Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File:                     n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier:          uDpbxat8ZJfEqMMTp21vpGiIg4h784emVld/cEl2Tqg=
Subject key identifier:   4B:A3:EC:9F:C4:EE:1C:4A:4D:8F:1A:A9:D4:FC:00:A3:A2:29:9F:35
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer:       /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial:       018F874871885AABAF2C29293C67714ED72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number:          05B5
Signing time:             Fri 17 May 2024 16:00:22 +0000
Manifest this update:     Fri 17 May 2024 16:00:22 +0000
Manifest next update:     Sat 18 May 2024 16:00:22 +0000
Files and hashes:         1: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: SmWjnol48FnBDW9CRhpSr+uNk9VDrWWYeqDia78aZl8=)
                          2: s9WBuDQsMd0uYNipRXQH5Kl-2lM.roa (hash: VhRkHwoxQA1+nDP/bnmVFAeyxcMzJ1BZpvvwo28hUEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:71:88:5a:ab:af:2c:29:29:3c:67:71:4e:d7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
        Validity
            Not Before: May 17 16:00:22 2024 GMT
            Not After : May 18 16:00:22 2024 GMT
        Subject: CN=4ba3ec9fc4ee1c4a4d8f1aa9d4fc00a3a2299f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:a0:b2:ab:9d:b7:6e:8d:6c:a0:3a:82:a9:
                    77:60:93:78:24:14:a1:63:04:8f:d2:15:ea:a2:1a:
                    77:0c:69:8e:f9:eb:b4:e1:3c:16:0b:4a:04:fe:f9:
                    65:1c:c1:a9:88:81:5f:e2:54:6e:a2:19:ea:48:55:
                    18:94:b5:5e:b6:c0:9b:82:67:a4:3d:7f:5b:9d:33:
                    ec:c1:52:71:3d:38:d2:da:f1:6f:1e:f2:27:ea:29:
                    06:a9:be:a4:8c:74:96:84:b7:1f:07:b7:2b:60:aa:
                    9c:c1:81:ee:69:6d:9b:81:99:9c:65:8a:b0:10:29:
                    81:e8:b2:ec:82:14:40:fb:6c:72:5b:27:a6:ac:3f:
                    8b:89:aa:61:cf:17:2a:93:78:4d:b4:0f:f6:51:af:
                    83:78:e9:2d:ea:51:87:5f:d6:35:d9:a8:89:9a:35:
                    fb:18:bc:18:26:f0:69:ea:f0:33:b4:01:3e:ee:d3:
                    7f:80:65:d2:15:ba:77:2f:79:f0:ff:7a:6c:64:42:
                    33:84:6a:1f:18:50:58:93:a9:95:5f:db:53:4f:06:
                    53:d9:46:a0:12:84:ca:ea:85:38:a4:d4:ae:b7:97:
                    d5:37:fc:cb:d3:e0:16:bc:d6:c4:1b:af:81:1e:1f:
                    38:05:2c:a0:92:87:a9:fa:ab:80:99:24:4c:d8:9e:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A3:EC:9F:C4:EE:1C:4A:4D:8F:1A:A9:D4:FC:00:A3:A2:29:9F:35
            X509v3 Authority Key Identifier:
                keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:5a:0e:a8:d6:e8:a5:61:4a:cf:ce:5c:65:f3:31:d3:2d:
         50:06:b0:4d:cf:ae:0d:82:c0:e0:94:fe:cf:51:c7:0a:71:96:
         17:f2:59:2f:c1:cc:9f:0b:dc:29:05:cf:ba:22:13:38:61:22:
         4a:b5:0a:94:83:64:a0:ea:29:88:5d:d0:0c:82:56:66:5e:68:
         9e:44:a6:b5:47:a2:b9:bf:83:88:99:14:cb:1c:14:ff:90:d1:
         6e:95:e2:41:a6:d7:3e:63:cc:38:e8:d0:15:6e:46:81:07:08:
         9d:4d:ea:a6:2d:4b:00:cc:aa:e7:be:9f:07:e1:c7:26:35:1f:
         65:47:23:58:ac:9c:9d:5d:2a:a6:af:ab:7b:0e:33:08:b3:00:
         02:2a:75:e0:4a:6a:25:53:86:aa:25:60:5d:49:d8:3e:d9:54:
         5b:1b:76:ca:d0:d2:94:e1:16:dd:e5:0a:b4:8e:8f:e1:02:10:
         a3:cd:02:59:7c:37:63:3d:21:74:07:ce:a6:3a:ad:a7:c6:b4:
         19:b7:09:08:ae:34:5b:e4:65:13:9b:38:23:7b:e8:6a:6d:d2:
         5d:b7:eb:51:df:d7:b0:6f:01:7d:69:2a:4e:50:39:95:54:a0:
         2e:e7:78:6c:ee:3b:14:37:c2:fe:03:2f:f5:11:5c:ee:82:b5:
         2d:66:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:35:20 2024 by rpki-client on console-fra.rpki-client.org