Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File:                     4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier:          Z2t+dlTeO4GkNQQ3zbh/mLtQzjUkglVHJefYCzPuQG8=
Subject key identifier:   29:7C:40:0A:26:2F:B8:F9:90:3E:58:1E:4A:77:49:2D:F6:CA:BF:9C
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer:       /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial:       018FC4712843134EC65A2FF05D972273BA48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number:          F7
Signing time:             Wed 29 May 2024 13:01:41 +0000
Manifest this update:     Wed 29 May 2024 13:01:41 +0000
Manifest next update:     Thu 30 May 2024 13:01:41 +0000
Files and hashes:         1: 2d34_feJs6CzpEUIbB1vrARfrwU.roa (hash: aqCOrnqqASOJ0g2pFHny+QB4cljsyD/QJY7CSQ+/N1A=)
                          2: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: 4aPBO3Pup1aQKmjzVtpV9RRBHDGN0bD6IQjH1fF1M3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 May 2024 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c4:71:28:43:13:4e:c6:5a:2f:f0:5d:97:22:73:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
        Validity
            Not Before: May 29 13:01:41 2024 GMT
            Not After : May 30 13:01:41 2024 GMT
        Subject: CN=297c400a262fb8f9903e581e4a77492df6cabf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:f9:59:33:49:3a:b3:2f:cd:2e:5b:4c:f4:
                    0f:58:99:65:51:3a:58:37:4b:69:b1:d1:7f:8d:cc:
                    73:12:19:e3:11:f6:71:0f:7c:26:fb:01:a5:1a:a5:
                    e3:0d:59:dc:3c:76:42:66:ae:22:c9:e7:55:d8:2b:
                    9b:f4:ad:76:30:05:44:06:3a:a2:f3:70:c2:cf:79:
                    f7:58:ff:ca:5c:4d:a9:94:98:d0:f4:ba:d2:d4:59:
                    a5:20:11:ed:79:e9:fd:76:3b:8e:21:78:3a:7c:36:
                    e9:ca:a5:10:52:7a:f5:52:dc:e7:58:d1:7b:06:fe:
                    79:99:df:89:d7:9a:66:86:4b:38:1b:eb:aa:29:8a:
                    ca:be:c8:54:34:eb:3d:6d:0a:a3:14:80:f8:4f:cc:
                    dd:58:1c:a2:ec:48:16:6c:b9:66:36:74:ee:7d:ac:
                    c1:87:d2:18:a9:11:72:51:3f:b2:b7:7e:75:ad:a8:
                    75:97:a7:77:a2:37:a1:a6:00:9b:66:42:ee:a4:af:
                    2c:a9:64:d0:76:a5:a3:a4:f3:92:a6:33:40:81:28:
                    8b:a6:f0:2d:0f:1d:f8:06:09:b9:40:13:c9:1a:60:
                    2e:a4:05:f3:5a:82:08:ac:60:54:a2:aa:ac:f9:8e:
                    f6:63:d5:f1:44:8f:92:db:27:8d:54:ac:9e:cc:2f:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7C:40:0A:26:2F:B8:F9:90:3E:58:1E:4A:77:49:2D:F6:CA:BF:9C
            X509v3 Authority Key Identifier:
                keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:82:48:34:29:50:4f:bb:a3:25:70:e6:80:4a:d4:a0:ef:95:
         6e:5a:74:f9:22:81:5e:9f:70:4b:8f:85:64:e1:f1:2f:55:0f:
         68:34:de:5a:9b:11:ac:50:29:e6:9f:c9:ca:3c:2e:7a:fc:93:
         d0:59:35:12:c9:be:c2:43:6f:5b:48:62:94:8b:71:7f:2f:fb:
         e7:7f:e7:50:8b:cf:56:22:bf:6c:fb:5f:df:19:42:0d:65:5f:
         e7:57:ee:9c:0b:b1:72:6d:d8:67:1b:78:4b:c6:b8:c8:fa:0b:
         6c:df:3c:9c:c8:dd:1b:1e:c9:a3:61:13:33:36:10:b9:8f:78:
         cb:25:89:e9:ba:5e:f3:40:a7:2f:42:f3:fe:a3:38:77:fc:63:
         3d:9c:0f:fa:fd:57:01:06:79:32:15:0e:4f:64:51:2e:3d:b7:
         12:56:aa:33:21:d2:a9:74:fd:dc:58:b7:e4:8c:09:0a:0b:2e:
         b1:06:05:3d:06:70:33:67:30:b6:81:4d:eb:a9:0c:fa:e4:38:
         cb:1c:ce:c8:64:b4:46:d5:45:4b:f7:60:14:9a:b9:15:f6:52:
         e8:ac:dc:80:bc:6c:6a:1f:6e:f3:47:4e:b4:e6:23:5a:b6:16:
         84:5e:18:22:80:30:05:db:0f:2c:cb:c9:16:76:4d:88:5f:72:
         af:da:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 16:49:23 2024 by rpki-client on console-fra.rpki-client.org