Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File:                     4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier:          T2mfqSDjvOUHfa6brPEXIuXO8v9QE3kTpxx7GW/7oVw=
Subject key identifier:   06:90:92:16:A5:22:99:C2:6A:1C:2E:13:0F:DD:D1:DD:7F:8A:90:6A
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer:       /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial:       018F35884878F44526C7D589818A294E272F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number:          114F
Signing time:             Wed 01 May 2024 19:01:14 +0000
Manifest this update:     Wed 01 May 2024 19:01:14 +0000
Manifest next update:     Thu 02 May 2024 19:01:14 +0000
Files and hashes:         1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: InjyqUDG46S6yaJD5UneHTmAUZDL599Vu5/lQQCCV+g=)
                          2: LUQHwGZaXukUrxOpjNqDLJv2Ek0.roa (hash: UBHlflp4DZkDXd6w/yYwP4JneZHgUqXIii5XfFdzwNE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:88:48:78:f4:45:26:c7:d5:89:81:8a:29:4e:27:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
        Validity
            Not Before: May  1 19:01:14 2024 GMT
            Not After : May  2 19:01:14 2024 GMT
        Subject: CN=06909216a52299c26a1c2e130fddd1dd7f8a906a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:8b:8c:c4:1a:33:c8:fa:b8:62:e6:f7:d4:
                    cc:44:98:88:49:0b:d0:e2:c5:2b:82:96:01:7b:62:
                    fd:c7:53:a9:58:03:2d:54:d1:d2:d3:2c:f3:f5:a0:
                    ec:7f:f2:2e:c2:42:82:f0:1f:e9:bf:fd:c1:30:c3:
                    99:e9:46:71:29:37:69:4b:20:12:b2:90:f4:6a:b6:
                    88:aa:b5:e0:03:4c:55:e4:d5:7a:50:3b:82:32:81:
                    72:d4:cd:dc:6c:44:45:5f:1f:5c:14:24:3e:d1:ba:
                    a2:83:46:cc:d8:f5:df:90:9d:73:11:eb:a0:85:db:
                    02:66:51:56:e3:60:64:8d:fd:7e:83:d7:b1:13:26:
                    c9:77:82:59:58:9c:88:c7:71:0d:e6:36:e9:6b:a6:
                    d0:a8:5c:3a:87:ab:dc:52:8e:9b:1d:bd:7c:9a:b4:
                    c8:0a:39:32:6e:d5:fb:6a:01:51:4d:3a:bc:b6:db:
                    06:df:06:d4:08:fd:28:1a:68:fa:a8:f3:96:50:20:
                    b4:6f:e8:95:7d:bb:4b:4e:57:f0:ae:0a:b8:e4:76:
                    4d:32:c4:32:53:ef:e0:02:f3:db:41:8f:e5:5f:00:
                    7d:75:1d:67:88:8c:0b:0c:08:33:d3:e5:9b:37:85:
                    ea:d5:d5:b6:af:35:47:e7:db:a9:06:dd:d3:23:05:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:90:92:16:A5:22:99:C2:6A:1C:2E:13:0F:DD:D1:DD:7F:8A:90:6A
            X509v3 Authority Key Identifier:
                keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:38:ec:5a:28:f2:94:91:10:99:36:35:a5:12:0b:41:e5:
         f6:9e:14:21:85:a9:6e:f5:6a:91:80:b5:fe:5e:f3:f9:a7:9c:
         4d:1c:85:b4:4d:5c:72:7c:24:89:87:b8:36:9a:ea:11:62:b4:
         b0:08:78:57:35:87:78:5c:a1:da:5d:f7:47:83:d2:9d:75:45:
         81:f6:f3:0d:16:03:87:c1:1d:b3:38:0d:5e:16:07:20:58:7c:
         a1:f1:7d:8c:6c:a6:a2:a4:30:3a:84:32:63:c7:10:27:c1:4b:
         c5:58:8f:d1:1e:3c:a3:12:88:85:0d:67:81:70:bf:0f:0b:3c:
         c9:c6:1b:c0:60:64:c2:ac:d4:f3:41:df:72:dc:b7:20:60:2f:
         de:d0:41:ad:46:04:18:2e:94:61:98:3e:b7:84:5e:4e:58:d1:
         91:f0:72:c1:60:c2:cf:ce:29:ef:ac:ea:f4:8a:21:d5:76:d0:
         00:ff:37:a5:04:60:cd:8e:bb:79:01:63:40:22:99:bb:4a:86:
         a1:d4:16:95:31:15:d1:40:0d:b4:f0:3d:7e:52:a0:b9:95:97:
         90:52:f3:11:e6:ef:c9:ee:64:04:48:fc:08:33:cb:37:41:de:
         f2:aa:4b:87:df:9a:9e:64:30:5b:19:ca:e3:15:96:6e:aa:fd:
         c1:61:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:00:06 2024 by rpki-client on console-fra.rpki-client.org