Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
File:                     e7gN7MxW6zZrNswpZMgZuxtymts.mft (raw, json)
Hash identifier:          gMv811MA3IanfdVgIOQzPKPtqId1nuG1+Cd3vkx59PI=
Subject key identifier:   32:24:6D:3A:32:CD:72:FD:AD:EB:10:C3:13:BE:EE:EE:FC:B9:B8:FC
Authority key identifier: 7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB
Certificate issuer:       /CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
Certificate serial:       018F9A98774DC2A8B8F81E212EEA2CB0A27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
Manifest number:          05E9
Signing time:             Tue 21 May 2024 10:00:34 +0000
Manifest this update:     Tue 21 May 2024 10:00:34 +0000
Manifest next update:     Wed 22 May 2024 10:00:34 +0000
Files and hashes:         1: e7gN7MxW6zZrNswpZMgZuxtymts.crl (hash: ZZgBHfFvqIQi/WqWRs3OrjgQNFs5aPK9R85wH5YSIyw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:98:77:4d:c2:a8:b8:f8:1e:21:2e:ea:2c:b0:a2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
        Validity
            Not Before: May 21 10:00:34 2024 GMT
            Not After : May 22 10:00:34 2024 GMT
        Subject: CN=32246d3a32cd72fdadeb10c313beeeeefcb9b8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:2a:5e:ec:ce:57:2b:19:47:a5:3c:6e:07:
                    b1:c9:57:24:97:b5:a4:ea:3c:00:9b:39:e2:f9:5e:
                    f3:9e:40:af:f2:52:0c:f9:2f:22:10:dd:60:30:ab:
                    d5:61:ee:89:f9:2a:b5:74:dc:5d:c7:31:4b:bb:35:
                    a1:96:45:4b:d7:38:37:b4:62:c6:10:ca:f6:a3:49:
                    99:cc:e1:b3:92:24:62:f0:e9:43:75:65:9a:87:06:
                    e3:d3:66:23:fb:c2:a5:9a:1e:d8:ad:64:91:fa:4c:
                    81:07:4e:90:e9:31:b5:94:ff:8f:19:52:5c:3b:e8:
                    f4:29:f8:64:40:4c:25:d8:ee:78:ea:57:fe:dd:ca:
                    d2:59:de:ad:92:69:2f:72:e4:f2:b3:23:67:62:7f:
                    e8:f1:0e:ef:66:38:f9:0b:4e:5d:07:8c:eb:b1:6a:
                    16:8d:bd:f2:3d:d9:46:01:47:c1:d3:3d:12:02:76:
                    cd:d5:10:c3:2e:a5:1f:2e:54:97:b6:90:be:b7:f5:
                    12:08:b9:e7:1d:92:39:b9:d2:41:e2:f6:b7:e1:3d:
                    34:bc:9f:69:fc:ce:bd:80:3e:00:fc:bd:ec:ec:a1:
                    3c:72:e8:0b:56:fa:ba:22:f9:c6:08:05:55:28:ae:
                    03:ae:4e:ec:81:ea:93:57:24:ef:c8:e4:7b:6d:e7:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:6D:3A:32:CD:72:FD:AD:EB:10:C3:13:BE:EE:EE:FC:B9:B8:FC
            X509v3 Authority Key Identifier:
                keyid:7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:66:f8:4a:9e:c9:34:eb:09:f8:59:97:fb:57:19:16:3f:b2:
         99:90:c6:ed:29:d9:3e:6e:07:2f:9e:5c:8e:98:f2:de:b3:bc:
         18:b8:fa:b2:39:44:0a:d0:a0:80:df:94:70:97:6d:e1:fc:a8:
         48:29:bd:32:86:06:fc:9c:68:73:e3:49:f9:c6:3a:9c:15:26:
         90:78:e4:90:f8:10:5d:ac:7d:cd:bf:e9:4f:78:14:a5:f1:b4:
         43:7c:26:88:80:cc:0a:ec:ea:e6:a7:ea:e4:fa:cb:69:39:e8:
         04:c6:98:bc:17:e4:db:f8:bd:2a:56:13:25:73:74:e0:77:0f:
         cd:ea:df:af:1a:c3:34:99:aa:db:c1:ea:12:dd:9f:3b:92:6d:
         0a:22:80:b1:78:1d:98:78:fc:3e:9c:16:4d:e2:41:94:a7:4f:
         16:4c:cf:8a:51:96:11:c4:dc:69:ad:d4:aa:6d:c3:13:24:6a:
         73:46:d7:a0:00:52:5a:dc:4c:08:c8:98:3d:25:a4:4f:3a:32:
         de:a0:25:df:b8:56:1e:cc:2a:ff:b7:1e:7e:65:cd:83:86:08:
         55:bc:9f:f0:e8:87:68:5a:69:dc:ec:69:e3:d5:fa:c0:b4:0a:
         df:49:2e:95:8e:ea:7c:22:a0:04:8d:dd:d5:d5:dd:22:ab:3d:
         e5:67:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:20:40 2024 by rpki-client on console-ams.rpki-client.org