Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File:                     4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier:          Yo9DSSgQrI/bdgTh8OfUcmSPFjTWVi+yxLiOd5jo+Ko=
Subject key identifier:   F8:98:38:11:40:D4:65:6C:E9:07:17:6F:E0:25:CE:69:D6:91:4F:06
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer:       /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial:       0191FAED03B05D396614DCFD3C1168EE6421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number:          E5
Signing time:             Mon 16 Sep 2024 13:02:02 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:02 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:02 +0000
Files and hashes:         1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: hKhP0RUTYyb1tq+fb1RZfycW6tOorxAW92R0C2iP9pE=)
                          2: JnuJPNKDRlb2L0YKWt3K0sNgdFo.roa (hash: 2Ts6H/mRjdivag20NSPyjt6eyqJLYL6XSUU64Mplv1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:03:b0:5d:39:66:14:dc:fd:3c:11:68:ee:64:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
        Validity
            Not Before: Sep 16 13:02:02 2024 GMT
            Not After : Sep 17 13:02:02 2024 GMT
        Subject: CN=f898381140d4656ce907176fe025ce69d6914f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:41:fd:cd:a9:34:47:34:55:21:01:ed:cf:
                    96:d8:00:cd:8d:6d:e7:29:1b:a8:8d:f4:5a:2c:c1:
                    e3:c5:b0:bc:41:26:7d:5d:af:8f:f1:b3:63:37:49:
                    fc:3c:53:46:bc:a4:ea:7e:91:30:28:6d:dd:fb:64:
                    12:33:74:4c:3e:e9:bd:81:35:0c:d4:ef:86:69:d3:
                    de:56:d7:4f:5d:a4:ee:34:42:91:90:a8:d3:e7:85:
                    ae:f2:8e:73:68:d2:00:1f:93:44:80:d7:ed:75:3e:
                    30:48:8a:16:1c:b0:4d:3a:f8:0c:00:47:b4:b5:2c:
                    16:32:db:71:ce:94:fa:2e:c4:45:b2:b5:cd:dc:8a:
                    1c:78:18:39:ef:81:70:93:5f:69:8e:b6:40:68:8c:
                    36:51:ec:89:20:17:7c:58:65:b2:46:96:d9:60:2f:
                    a2:5e:e8:dd:87:10:44:6e:d3:df:6d:06:db:39:e5:
                    34:d8:73:12:40:25:37:bf:75:f2:37:2b:49:cf:74:
                    f1:8f:0b:d0:4f:9b:1f:c5:01:96:b7:cc:eb:ae:ef:
                    7a:ca:55:4a:69:df:dd:c3:8e:a8:e0:d8:2d:a4:72:
                    9c:41:cc:6d:a9:c1:41:69:cf:ee:51:6b:02:18:ff:
                    17:e7:00:4f:f8:b3:56:92:60:47:c6:a2:09:57:9d:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:38:11:40:D4:65:6C:E9:07:17:6F:E0:25:CE:69:D6:91:4F:06
            X509v3 Authority Key Identifier:
                keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f7:73:6b:af:c6:58:11:6a:10:59:13:c7:5f:cd:69:18:b6:
         ea:e1:a3:12:4b:ba:54:06:1e:71:6f:03:07:d1:63:60:2c:ad:
         c1:1b:d7:3e:1f:83:89:2b:6a:52:eb:c0:4a:2c:b3:b5:46:65:
         34:18:dc:be:3c:b9:a6:4f:38:60:ed:cd:04:6e:83:f0:b3:e7:
         af:d8:c9:0c:de:17:1a:cd:61:24:46:27:0d:53:0f:d1:7c:fd:
         26:c2:96:37:d6:ea:48:ed:db:97:df:cb:d2:76:ef:3f:bb:ae:
         10:7c:94:1b:8b:6b:a3:d1:69:5d:f6:4d:b1:37:eb:25:ba:24:
         3b:c4:30:ca:26:09:d1:4f:35:79:b3:78:76:f0:74:45:5d:09:
         c0:e0:fc:88:b5:c5:ab:ef:04:d9:47:89:dc:90:f4:ab:49:d6:
         f4:17:fc:57:ab:01:be:d0:86:c4:90:25:dc:e5:2c:f9:65:fb:
         e8:eb:a3:89:9b:a2:72:96:66:ad:29:59:71:dd:dd:b4:bb:98:
         67:3e:01:75:50:8e:a2:af:53:cf:a8:15:78:ee:62:84:31:a4:
         36:83:f5:e5:61:cb:8c:1a:f1:33:0d:dc:e9:25:90:7b:5b:ad:
         23:c2:6a:ef:04:b3:66:6f:be:06:f3:53:2d:e4:b3:03:5e:c3:
         6b:37:0a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:46 2024 by rpki-client on console-ams.rpki-client.org