Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File:                     4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier:          HiyFi4mnhxZxtwj2NKtwPHh4F+6STXaS5PFRqIFot5M=
Subject key identifier:   DA:F8:8E:8B:96:56:5C:DF:A0:03:9A:01:F0:CD:12:C8:69:29:82:E7
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer:       /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial:       018F7C8E5BDB5DC56D7EC619982193ACF62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number:          0EC9
Signing time:             Wed 15 May 2024 14:00:55 +0000
Manifest this update:     Wed 15 May 2024 14:00:55 +0000
Manifest next update:     Thu 16 May 2024 14:00:55 +0000
Files and hashes:         1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: roKRGNWQoE7CKfoegZrd1bnrpihPD5aXQaoGcFnOO1s=)
                          2: IGOFZ7PaFmhSQSKeLheMepQeagw.roa (hash: wZUI8nDrqD+pxFD+rBhdT+FVXKXWQtry1jovEL/zXJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 13:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:8e:5b:db:5d:c5:6d:7e:c6:19:98:21:93:ac:f6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
        Validity
            Not Before: May 15 14:00:55 2024 GMT
            Not After : May 16 14:00:55 2024 GMT
        Subject: CN=daf88e8b96565cdfa0039a01f0cd12c8692982e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:7a:eb:d9:8a:d9:12:79:3e:74:cb:c4:26:
                    6a:8f:98:fa:7e:84:41:29:eb:f1:0f:b5:ba:1a:be:
                    d2:53:05:df:d7:d1:a8:48:82:96:6c:82:cf:b4:fd:
                    c7:bd:88:6f:e9:19:d3:f9:84:bf:65:61:dd:bf:25:
                    be:87:74:00:9a:1d:39:d2:f8:7a:3b:93:b7:e7:bb:
                    68:a6:23:36:05:12:74:3e:a0:19:05:25:f7:68:0d:
                    25:bb:be:c6:31:85:06:d6:11:a0:2d:11:f6:39:4f:
                    ce:b4:ba:41:34:18:75:f5:ad:d9:42:6c:85:10:8d:
                    20:be:6b:a0:61:26:cb:a7:21:f1:9e:91:0e:f2:5b:
                    dd:2b:5c:1c:08:6f:33:41:73:e0:58:ff:af:39:95:
                    98:5a:4c:cd:33:ae:ca:3c:7d:ff:67:d0:3d:1d:f7:
                    87:2e:3b:c4:1c:94:36:8c:58:19:86:92:86:89:3d:
                    c9:ea:9a:68:5d:98:3f:ac:8f:d2:e5:82:35:3f:3e:
                    68:e3:d2:af:42:10:7a:45:e5:20:48:5e:62:82:92:
                    8e:ec:ee:97:78:b8:e0:ee:39:b6:6f:41:69:86:27:
                    3b:c8:aa:81:28:12:95:da:a2:66:c0:af:5b:fc:a9:
                    05:6a:3f:3f:6b:82:b0:9d:40:e6:19:2a:27:5a:50:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F8:8E:8B:96:56:5C:DF:A0:03:9A:01:F0:CD:12:C8:69:29:82:E7
            X509v3 Authority Key Identifier:
                keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ea:d1:5e:78:f2:f5:7c:05:86:c9:7b:10:2e:d7:8b:4a:a4:
         2c:e7:b1:e3:95:67:f5:29:fd:1d:6b:a7:a8:56:c5:6a:ba:88:
         7b:7f:83:4c:2b:6e:8a:0f:d9:4c:24:5f:50:fc:c4:5f:5a:9d:
         31:98:5f:de:fd:02:08:3a:7e:20:49:be:d2:a8:8c:92:51:e9:
         e0:07:61:6b:82:17:1b:5c:33:6d:0d:0f:40:f1:8a:58:ac:37:
         dd:59:c5:22:09:8d:70:af:59:d0:1d:96:96:f5:6a:4c:42:72:
         0e:d6:ff:a2:4f:70:aa:74:6c:1f:3e:46:eb:c9:19:a4:80:61:
         19:65:95:64:00:a3:9b:da:85:e4:b0:be:dd:02:35:4c:37:1f:
         04:5a:d9:f5:cb:f1:d2:81:72:c8:13:cf:41:a0:b3:47:7c:ed:
         19:ad:cf:2d:71:48:6a:2a:d5:5a:0f:19:2e:87:5f:72:58:a7:
         bf:28:a4:fe:a0:bf:b1:45:5a:7a:13:ed:7f:25:0a:43:4d:c1:
         c2:29:b1:bb:6a:87:4d:83:6a:b2:c5:22:b6:b2:e1:d4:0a:c3:
         3b:38:f4:90:10:94:55:57:6e:3f:75:23:a0:ab:83:8b:ac:4c:
         80:24:78:fe:e3:f1:97:bf:c1:0e:67:bd:0f:4a:c7:54:fc:81:
         3e:c1:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:44:59 2024 by rpki-client on console-fra.rpki-client.org