RPKI Manifest
Location:                 rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft (download)

Subject key identifier:   70:08:19:97:57:37:51:DF:58:34:3D:FA:97:09:AB:BB:83:15:87:E6
Authority key identifier: E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89
Manifest Number:          024B
Files:
    1: 1-J2XDfBfSxLJlFPY9BDCcPI_ZwE.roa
	hash g+i7jKpzY75gd+k6zY23PIrwEqpc7+GRviRkaw3CA4s=
    2: 4sIeVLsyBabjmedSUVq_Yt8bhok.crl
	hash JSiDdTOjpRrSCBbFcCIVXw8DymUguSHgrgjYjr5xWik=

--
$ test-mft -p rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29649634 (0x1c46ae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c21e54bb3205a6e399e752515abf62df1b8689
        Validity
            Not Before: Jan 25 15:41:27 2022 GMT
            Not After : Jan 26 15:41:27 2022 GMT
        Subject: CN=70081997573751df58343dfa9709abbb831587e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:7a:d4:a0:72:1a:0b:3f:65:bd:f2:35:ea:
                    32:18:80:f1:05:bb:30:d9:ff:2e:9d:61:1e:9c:e0:
                    42:0e:81:e7:fa:8c:41:bc:18:a0:6c:dd:22:f0:1d:
                    e8:52:bd:2e:ee:47:3d:c8:fe:d9:a1:19:04:eb:bb:
                    95:b6:cb:b5:58:6a:f4:db:24:c3:08:cf:c4:82:c5:
                    27:0a:d8:18:c9:3f:52:91:48:73:65:0c:42:0b:2d:
                    10:4c:02:32:ae:ab:84:ef:ae:8b:37:64:f7:d9:77:
                    15:63:57:25:01:1b:ad:06:72:7b:82:8b:c4:4b:76:
                    c9:2e:7b:dc:bc:6d:6e:bd:8f:fc:17:83:69:b0:92:
                    62:3f:f5:ce:c0:9f:33:fa:aa:f9:a9:82:f9:a8:d7:
                    96:53:8c:4b:c4:95:5d:aa:2d:fe:b0:86:87:2a:20:
                    5a:9f:d7:9b:01:05:97:63:e8:78:ae:7a:ac:0c:3c:
                    a7:28:42:f2:76:d9:cf:ad:2f:a4:ba:21:ed:8b:13:
                    8a:c5:71:f6:51:a2:2e:3c:c1:95:59:d8:dd:c5:bb:
                    f9:89:9d:7e:91:89:0e:fc:ca:78:87:5e:9e:ae:5b:
                    2d:5e:a8:a1:db:53:1f:3e:b3:df:f7:a4:56:4f:94:
                    99:a7:42:02:86:5c:67:82:3c:5f:1f:36:07:c8:ee:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                70:08:19:97:57:37:51:DF:58:34:3D:FA:97:09:AB:BB:83:15:87:E6
            X509v3 Authority Key Identifier: 
                keyid:E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sIeVLsyBabjmedSUVq_Yt8bhok.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:35:30:31:50:78:90:84:6b:b0:22:e6:51:e4:44:90:bb:0e:
         99:ed:93:cb:14:b1:9a:6c:09:93:d6:b4:ab:ec:04:0d:03:d3:
         ae:9a:27:e8:65:ba:78:39:26:6f:0c:74:40:40:15:32:02:8a:
         44:fa:99:43:19:3a:67:48:07:68:6d:e0:39:06:33:84:1e:ad:
         21:d4:3a:56:ae:60:95:88:46:80:0b:df:e7:b5:62:1f:64:5b:
         b9:cf:79:03:b5:47:db:95:0d:34:f8:90:ce:5d:4e:41:3f:c1:
         56:d0:bc:97:12:c6:60:2e:41:ae:88:fe:c4:05:2a:a7:e7:cd:
         fa:31:27:51:a9:14:e9:42:a4:fe:b2:18:25:bd:54:ea:1a:d4:
         6a:50:74:33:12:70:1f:4d:ee:f0:0b:4a:3a:1b:16:cc:77:ee:
         17:bc:bd:9e:cf:e8:87:23:a1:8e:9b:f4:89:8b:73:a7:53:42:
         32:1a:47:4e:03:6d:50:fc:51:b7:d3:83:d6:86:d6:6d:d0:d0:
         5e:a6:49:43:5a:fc:e3:c9:77:8e:e8:58:25:6c:80:ae:f2:a7:
         60:b7:42:31:24:3a:4b:79:c5:65:3a:2e:57:aa:9c:f7:c3:32:
         5e:6f:8d:ad:db:60:4e:00:59:a9:82:f8:65:e7:67:e8:82:f6:
         e2:85:05:27
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEAcRq4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MmMyMWU1NGJiMzIwNWE2ZTM5OWU3NTI1MTVhYmY2MmRmMWI4Njg5MB4XDTIyMDEy
NTE1NDEyN1oXDTIyMDEyNjE1NDEyN1owMzExMC8GA1UEAxMoNzAwODE5OTc1NzM3
NTFkZjU4MzQzZGZhOTcwOWFiYmI4MzE1ODdlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKRPetSgchoLP2W98jXqMhiA8QW7MNn/Lp1hHpzgQg6B5/qM
QbwYoGzdIvAd6FK9Lu5HPcj+2aEZBOu7lbbLtVhq9NskwwjPxILFJwrYGMk/UpFI
c2UMQgstEEwCMq6rhO+uizdk99l3FWNXJQEbrQZye4KLxEt2yS573Lxtbr2P/BeD
abCSYj/1zsCfM/qq+amC+ajXllOMS8SVXaot/rCGhyogWp/XmwEFl2PoeK56rAw8
pyhC8nbZz60vpLoh7YsTisVx9lGiLjzBlVnY3cW7+YmdfpGJDvzKeIdenq5bLV6o
odtTHz6z3/ekVk+UmadCAoZcZ4I8Xx82B8juB70CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRwCBmXVzdR31g0PfqXCau7gxWH5jAfBgNVHSMEGDAWgBTiwh5UuzIFpuOZ
51JRWr9i3xuGiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRzSWVWTHN5QmFiam1lZFNVVnFfWXQ4Ymhvay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODUvMzkxY2Q4LTkyNjUtNDcyOS04MDRhLWQ0OWZhYzExOTVjNC8x
LzRzSWVWTHN5QmFiam1lZFNVVnFfWXQ4Ymhvay5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUv
MzkxY2Q4LTkyNjUtNDcyOS04MDRhLWQ0OWZhYzExOTVjNC8xLzRzSWVWTHN5QmFi
am1lZFNVVnFfWXQ4Ymhvay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFE1MDFQeJCEa7Ai5lHkRJC7Dpnt
k8sUsZpsCZPWtKvsBA0D066aJ+hlung5Jm8MdEBAFTICikT6mUMZOmdIB2ht4DkG
M4QerSHUOlauYJWIRoAL3+e1Yh9kW7nPeQO1R9uVDTT4kM5dTkE/wVbQvJcSxmAu
Qa6I/sQFKqfnzfoxJ1GpFOlCpP6yGCW9VOoa1GpQdDMScB9N7vALSjobFsx37he8
vZ7P6IcjoY6b9ImLc6dTQjIaR04DbVD8UbfTg9aG1m3Q0F6mSUNa/OPJd47oWCVs
gK7yp2C3QjEkOkt5xWU6LleqnPfDMl5vja3bYE4AWamC+GXnZ+iC9uKFBSc=
-----END CERTIFICATE-----

Generated at Tue Jan 25 19:04:01 2022 by LibreSSL & rpki-client.