Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File:                     7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier:          Gzp2DaU1DK/UxUShVocgWiOKI9+Xlkb6NFyT7YyrdA8=
Subject key identifier:   3A:59:76:B0:74:F1:57:AC:2B:4B:94:02:83:CA:F8:1D:4E:95:B2:4C
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       018FBD5D5E6A95B1896864EF694B84586A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number:          11AB
Signing time:             Tue 28 May 2024 04:02:43 +0000
Manifest this update:     Tue 28 May 2024 04:02:43 +0000
Manifest next update:     Wed 29 May 2024 04:02:43 +0000
Files and hashes:         1: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: CWUzhJfFbGHLQmF4FQlKgaVMHPv+k4Tqyw4N5ZhHFRo=)
                          2: 8gIJvJEK3tw30sECrJaaB3CHNeU.roa (hash: 4T9uku0smlukHCq66ovc2eb4bCkR/kf4rI0R/xAhUwY=)
                          3: DJGnmkNOgtmHx4OOtuw0m_kdqQg.roa (hash: z+/Rg9NzvJUMMnpZD/jbtvcA51MbsoT8t3JOPjHvCRo=)
                          4: W4U8oGSoqGQZS7XlNbluKOY7Wgk.roa (hash: Epovdhozq3tdgg4w99/1XulMHtceutUXmiXR691fSZw=)
                          5: Zb5iZ2F_spLGo9jyv5ihnbeVoaY.roa (hash: E/PGNp4yW/ouBX1KJwxWGwI86SBlEixt4pbPb5rqv0k=)
                          6: bVVRjp_e_3C8zfrNURmN7BjgbdM.roa (hash: ZTll1BQtYDW4qhmcHHW+uoqyHIQS+qI81izzZ7hreGw=)
                          7: dh45Nip8jpW7cAQD_E4wGLTqVuY.roa (hash: 8YtCJtK3wevIpZCcnMCxjFM6/zRH9PDcAaMgcPAjEeM=)
                          8: mB5iqxBgHRnQBdnHRGu4QGwK90I.roa (hash: NRn6GXBZM7a6/kO26Uo+7sXI0fZQD9PO4aNSnimUWtQ=)
                          9: wobsiGaecvD3Me4EiML1OSuabXk.roa (hash: lG8+uFQxOgVFP/L9RiEXpY7SloDvngJXf4DDfL1LHXI=)
                          10: xE8eybApFqVSbYKrIDQy6BXD2ho.roa (hash: 6JsTGB68xmzlh/fGKRVMVp79m97EJV+tsYBFQbB821o=)
                          11: zXu99trbCfZyBKE5d-VRFDSY6wE.roa (hash: 5U68KLvWvnPKVw0MSNU+vqvPBhlYttzAmSWVcbbUC94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bd:5d:5e:6a:95:b1:89:68:64:ef:69:4b:84:58:6a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: May 28 04:02:43 2024 GMT
            Not After : May 29 04:02:43 2024 GMT
        Subject: CN=3a5976b074f157ac2b4b940283caf81d4e95b24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:45:87:90:e6:06:81:f7:9f:c3:10:60:c5:
                    db:03:fe:1e:f5:44:15:64:7c:ea:b4:55:8f:e8:9e:
                    da:74:23:af:30:92:b7:75:0c:5a:5c:db:4f:0c:b8:
                    62:2a:b9:6a:ed:7d:f3:2e:d5:3d:c5:b5:7b:dd:13:
                    ae:11:84:34:0c:a8:87:9c:72:3d:16:88:e2:14:13:
                    fc:db:c4:94:b9:84:25:7f:b9:52:b8:6e:59:6a:7c:
                    4b:0b:6e:b2:31:06:5d:da:fe:57:69:dc:51:60:ac:
                    35:06:97:d4:20:3f:fe:80:96:f9:f0:f0:d3:81:76:
                    c1:16:c4:b8:7c:3e:a8:a7:33:9f:e6:65:62:93:3c:
                    d7:dd:53:10:0c:10:84:68:2a:95:e0:b8:f4:f0:6a:
                    91:e4:91:80:73:15:d6:fb:1b:7d:b7:91:80:b6:49:
                    4d:9a:91:d7:86:e7:c6:b6:9c:f0:3c:a3:c6:04:47:
                    5d:31:81:43:eb:50:56:c6:cb:1f:2e:90:a0:23:5e:
                    1b:f3:c9:a0:17:e7:a9:56:2c:e5:5d:2c:cd:4e:cb:
                    c1:6c:0a:ce:13:1c:c9:0a:17:6c:83:79:bb:ff:d3:
                    3e:c8:f6:c7:68:88:e1:ea:89:71:3d:78:45:ad:6e:
                    87:91:8e:2f:5f:88:d1:27:9f:4d:5d:80:8a:4c:53:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:59:76:B0:74:F1:57:AC:2B:4B:94:02:83:CA:F8:1D:4E:95:B2:4C
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:44:b5:67:d7:b2:18:60:bd:46:ea:5f:07:03:b1:e3:30:01:
         01:3e:2c:ec:d4:75:09:19:d8:ce:d4:9b:e4:42:14:f3:ce:67:
         5c:7b:9b:fa:63:54:76:11:5f:be:86:99:e7:7d:e1:ec:d3:20:
         88:cd:15:aa:09:40:27:84:e0:31:4f:b4:0d:48:bb:28:36:2c:
         66:05:e0:39:a3:ed:6d:56:ac:ec:9a:b5:86:dd:40:6d:22:0f:
         ea:fc:d2:bc:fe:e3:7c:67:81:62:b4:0d:8f:31:db:b1:95:72:
         2e:72:0b:63:4f:f7:53:e3:29:27:31:c7:aa:04:fa:dd:6b:fb:
         59:af:cd:8d:a5:a4:c7:17:ae:dc:a4:86:06:89:2e:b6:10:28:
         12:89:63:9f:de:4a:c5:68:6a:b5:c4:81:a0:48:29:ec:b3:36:
         a3:8f:24:ae:6a:db:48:41:78:b4:1d:7a:0e:16:11:cd:e4:40:
         32:11:84:89:27:e9:c2:a2:b9:cc:72:fd:c8:a9:62:4f:49:68:
         f1:ed:aa:c9:f3:26:20:c3:c6:55:a9:d9:ff:ed:6b:94:61:17:
         ef:f3:b5:52:d4:b0:5c:18:d7:19:1e:48:01:89:dc:5a:e9:4f:
         66:44:8f:b9:39:ec:7a:51:31:03:55:4c:b6:c7:8a:ad:51:20:
         02:33:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 07:14:50 2024 by rpki-client on console-fra.rpki-client.org