Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File:                     7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier:          8W/H32fMIFVRGvwJN6ncKd1UWiXt/DDyxaEOGa7Kcnw=
Subject key identifier:   93:56:47:29:57:AC:91:1D:B6:01:B2:1F:EF:82:74:8D:F9:01:A9:44
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer:       /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial:       018F4E352F708AC5A3A4ECBD4AA3C093B13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number:          1010
Signing time:             Mon 06 May 2024 14:00:59 +0000
Manifest this update:     Mon 06 May 2024 14:00:59 +0000
Manifest next update:     Tue 07 May 2024 14:00:59 +0000
Files and hashes:         1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: 06G3hJ7GATZlMjJEyW4YGw1ZXNrhkAin0sE5lM1QEng=)
                          2: kNT-gdH-NL1WlbdV8SSwHuFT8rs.roa (hash: FilJh/aZzet4uaN1Dx6GtsxinwaiYVT4vDxdk1kZE3Q=)
                          3: rZhAWgHe-aq6MlntV38aYTKCGTU.roa (hash: RAVJl8ej3hgoqq51zi96I6X65p3VrjebH63tUOWAo7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:2f:70:8a:c5:a3:a4:ec:bd:4a:a3:c0:93:b1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
        Validity
            Not Before: May  6 14:00:59 2024 GMT
            Not After : May  7 14:00:59 2024 GMT
        Subject: CN=9356472957ac911db601b21fef82748df901a944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:8e:8c:d9:fd:7f:f7:eb:0a:96:81:7e:01:
                    42:08:bc:50:de:46:7b:b7:83:d0:52:bb:25:93:7c:
                    66:ff:5d:5a:8e:86:62:2d:8e:3f:4f:41:88:fb:43:
                    fb:49:40:c8:c0:cd:54:32:03:77:d4:e3:c5:48:ea:
                    d6:bd:ca:77:d1:88:ad:36:6d:0a:7f:90:29:ef:7b:
                    61:1f:6f:1a:7a:84:4b:61:7b:d9:0a:b3:a2:f7:93:
                    96:af:c9:d6:66:c3:8c:35:e0:eb:38:4c:c7:8f:87:
                    b9:43:ff:28:64:a3:9c:60:b0:9c:31:0a:6c:b7:fe:
                    71:f3:9b:13:ea:26:e9:72:86:a1:d3:e6:21:3f:00:
                    b8:2a:67:21:2c:c4:f8:67:bb:f4:f9:24:e4:c8:41:
                    24:7f:f0:fa:28:aa:63:24:3d:6e:c8:0f:26:cd:27:
                    ee:98:bc:7a:f5:4e:58:c7:f8:b3:88:d5:37:73:8e:
                    f4:86:99:a6:4f:04:0e:d3:b6:f8:57:e9:2a:b0:f8:
                    8f:76:6c:b9:32:c0:83:e4:8f:7d:f8:4e:e0:fb:0c:
                    37:89:61:95:77:83:3b:9a:88:41:69:4d:6d:1f:20:
                    14:56:85:c6:e4:cc:20:c7:20:ec:2d:4d:fe:2c:aa:
                    b1:3e:0b:3b:8c:ee:bb:5d:08:28:66:03:46:59:d4:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:56:47:29:57:AC:91:1D:B6:01:B2:1F:EF:82:74:8D:F9:01:A9:44
            X509v3 Authority Key Identifier:
                keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:49:8c:97:5e:07:ec:8b:96:e2:7f:99:9a:40:0b:e2:dc:
         50:53:f2:31:2a:4e:c6:87:2f:8e:94:4f:b1:de:eb:a5:e0:03:
         b3:d4:86:64:dd:e4:43:42:0d:77:37:61:5b:40:45:80:c7:c8:
         42:0a:a3:c4:c1:e7:f7:ed:f8:08:9b:8e:d6:e1:18:c9:e2:a9:
         6c:84:47:1b:a0:f3:03:87:96:27:48:81:16:aa:d7:75:3b:9a:
         5d:7c:15:d7:45:e0:86:d2:65:79:ff:34:99:63:0b:1d:d9:d6:
         c6:6b:4f:e8:47:4b:11:ea:bb:43:70:55:b7:69:7d:5f:a2:4f:
         44:9c:cc:b9:bf:83:f0:6b:67:57:c9:5b:20:53:91:e8:75:fa:
         e3:f0:1f:7f:b0:f2:48:6d:c9:d0:75:f4:93:eb:2d:aa:bb:7d:
         b1:2f:b9:21:fd:1c:ac:a6:00:b0:fd:17:c3:49:97:67:a3:a9:
         93:e3:52:f5:65:21:df:ec:fd:79:1d:ca:6a:ca:de:72:2a:45:
         97:2b:8f:77:2d:ff:29:61:e0:c3:68:8d:cb:c6:d4:49:df:25:
         08:b4:0e:7c:23:45:2a:5a:c0:3b:ca:c1:2f:5b:45:85:ba:f6:
         f3:ca:2b:48:bc:d3:69:9e:02:19:62:10:83:2f:6a:45:3e:de:
         d9:6f:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:40:11 2024 by rpki-client on console-fra.rpki-client.org