Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File:                     l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier:          rgPNTvfIzbscFoX1B5uz/xE7AMj/LroXjHxE2wHQC1Q=
Subject key identifier:   49:69:07:FF:4D:3F:8B:F9:0D:37:22:F0:A9:34:94:69:A4:3F:54:D4
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       018F5BF1329AF98CA2F96677FEE890C6B947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number:          1164
Signing time:             Thu 09 May 2024 06:01:24 +0000
Manifest this update:     Thu 09 May 2024 06:01:24 +0000
Manifest next update:     Fri 10 May 2024 06:01:24 +0000
Files and hashes:         1: AivhLtL8dPeipnUPqOfI2f9GrY0.roa (hash: cNc6GLTnWVeU+fRSuSSA05Is0ftTHOHDLRQGrtnWHa4=)
                          2: XOw0CCMpT4i9mPb285O4AJdJOe8.roa (hash: oeNy0HtNr9z+oT+u1zFBMDnX2MYGkqY6Z/oA1Hduus0=)
                          3: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: x3BAhWoTKkMs2xYyUUk8uOnj3z4zAB9bDmsF47uo6nQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5b:f1:32:9a:f9:8c:a2:f9:66:77:fe:e8:90:c6:b9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: May  9 06:01:24 2024 GMT
            Not After : May 10 06:01:24 2024 GMT
        Subject: CN=496907ff4d3f8bf90d3722f0a9349469a43f54d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d9:f4:1a:3c:eb:ae:f3:7b:ab:49:68:ed:7a:
                    b4:0b:61:2c:aa:fd:26:9f:91:c9:07:a6:a9:c6:60:
                    37:13:29:6b:a5:ce:6b:8f:41:d7:ef:3b:48:24:41:
                    3a:b5:c1:1b:a7:dd:b1:8a:ce:05:79:4c:ba:84:dc:
                    fe:23:ec:75:53:40:a0:e1:85:e6:02:c8:e4:1a:37:
                    37:e2:23:67:76:c9:c4:d8:d3:fe:c5:33:f9:27:03:
                    e3:58:a6:73:0a:fe:c2:6b:32:22:ed:26:bc:87:45:
                    b5:5c:fb:1f:b9:02:13:2c:d9:55:69:2d:f6:59:19:
                    d6:d2:0a:b6:a0:ef:2e:e2:66:96:f8:f1:0c:47:0b:
                    79:0d:54:13:d5:8c:b0:9f:b4:ae:3e:c7:bd:a8:b6:
                    de:b7:2a:32:59:60:61:f1:d0:18:26:93:e8:ad:2b:
                    4d:6b:22:28:a6:17:74:58:03:eb:0c:78:67:6c:2e:
                    e9:ee:80:f4:ba:af:ef:a0:2b:d8:c8:ef:52:83:77:
                    b6:3d:80:59:ce:06:1a:a6:1f:c4:52:47:43:4f:2d:
                    73:f2:79:8e:b6:fc:5e:4b:cc:b6:2f:b5:7d:de:9a:
                    e5:56:f0:b9:01:80:df:cc:2d:5d:65:34:50:9f:f0:
                    d0:ff:a0:03:67:e3:dd:02:47:88:d7:2e:0c:71:0f:
                    a7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:69:07:FF:4D:3F:8B:F9:0D:37:22:F0:A9:34:94:69:A4:3F:54:D4
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:14:b0:64:49:5f:73:07:f2:20:a7:a3:41:6c:b1:74:7e:1c:
         1e:a6:49:51:ad:46:68:19:0d:18:59:1b:01:3a:36:5b:97:9b:
         d2:6b:81:8e:8f:a7:b2:3a:08:48:7d:be:ac:39:b1:86:52:64:
         9b:13:ef:0e:95:ca:e7:74:25:53:a4:8b:47:62:20:c7:fe:e4:
         f1:6f:18:5f:ae:02:d7:db:78:f0:d9:83:3c:c3:53:c2:79:c4:
         59:c1:6e:6e:e9:0a:76:ee:9b:18:ce:2b:c4:7b:91:8c:7d:df:
         86:ad:6c:6d:04:a5:3a:f6:4d:79:34:63:c9:ee:a5:82:6d:25:
         2d:8b:d1:1d:1c:14:3b:2d:d0:3f:fa:e2:4a:42:01:15:62:f2:
         f6:cf:01:84:c2:8c:91:ae:56:1f:48:03:31:7a:48:fd:2b:62:
         a7:83:08:23:ef:17:07:b6:72:27:2b:4f:cf:1d:7c:a4:65:36:
         b4:ea:9e:de:c3:ca:67:fa:7c:4a:65:00:3e:5f:76:50:31:a6:
         c2:a9:6c:e0:e1:f8:da:b5:93:6c:fd:14:a4:af:b6:a0:88:be:
         ec:78:40:cd:52:63:56:e9:1f:e3:ba:7a:a0:77:86:ad:9d:50:
         56:83:e9:6a:d9:6c:95:70:d6:c1:d9:af:ea:26:d7:78:58:be:
         bd:11:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:11:09 2024 by rpki-client on console-fra.rpki-client.org