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
        Validity
            Not Before: May  4 09:01:35 2024 GMT
            Not After : May  5 09:01:35 2024 GMT
        Subject: CN=31930415d685c0bd6190457a624852e6f3f4688f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:e4:fc:0d:55:19:d9:2e:71:bf:e0:ab:95:
                    8f:a1:ca:ac:48:ee:cf:de:ba:23:a5:f3:8a:47:c2:
                    31:1b:08:e0:9e:0b:de:79:ee:af:6c:3c:4a:1f:49:
                    ef:81:3e:19:4c:a1:2f:81:9b:fb:45:24:55:e2:94:
                    32:1b:2c:0d:19:d7:f0:17:0b:1f:1f:5e:4c:b3:46:
                    3a:c0:92:cf:ef:23:b2:ee:73:1a:83:30:a8:87:1f:
                    06:cb:cb:c5:18:1e:ba:92:d1:95:b4:4b:9b:5e:93:
                    6e:6b:e8:8f:a6:db:8a:db:75:5e:0f:e5:fc:3d:1c:
                    49:75:7d:18:2c:45:32:5a:02:31:12:f4:dc:71:12:
                    33:6e:b2:f5:01:78:04:83:ba:01:e5:9f:f9:cf:a1:
                    46:16:5e:f5:0e:aa:7a:ca:69:8b:4d:b0:62:09:b8:
                    e0:18:05:7e:6e:06:ab:35:c0:ae:15:c9:03:d5:cb:
                    bb:20:24:19:63:4d:06:fb:a4:55:74:47:aa:1a:94:
                    80:06:ed:f0:53:11:1c:7e:64:bf:1b:fe:4a:0d:85:
                    5a:0d:a6:ae:a3:75:98:cd:d7:52:38:6d:55:7a:b1:
                    79:b5:22:f2:31:da:67:1d:9b:ee:86:f7:03:e0:01:
                    86:48:97:97:db:b5:16:d3:d5:0a:ff:96:38:4d:0c:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:93:04:15:D6:85:C0:BD:61:90:45:7A:62:48:52:E6:F3:F4:68:8F
            X509v3 Authority Key Identifier:
                keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:16:7f:86:7f:c1:71:f1:4f:d0:ae:b0:5e:e8:93:97:ea:8b:
         d6:1f:e8:68:b0:9d:02:59:dc:c6:32:c1:f6:95:54:72:60:bf:
         58:60:dc:78:1c:0e:b8:bb:a5:3c:d1:69:0d:89:5b:8b:2a:a6:
         e1:12:3d:75:ce:c1:d6:6b:9b:a8:c9:49:dc:e5:e4:23:e6:2c:
         9a:93:30:90:ab:f0:b5:12:6d:32:7c:57:aa:85:49:c0:1d:ff:
         11:3d:ec:6e:7f:3f:77:9e:97:e4:3a:1b:fc:30:7f:c6:0d:85:
         e8:1c:3d:85:66:81:fc:db:f6:83:8d:d4:8f:da:5e:e1:35:f3:
         b5:4f:68:0c:dd:ea:88:48:fb:29:cd:24:6a:ba:20:ef:fb:e6:
         d8:6d:10:9a:16:f2:f6:7f:01:9a:04:05:37:12:2d:5e:a7:93:
         b2:34:71:47:8b:10:f8:93:e5:2b:b1:43:f6:3e:d1:f6:50:d9:
         ff:aa:5f:f6:ee:81:79:3a:b2:0a:ae:11:80:f8:3a:5e:aa:77:
         ac:58:02:7c:dc:d1:90:70:66:11:f6:d5:a7:03:95:7a:96:27:
         9e:5a:6b:f4:10:99:01:1f:53:37:31:96:01:ea:c1:06:51:30:
         80:f3:ae:1a:b1:79:f0:a1:4a:9f:91:8c:26:2a:fe:0d:98:1e:
         5a:3e:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:31:01 2024 by rpki-client on console-fra.rpki-client.org