Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File:                     M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier:          oyccIq37Ibfl+IfnTtF9DxueVkVIOvoYOWnQ4iSKLIk=
Subject key identifier:   70:BA:76:ED:54:84:7A:FD:A0:B6:52:9D:44:2D:0C:60:1D:94:4C:F0
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer:       /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial:       018F87B64E7478839D8989137F843B30CB46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number:          0A15
Signing time:             Fri 17 May 2024 18:00:22 +0000
Manifest this update:     Fri 17 May 2024 18:00:22 +0000
Manifest next update:     Sat 18 May 2024 18:00:22 +0000
Files and hashes:         1: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: uJoGO+5I6dy/JvkbVNBngpK1ruAyYuq41sbStPfe420=)
                          2: Pm0DdD3o9hrE49PekE1_mhoIl10.roa (hash: /h5Evefx7JDb59hkZlZvxVxGH85nDnT5gs0rLkueKB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4e:74:78:83:9d:89:89:13:7f:84:3b:30:cb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
        Validity
            Not Before: May 17 18:00:22 2024 GMT
            Not After : May 18 18:00:22 2024 GMT
        Subject: CN=70ba76ed54847afda0b6529d442d0c601d944cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dd:c8:ef:e8:6c:5e:e7:c2:36:9d:8f:65:be:
                    0a:91:08:41:9f:5e:3f:fb:d3:d8:88:45:99:69:e0:
                    01:4d:61:0e:2e:11:ef:fa:05:01:61:de:94:fc:3e:
                    2a:1a:7f:3b:2c:c7:46:48:bd:f7:50:8c:7b:13:e3:
                    21:55:06:85:fa:96:43:6f:b1:82:9a:7b:f0:39:e0:
                    07:9f:cc:4a:cb:ff:0b:cb:e4:49:9a:ad:0d:3e:d0:
                    2f:45:f5:f1:57:06:8b:ef:d0:eb:b2:f4:e5:34:5c:
                    6c:1d:d8:12:64:4b:bb:b6:ff:cf:82:17:c9:71:38:
                    c4:50:c9:fe:96:12:b6:67:d7:af:22:ec:7e:31:f2:
                    23:d0:d1:f9:46:51:67:c3:b0:51:60:44:1a:1a:dd:
                    53:93:f9:8d:4b:ed:c7:55:90:7d:48:4e:b5:6c:69:
                    d9:83:cd:d2:ef:0f:07:ee:bc:6e:4f:3b:9b:6c:f6:
                    70:81:fa:7a:99:05:a6:5f:fc:74:4e:b6:ff:5d:57:
                    9a:9a:87:39:37:a9:0e:ec:d8:f9:5e:66:74:e5:38:
                    8b:fb:1b:43:d7:fc:58:43:5a:28:82:e0:b0:1e:1d:
                    d2:8a:e8:18:8a:95:84:1d:b6:2d:af:c0:3e:b8:52:
                    b1:8c:4e:27:42:e7:ee:66:5b:e7:cb:84:e2:82:07:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BA:76:ED:54:84:7A:FD:A0:B6:52:9D:44:2D:0C:60:1D:94:4C:F0
            X509v3 Authority Key Identifier:
                keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:63:4f:7d:04:a3:97:aa:82:21:8c:7e:71:93:78:83:d8:33:
         af:3d:49:54:82:04:f4:e9:a5:53:cb:bc:9f:b6:82:4c:b7:e2:
         8d:b5:30:f7:4e:40:97:16:7c:55:8f:e1:f9:45:09:1e:2d:3f:
         e5:c4:ee:78:ca:55:d1:98:e1:3c:b9:a0:20:ee:77:49:3f:2b:
         a4:47:86:42:83:47:51:ff:d4:11:94:7c:28:70:3d:30:2a:5d:
         67:d2:0d:31:dd:ee:8f:4b:90:90:59:89:71:54:2b:5a:4c:09:
         a8:e4:07:0f:31:0b:82:f1:dc:20:33:eb:c4:e4:c0:da:a5:1a:
         f4:e5:30:ce:e0:d4:c6:44:dd:a0:f1:e0:8d:40:3f:f7:92:82:
         43:3b:bc:9a:3f:b4:08:c4:8f:11:2f:91:81:c6:28:4f:79:bc:
         09:90:64:44:12:bf:56:9f:dc:21:ed:9c:73:83:56:b3:91:98:
         11:06:61:44:d0:0b:61:87:58:ee:3d:06:4a:dd:25:61:37:a9:
         66:cc:61:9e:a1:95:f2:0d:72:8f:f1:bd:24:db:af:f3:23:10:
         5b:ab:9f:22:ec:ef:a2:4f:2e:8f:41:e6:bd:ea:2a:52:81:35:
         8b:30:9d:7b:da:40:1f:9b:de:bf:2c:73:e4:3b:4d:a3:79:aa:
         76:2a:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:11 2024 by rpki-client on console-ams.rpki-client.org