Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          YUTza/DeTn4RufeV2NDOnenFu2/Yvl/3nS2a29P93ao=
Subject key identifier:   27:40:9B:F4:85:A8:17:04:22:92:CC:0D:FB:EC:E4:84:A9:B8:2F:76
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       018F41C436A8314B8A1A94F3D49B1D79EC3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          09DE
Signing time:             Sat 04 May 2024 04:02:09 +0000
Manifest this update:     Sat 04 May 2024 04:02:09 +0000
Manifest next update:     Sun 05 May 2024 04:02:09 +0000
Files and hashes:         1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: 6UsvRkmm1d3XNrPYI17zwS/s+3OUuv/sPTJcfA8TIDo=)
                          2: U2z0oCHvH_UMT4QneFHXpQ1Ogfw.roa (hash: 3qc5HI1mbTeYxFW2TiaDiZvLP51sSLKwzl5BLFSj5QM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:36:a8:31:4b:8a:1a:94:f3:d4:9b:1d:79:ec:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: May  4 04:02:09 2024 GMT
            Not After : May  5 04:02:09 2024 GMT
        Subject: CN=27409bf485a817042292cc0dfbece484a9b82f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:a6:0e:c0:38:90:c4:cf:54:39:3b:7e:23:
                    66:3f:60:01:ae:8f:c3:14:f4:e9:66:38:35:5f:52:
                    61:be:3b:b1:53:ae:7b:be:c6:e2:6b:6d:4c:70:b1:
                    1a:0a:2f:55:87:09:3e:9e:10:95:a8:b2:f0:68:63:
                    60:4c:44:07:3f:12:18:7d:42:d1:69:46:ce:ec:2a:
                    40:4b:df:ba:64:8d:34:c0:63:e8:e6:a9:18:8e:6d:
                    a4:58:8b:77:10:3c:47:80:54:82:1e:67:95:7d:45:
                    5b:12:47:ed:a8:55:d8:08:ea:66:26:c5:7f:b4:13:
                    64:2c:1b:22:cc:6b:28:56:a6:bb:7c:d4:ee:89:1c:
                    13:ea:e1:6d:84:b6:d5:3b:50:8d:7a:70:7d:66:5a:
                    f7:ca:7d:d5:b7:48:39:cb:88:69:e2:74:cd:67:aa:
                    f6:97:f5:69:d4:51:7d:d3:f2:6f:9b:5e:85:ed:8a:
                    ca:f2:11:58:8b:71:6b:98:34:24:0c:e6:8f:81:69:
                    80:56:99:d9:ab:9b:de:61:31:16:1b:34:da:d0:d9:
                    8e:60:eb:3a:94:42:86:35:88:26:23:e7:79:61:15:
                    53:df:09:ab:ec:3e:15:2e:63:dc:1a:70:9e:0f:74:
                    e0:41:ad:73:fc:4a:88:d4:ea:07:41:b4:f6:14:e2:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:9B:F4:85:A8:17:04:22:92:CC:0D:FB:EC:E4:84:A9:B8:2F:76
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:e3:87:35:8f:83:b8:9f:c4:4a:7e:73:84:56:d7:5e:e8:
         bd:cf:4a:3d:2d:58:b9:a3:5b:95:69:c0:35:e7:a3:8c:ee:48:
         79:13:20:fb:ed:42:85:da:a8:cb:7b:7c:17:8c:39:6a:78:3f:
         08:4d:21:2f:33:0d:71:6e:05:d4:b1:b5:35:26:35:8b:3d:ce:
         81:4b:ac:81:d9:72:5e:79:c1:03:13:f6:b3:2e:7e:f5:40:d0:
         b4:4c:7f:13:42:eb:f8:4c:af:17:23:42:7c:12:0c:8b:9f:bb:
         db:4c:59:92:34:fc:9c:c8:c0:30:ce:54:22:de:20:1a:26:54:
         c7:1e:c2:16:5b:e6:51:be:26:fd:ef:5c:0d:8a:55:e5:e9:ae:
         f0:4a:30:6f:91:07:24:a2:8b:ef:cd:5b:54:de:32:c8:d7:f6:
         63:e0:8a:cb:8f:ed:bd:21:49:c9:4a:78:cb:c1:21:77:0f:ec:
         1b:bc:b5:db:44:ef:cc:62:a4:08:a8:00:af:05:3b:ae:25:cb:
         ef:50:c2:e8:71:48:46:3c:4d:d0:8e:ec:43:b8:58:bc:bb:75:
         6a:a3:e4:08:dc:59:bc:b0:7f:8d:73:50:36:1e:1c:3b:04:76:
         4e:0c:8c:17:48:a4:42:17:cd:cd:91:e3:f0:47:c6:ed:1b:03:
         e6:ec:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:56:34 2024 by rpki-client on console-ams.rpki-client.org