Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File:                     ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier:          1Qbu/oP25rCFIsJZuoah8ibvYCW5rTdjaWYSamE0ufc=
Subject key identifier:   5B:FC:FB:31:68:71:64:B7:50:E5:2A:46:4A:71:17:61:80:FA:D8:14
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer:       /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial:       018F86359F347C2E19A342A384E5B5E5E6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number:          1094
Signing time:             Fri 17 May 2024 11:00:12 +0000
Manifest this update:     Fri 17 May 2024 11:00:12 +0000
Manifest next update:     Sat 18 May 2024 11:00:12 +0000
Files and hashes:         1: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: FiAx36DGoLl+7LjqnGemwHZAdxNR6Ne7fc6r5M+07gI=)
                          2: nYn0ML-JJowN7CP3kfUNA-nh1aI.roa (hash: Emx80Gd5XjKnf7QBep44EtZV042aO6b+EbvNDEkSUCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:9f:34:7c:2e:19:a3:42:a3:84:e5:b5:e5:e6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
        Validity
            Not Before: May 17 11:00:12 2024 GMT
            Not After : May 18 11:00:12 2024 GMT
        Subject: CN=5bfcfb31687164b750e52a464a71176180fad814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:ae:76:f6:95:8b:17:b5:93:66:ff:c8:82:
                    0a:5f:3e:8c:d0:e2:00:83:a4:f2:72:6d:ac:bc:94:
                    47:b2:34:27:2d:a8:ac:e5:1b:09:e6:b3:7d:84:c8:
                    a8:db:b5:77:f2:cf:5b:b6:ad:c7:ba:ca:bc:51:f0:
                    b4:14:d8:5e:64:1e:c4:1b:cf:3d:71:90:10:4c:79:
                    8c:79:b4:6c:19:5d:0b:87:fb:47:28:48:5b:23:36:
                    24:13:59:84:e5:fa:1f:93:55:4e:74:1a:56:91:bd:
                    9c:02:c0:94:ac:39:88:38:66:76:be:5e:a0:07:c5:
                    66:6f:9c:3d:0e:ab:b1:43:52:ca:70:9e:45:d2:aa:
                    00:fc:1e:16:b0:e8:f0:35:b5:c5:5f:a0:9b:29:b3:
                    6d:31:96:c9:6d:48:f3:07:cc:74:93:ec:77:98:65:
                    f1:98:df:be:06:73:da:54:7e:3e:6b:a2:bd:1c:3f:
                    bf:f2:69:6f:59:ee:3f:38:d5:ce:ce:b9:e5:ab:8b:
                    c9:9b:01:8c:43:4f:75:ec:cf:c7:85:9d:f3:9d:c0:
                    ce:42:1a:2c:5c:04:d0:8d:d8:ab:97:5d:e7:2e:cf:
                    75:27:13:19:8f:0c:f3:51:05:22:68:f3:b7:6a:df:
                    af:83:70:27:18:8b:1f:3c:96:f8:c5:f7:25:18:4a:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FC:FB:31:68:71:64:B7:50:E5:2A:46:4A:71:17:61:80:FA:D8:14
            X509v3 Authority Key Identifier:
                keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5b:7e:cd:3e:f0:8c:c7:03:28:af:f0:20:9e:7f:d0:8b:95:
         02:6e:7a:2f:2a:19:b6:7f:c0:dc:3c:fe:5a:f6:ab:bc:dc:a8:
         bd:4b:07:ae:6c:44:20:42:6a:74:19:46:2a:30:8b:e2:e0:35:
         35:d0:0e:f4:34:25:86:b6:0c:01:ae:5a:aa:f8:4a:a8:df:1b:
         6a:4d:21:68:17:9e:fb:2e:97:ba:40:79:52:4a:72:13:b9:5b:
         48:4f:6a:5f:7d:d2:1a:9f:7a:4c:fc:59:d4:a0:1e:0b:00:52:
         8d:40:07:71:cb:da:14:8f:cb:ba:75:81:b5:d9:fa:9c:52:df:
         24:a0:cd:91:6e:4f:5b:19:94:f6:e4:42:6d:78:85:1e:a5:d6:
         26:67:38:ff:bd:01:52:66:d2:0d:fe:08:f8:dc:5b:ee:dc:bd:
         67:60:4a:ca:03:ee:6b:66:4f:ab:ce:ea:6a:09:75:3b:90:ed:
         1a:f8:9a:dc:eb:2c:a7:c7:d4:91:35:c0:7e:45:e2:d9:ff:84:
         38:71:b3:bc:5b:bb:be:a8:f6:b9:bf:f5:1e:58:f9:1e:5d:c2:
         d8:87:c3:1a:d9:d5:b9:8f:b4:45:08:7a:6e:ce:0c:a1:ea:a0:
         02:1f:37:a6:ba:28:a0:ef:b8:42:a7:b1:eb:63:16:69:c4:82:
         3d:f4:28:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:51:03 2024 by rpki-client on console-ams.rpki-client.org