Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File:                     4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier:          DJSYWATbUNVMdgt0sy5faIL3BWV67c4t0Fy1dldMeq4=
Subject key identifier:   D0:06:99:8D:09:02:F4:D9:FF:AA:AB:16:57:4D:D9:EC:FC:1A:8D:EE
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       018F45A30990B196579BC7A4F2AD744F7C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number:          1027
Signing time:             Sat 04 May 2024 22:04:23 +0000
Manifest this update:     Sat 04 May 2024 22:04:23 +0000
Manifest next update:     Sun 05 May 2024 22:04:23 +0000
Files and hashes:         1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: X/OhOa3ztinxB0kDrgEnAfJCPtpYn1Pitm3URFtj+HM=)
                          2: O_e41DfXLM8jw6ki6l91Lh5aEjQ.roa (hash: Ylv5msPxDQm7kXVVs64nW8tOpW3Hk+8uSgx1CohB8aw=)
                          3: i3TjIYokjvGX0x6ta88QFWB1IJ4.roa (hash: KlCSUGoWUxV4ONqBuuQQ+5jrCCfgbAXaWKYsOHmBVoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a3:09:90:b1:96:57:9b:c7:a4:f2:ad:74:4f:7c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: May  4 22:04:23 2024 GMT
            Not After : May  5 22:04:23 2024 GMT
        Subject: CN=d006998d0902f4d9ffaaab16574dd9ecfc1a8dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:7f:f7:93:77:97:81:f1:79:21:1b:46:b3:
                    c2:da:a0:84:50:25:4f:48:9a:a4:2b:83:32:08:76:
                    48:7d:12:ea:c1:4f:5f:a2:9b:c1:16:19:94:e6:ca:
                    ca:46:53:e6:93:5b:57:5f:67:f7:88:24:c9:25:f5:
                    22:4f:0d:97:c6:e5:0b:1c:4b:c7:26:14:74:66:52:
                    d4:ca:89:82:ac:52:25:ce:e5:b4:10:9f:2c:ab:66:
                    95:93:89:57:97:34:33:a7:33:1e:31:0f:ef:e0:4e:
                    33:0e:1f:c6:f6:96:f4:3b:c0:4d:ed:9c:9d:d9:b7:
                    3f:c8:b1:19:96:80:ff:ec:62:cd:36:57:7b:52:b9:
                    a5:1f:4b:6f:df:e4:ec:42:aa:81:4e:6f:98:66:9e:
                    a1:18:12:8e:6e:0b:36:c7:5f:f7:9b:ec:e2:0d:f7:
                    7d:49:fa:70:ab:74:c9:03:9c:f8:fd:dd:3a:32:bb:
                    0b:30:8e:61:74:31:a9:4f:c7:6b:c0:57:f2:37:05:
                    0a:2a:bb:ea:e7:04:cf:b6:ce:7c:d0:d7:09:4b:da:
                    12:d6:7b:7f:d8:85:5b:15:62:cb:95:20:94:a6:c2:
                    b8:93:00:47:7d:17:35:82:87:77:26:91:ab:91:81:
                    59:3d:0b:0b:78:5f:4d:d0:c1:95:1f:7a:94:82:73:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:06:99:8D:09:02:F4:D9:FF:AA:AB:16:57:4D:D9:EC:FC:1A:8D:EE
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:87:04:fd:49:1a:fa:04:d6:56:02:b8:aa:c9:63:bd:a3:
         26:9e:0f:12:08:cc:94:66:97:f0:3a:0b:67:7a:a0:b1:e1:c6:
         88:ca:54:bb:7d:b1:43:95:2a:01:32:57:a5:cf:ae:0c:aa:41:
         7a:1c:ac:02:6c:9d:ba:7c:42:80:54:26:55:0c:a0:81:b7:97:
         61:9c:f7:b3:72:4e:0b:82:fe:36:64:80:96:d1:a2:d2:82:96:
         6f:78:5b:6a:9f:fa:6e:37:24:b3:3c:ca:e4:fd:49:b4:90:d5:
         d4:be:52:b1:17:4b:e9:d2:7c:bf:b5:24:2c:4b:e6:1d:a1:6f:
         19:55:58:a1:c3:71:fd:37:ec:04:91:c9:47:e1:6b:01:c9:13:
         64:08:71:5f:1b:2e:c6:3a:06:96:92:02:ee:75:d1:cd:2a:e9:
         0f:5f:f8:ff:4a:05:b2:12:a2:c1:b2:b7:6c:ad:31:cb:6f:7d:
         8e:e4:86:1a:01:7c:0d:be:28:cf:88:cf:6a:0f:0a:7a:ab:d1:
         6d:a4:90:19:39:3d:ef:4c:5b:48:06:ea:94:95:1d:39:af:4f:
         11:61:b6:bc:d1:29:4d:65:63:22:e5:2a:b6:cb:1f:f7:a6:6d:
         0b:9b:b1:a6:c0:f8:fc:c8:57:d0:e9:6a:bf:47:f3:90:3e:66:
         88:e1:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:30:31 2024 by rpki-client on console-ams.rpki-client.org