Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          u6UydrgIH8YMukUAb5TtX9kGg4hm0EQ0EPjBhBC/irY=
Subject key identifier:   FC:D2:88:B7:B8:90:AC:8D:1F:79:90:15:F4:63:82:7A:17:F7:D3:EF
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       018FA58AC32B97ACFBFA1F21ADEAEC0D79E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          119D
Signing time:             Thu 23 May 2024 13:01:25 +0000
Manifest this update:     Thu 23 May 2024 13:01:25 +0000
Manifest next update:     Fri 24 May 2024 13:01:25 +0000
Files and hashes:         1: 2sYNum2z_CwIm1hDREF2h0rvV3E.roa (hash: FK1/a5QKa3sXf5Qi+nsHGkoJT4jy8ti3DAQ47nr9VkI=)
                          2: 3u58LyoibH6ViLaynNTGpj3fQVo.roa (hash: huzq/h5cdjCKam0i4SPoTmEl3ci2ZwPRJR6AGlwK+ow=)
                          3: Jpzaey7LirJhPevhW8fopFnmhxc.roa (hash: N0jZCwXpCVIk+0GuMx33pyZoo0mYdC50jL5rN7Mk3ls=)
                          4: LCFa7d0hRmIBhg7NQVRXijM0iSs.roa (hash: PJtyFwmRneGdEJI+x5VUpJpebDD4P0nA87oyAYQmazE=)
                          5: RyjWCKWkpaeViNRy-a384wKCm84.roa (hash: 7XkTAWYF3hZrjbZjcrpyN0ivLZr+dCp8XkSl4IWdJ4M=)
                          6: a_38Q1dYpdxcJMSfBiyChtOdQy8.roa (hash: hh+0fchPaDrnCXIe9D9tIy5gzt2zGJ/gvdPVUS8Ro9Q=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: vkRP7MVm2Tz6Tcvw1MmEZQDkAOibV8aGzpHxgrlbHVA=)
                          8: lU1eBgP81-E_lSoW0t2xfDikKNE.roa (hash: FO2zy4xnOq3QvMgR9w8/Hu5lhWhfNbzdaTehj9Fahz0=)
                          9: oDM0Cv-MceD1qmxUAJiVKueMxxI.roa (hash: fcjJ9pYwN8VOkh3JRMjiKpWvdFJ1RjN9yu7uspw4GVQ=)
                          10: pCJFbwWAa1ynLecu8wd5N5JRicI.roa (hash: n/UzBzX7jbkI3UmQa1HNk5MGFiHam23DbctAF5nL014=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a5:8a:c3:2b:97:ac:fb:fa:1f:21:ad:ea:ec:0d:79:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: May 23 13:01:25 2024 GMT
            Not After : May 24 13:01:25 2024 GMT
        Subject: CN=fcd288b7b890ac8d1f799015f463827a17f7d3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0d:7c:cc:c6:51:22:dc:f6:e0:29:e5:a5:b3:
                    11:49:50:51:c2:30:5a:60:4f:c2:a6:83:6f:2f:62:
                    4c:65:29:80:86:8f:93:f3:4a:54:e8:d5:95:14:d8:
                    9a:98:03:46:4c:0b:c9:7c:7b:2c:9c:46:c1:59:62:
                    ca:50:0e:9e:07:56:d6:d2:f8:df:11:c7:1d:97:a6:
                    16:a2:1f:49:d3:05:78:ba:a9:03:4a:92:1c:03:66:
                    f5:4a:23:92:95:5c:5c:10:26:f7:96:6d:ef:23:78:
                    e0:59:b9:9f:a0:df:cf:a6:48:e5:0d:df:40:e6:5c:
                    3c:12:ba:d6:28:72:78:dd:02:7c:78:a1:0b:cb:49:
                    d4:24:77:cd:5c:d9:3e:b9:c5:e6:29:0e:e9:62:dc:
                    2e:03:0c:b2:6f:64:40:a7:e5:6c:86:76:e9:b9:a2:
                    49:42:67:49:48:dd:e2:af:27:c5:c0:65:7f:98:0b:
                    4b:4e:a0:29:cc:c3:36:7c:94:67:f1:86:88:1c:91:
                    e0:f9:9a:a1:e5:03:e4:0c:62:c8:4c:5c:ff:47:7a:
                    1c:63:28:8a:1e:e6:9f:cf:88:5e:a0:ce:5d:12:e1:
                    38:b2:da:8f:bc:e2:e5:db:da:5c:91:53:1b:25:e1:
                    65:29:bb:0d:3e:cc:3f:ba:00:0b:98:e7:9c:da:10:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:88:B7:B8:90:AC:8D:1F:79:90:15:F4:63:82:7A:17:F7:D3:EF
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3e:61:86:bc:b3:04:9d:13:6b:b6:5d:67:18:e3:01:5c:27:
         92:47:7e:22:90:8e:8f:e1:5c:ec:8c:a8:4e:11:ff:c4:31:b5:
         81:8d:f3:52:6e:6d:32:0f:86:84:b7:30:53:91:0c:6c:5c:96:
         24:26:b1:2e:fd:72:65:1a:5a:39:9a:a2:66:5f:27:2e:86:21:
         1c:01:e3:b9:22:33:59:b4:9f:1b:3a:6b:3f:0e:f8:fa:ea:13:
         6e:2b:c4:f1:b7:85:3e:99:31:52:70:4e:bc:e2:7a:41:af:02:
         3e:66:0f:70:59:77:72:93:72:78:1e:12:0b:c0:f8:bc:e4:de:
         a3:cd:e7:f6:08:a1:3e:20:69:34:9a:ba:d0:1e:d1:36:7f:d2:
         5c:51:e6:72:64:91:3a:dc:aa:3a:72:ed:eb:ef:76:32:5c:b3:
         2a:a7:05:ac:f9:77:eb:a0:c3:12:02:b7:7d:57:05:b1:90:8d:
         7f:30:01:1f:c8:db:72:b3:16:26:0d:95:49:29:ba:f7:5b:a3:
         3b:27:dd:45:66:40:b1:6c:a3:2c:59:cd:57:1e:6f:a1:06:49:
         5d:a8:fc:92:36:3f:a0:bc:7a:01:31:cf:d2:3a:54:5f:cb:46:
         ed:f3:34:37:59:fe:fb:a0:18:d8:37:1e:b7:d1:eb:8f:fc:fd:
         03:81:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:41:18 2024 by rpki-client on console-fra.rpki-client.org