Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File:                     rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier:          8HTHjmWidG3GVjF7a13WZH5GyBNinEUO80b0/fW07hQ=
Subject key identifier:   9E:79:DE:86:60:B2:8D:05:4E:68:CA:AE:DF:6D:19:CC:5E:D4:22:03
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer:       /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial:       018F836D8C32511F480664601618E014D5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number:          1176
Signing time:             Thu 16 May 2024 22:02:25 +0000
Manifest this update:     Thu 16 May 2024 22:02:25 +0000
Manifest next update:     Fri 17 May 2024 22:02:25 +0000
Files and hashes:         1: IuZepCj7m26cglitlBkulMlSYFw.roa (hash: 91s/JFTHjtVKrlYQycfS3inR7u+EOIfUS6yKY2G4aYY=)
                          2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: WdqT13I+05/zsOb2IRWyIaVEznEeWULIGjrpHYN5kEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:8c:32:51:1f:48:06:64:60:16:18:e0:14:d5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
        Validity
            Not Before: May 16 22:02:25 2024 GMT
            Not After : May 17 22:02:25 2024 GMT
        Subject: CN=9e79de8660b28d054e68caaedf6d19cc5ed42203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:98:c5:ca:31:6e:69:a8:d7:be:68:38:4c:
                    6b:15:96:e6:8c:18:9f:56:9b:f4:0e:69:cf:0a:c9:
                    a6:c3:d8:95:a6:05:46:75:b5:30:6e:d6:15:78:0e:
                    00:4c:55:01:c1:f6:92:c8:16:c8:6d:83:d0:b8:89:
                    53:62:45:6d:e5:81:63:2e:6c:3c:0b:ad:49:91:a5:
                    2c:35:a7:7d:70:b8:32:0f:35:49:19:93:55:4a:16:
                    2c:f0:e9:e5:c1:e1:bd:c4:af:cc:02:21:a1:86:10:
                    1c:63:6a:1f:11:a8:63:cb:07:dd:0b:d3:4d:04:93:
                    c1:7a:be:6a:6f:87:92:a9:18:b3:65:5c:6d:18:d2:
                    e0:f4:29:a1:10:86:b0:b5:7c:92:29:0b:c7:50:84:
                    dd:87:bb:1b:dc:6d:7b:09:e4:ed:2a:37:b4:a1:d3:
                    f3:3e:10:cf:ca:3a:a9:0c:85:17:1b:24:ed:9a:19:
                    4a:13:c6:c8:4f:e9:59:15:b6:c0:8d:e7:43:d1:7a:
                    1b:d8:79:29:e9:8d:49:48:20:1e:9b:09:54:50:86:
                    2b:f6:60:3c:e9:62:32:6e:c8:ff:f2:83:95:c9:99:
                    17:5b:a0:e7:ee:52:eb:f7:35:04:c6:7a:d4:81:95:
                    99:4a:3c:01:31:11:8d:c0:fc:ca:40:c2:05:d6:73:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:79:DE:86:60:B2:8D:05:4E:68:CA:AE:DF:6D:19:CC:5E:D4:22:03
            X509v3 Authority Key Identifier:
                keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:40:b6:af:36:c0:26:49:66:37:53:81:ef:fa:70:c0:50:66:
         4f:38:5b:27:30:df:e9:eb:71:01:23:b9:3e:f7:17:ee:ba:10:
         7e:46:31:90:f6:57:e5:7b:dd:8f:4c:2f:96:84:15:9b:2e:3f:
         90:c8:c7:4f:2b:17:66:5a:e1:40:17:22:42:36:90:37:af:4c:
         07:1e:b1:a1:8e:a3:ce:36:b3:20:4a:a6:5f:35:eb:ad:56:d3:
         b0:59:15:3a:61:2c:58:e8:7c:42:de:30:40:eb:07:9a:ea:16:
         e4:fc:34:12:3c:6f:08:79:67:b0:3b:49:8d:8c:a8:99:db:fa:
         7c:b0:ff:37:a0:a6:9f:89:68:ea:f4:ed:77:95:e9:b4:ef:0f:
         c9:27:64:91:47:73:3d:86:25:aa:c3:7d:f9:b0:ae:40:cb:31:
         26:d5:4f:16:2a:5e:69:88:e3:9f:eb:b0:b2:e2:10:84:85:2b:
         52:60:13:e4:64:e8:82:d3:99:6b:1b:cf:8a:95:b2:57:e6:31:
         ea:4f:a3:bf:e0:fd:1b:5a:96:25:27:cd:f0:7a:4d:7e:80:41:
         c1:fc:6f:73:1a:f0:b6:fd:e5:cf:0b:c4:32:80:20:3e:37:03:
         73:41:aa:18:00:ce:0c:fb:79:3b:7a:46:33:48:7b:64:9d:7a:
         8b:3a:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:13:25 2024 by rpki-client on console-fra.rpki-client.org