RPKI Manifest
Location:                 rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft (download)

Subject key identifier:   64:04:68:F5:10:F2:8A:DB:04:52:48:08:A1:A4:EE:3F:9C:29:21:DB
Authority key identifier: E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89
Manifest Number:          0237
Files:
    1: 1-J2XDfBfSxLJlFPY9BDCcPI_ZwE.roa
	hash g+i7jKpzY75gd+k6zY23PIrwEqpc7+GRviRkaw3CA4s=
    2: 4sIeVLsyBabjmedSUVq_Yt8bhok.crl
	hash BaVnXjdDrG4AO5uwFPtlTgp6AmGAasBW2qwgWhjjPbw=

--
$ test-mft -p rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28609009 (0x1b489f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c21e54bb3205a6e399e752515abf62df1b8689
        Validity
            Not Before: Jan 18 21:27:18 2022 GMT
            Not After : Jan 19 21:27:18 2022 GMT
        Subject: CN=640468f510f28adb04524808a1a4ee3f9c2921db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:36:20:14:4a:c5:de:48:56:d2:29:f0:d4:
                    11:06:a4:49:cb:53:d9:e6:7a:89:4b:b4:81:45:28:
                    a6:46:0a:d2:2c:69:c7:29:a5:af:0b:bc:ba:d2:02:
                    1d:1f:6d:0b:22:97:a8:05:ac:31:fa:b4:e8:9b:30:
                    f7:c8:f3:37:85:1e:f2:95:fd:93:ca:d9:c3:23:6b:
                    e2:24:3f:a7:28:36:52:34:56:ea:54:3b:58:37:0e:
                    09:0c:c4:c5:0c:e8:c4:11:2e:56:bc:b9:09:67:bc:
                    d8:46:24:7f:69:20:24:80:35:6c:84:a9:0f:db:4c:
                    c1:f3:36:9f:07:e9:3a:36:be:10:35:4d:b6:a1:c5:
                    8a:ba:04:63:9a:45:92:bc:1c:68:9e:36:bf:aa:93:
                    80:e2:36:a0:5b:dd:f8:7c:e2:cc:24:6d:51:e5:3d:
                    b5:9f:af:e8:9d:64:2d:f5:20:8a:41:26:f4:f2:83:
                    ac:2b:8f:f8:95:24:46:3c:02:7a:cb:83:40:8d:0b:
                    ba:4a:ee:8e:4e:ef:dd:ca:73:63:10:04:b2:15:25:
                    83:5b:81:dd:da:8e:08:87:94:44:51:10:26:be:41:
                    7e:96:cf:5d:f1:b2:ef:6d:7c:8c:36:53:d1:91:06:
                    22:97:97:ec:3f:50:7d:df:11:54:a1:df:22:8c:ad:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                64:04:68:F5:10:F2:8A:DB:04:52:48:08:A1:A4:EE:3F:9C:29:21:DB
            X509v3 Authority Key Identifier: 
                keyid:E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sIeVLsyBabjmedSUVq_Yt8bhok.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:6d:04:16:2c:c2:b3:ca:b4:56:1d:a2:43:d2:fe:be:26:
         71:8d:c7:e1:b9:c7:7f:da:dc:7e:fa:59:e6:3a:9a:f6:00:77:
         7c:11:fd:d8:45:01:fb:4b:90:50:34:68:16:39:7c:fd:a0:1d:
         1b:a3:16:bd:b7:f2:d8:bf:f0:a3:63:85:e7:6f:d5:ed:be:3d:
         38:da:6e:66:80:15:68:e8:38:14:e9:0e:4d:52:63:f2:a7:f1:
         64:14:ed:2f:b9:64:38:8b:98:4f:10:85:a1:cd:d5:47:86:e8:
         18:7e:5a:1d:e8:a4:6d:aa:a3:b9:2c:54:b8:28:01:07:3f:4a:
         4d:a4:ad:b3:07:63:af:97:20:1d:e2:25:f7:6f:b8:cf:dd:7e:
         d8:25:dc:93:4e:96:af:6b:b0:bb:d1:29:d6:2b:96:81:b6:1e:
         25:5a:2d:cd:88:60:2c:75:8c:ba:3a:c5:21:c3:e0:b9:a8:1c:
         85:88:a3:5e:55:d8:69:0e:a5:42:e3:a1:1c:42:3e:85:81:5b:
         ef:47:54:87:7f:75:ea:ec:93:7c:a9:4f:cc:0e:eb:33:53:76:
         b8:ae:82:aa:b9:69:76:76:e2:99:20:22:66:f6:18:83:3e:66:
         70:ce:4b:bc:ba:cd:03:b6:b8:b7:b9:c8:54:ad:9d:49:c0:a9:
         91:53:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 18 22:55:22 2022 by LibreSSL & rpki-client.