Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File:                     7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier:          wR46omfjCkUJjhaS9/wxZCPz7TpU7RwWcyq9i8QfAYs=
Subject key identifier:   07:1D:76:A6:52:0F:FD:AF:EF:1C:9C:90:6A:25:2C:00:EB:0B:C8:D1
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer:       /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial:       018F486A67E488D0C8A2E9C8D31856CB5EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number:          0837
Signing time:             Sun 05 May 2024 11:01:23 +0000
Manifest this update:     Sun 05 May 2024 11:01:23 +0000
Manifest next update:     Mon 06 May 2024 11:01:23 +0000
Files and hashes:         1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: o7YYKX9nq9j2k224y6hj1dp7/G3yg5i0Kxf7R2UHVLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:6a:67:e4:88:d0:c8:a2:e9:c8:d3:18:56:cb:5e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
        Validity
            Not Before: May  5 11:01:23 2024 GMT
            Not After : May  6 11:01:23 2024 GMT
        Subject: CN=071d76a6520ffdafef1c9c906a252c00eb0bc8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:f8:62:13:27:1e:cf:ac:43:ee:dd:74:3a:
                    06:5b:9b:32:21:54:bf:3d:6f:6f:1c:9a:df:88:1c:
                    3e:4e:b6:d0:39:42:5a:99:e3:e2:24:f4:31:36:c8:
                    d8:6e:a2:96:12:21:a8:d5:db:8b:d1:ad:cb:b1:56:
                    15:97:d7:89:26:8a:bc:b0:00:17:21:93:df:22:ba:
                    9e:18:3e:a7:67:2b:fc:3f:ae:b7:8a:78:d4:6a:b5:
                    3f:a5:fc:4a:f2:b3:b6:6f:cc:32:21:f1:5c:38:99:
                    c3:ce:2a:12:ab:1e:e3:9f:80:02:77:74:3a:e0:c4:
                    56:15:7b:28:17:d5:e0:e5:63:cf:25:b9:d0:09:45:
                    9d:69:c1:40:73:bf:2f:f2:d7:df:84:1d:48:e9:b4:
                    21:55:05:ca:3b:48:e4:cb:e4:a9:e2:9f:7f:f5:0a:
                    04:0f:22:c4:cd:52:cc:1a:0c:ef:a5:7d:14:db:70:
                    1c:33:bf:a2:53:da:17:5a:0b:58:09:f1:d9:80:f9:
                    77:44:e2:60:0b:8c:92:f8:af:d4:58:56:05:4a:c3:
                    22:a5:0f:56:33:88:d3:04:02:37:66:93:77:12:c9:
                    54:06:db:46:73:7f:d7:18:4b:b4:85:11:3c:eb:9b:
                    7c:7b:cb:da:d0:2c:83:5e:a2:75:80:5c:9d:52:9f:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1D:76:A6:52:0F:FD:AF:EF:1C:9C:90:6A:25:2C:00:EB:0B:C8:D1
            X509v3 Authority Key Identifier:
                keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:4e:48:69:0c:72:e8:72:19:20:71:5f:86:80:c7:81:79:
         de:8f:a5:98:2a:2b:84:8b:6d:f2:3f:ba:51:b4:eb:1a:e9:9b:
         ee:0f:89:31:8b:3a:8c:59:87:e0:06:61:d3:8f:5c:78:d7:0e:
         0e:92:39:8f:91:58:6f:13:b4:13:21:2c:d9:08:c0:64:1b:2f:
         14:13:cd:61:bc:36:1d:3e:6c:9b:cc:42:bd:b1:24:d5:14:0b:
         3a:38:b2:b7:8e:22:3b:8e:b0:26:f0:65:62:8b:e6:ed:a9:eb:
         b2:4c:b0:a5:a6:93:74:9e:2f:b0:9e:1d:f9:e0:a5:1b:92:f0:
         4f:d5:16:28:da:3f:1a:5a:2b:a0:30:c2:38:42:53:cc:84:bc:
         f3:d5:62:37:57:5c:d3:c8:28:74:db:09:e3:d0:71:1d:45:97:
         4d:ad:0d:8a:78:05:4a:57:d6:d4:d2:81:92:18:ea:81:26:ad:
         d7:56:54:4f:d8:4a:70:17:e8:c9:99:41:ee:23:8c:96:b3:14:
         03:cd:05:61:68:6a:4f:c8:df:f5:94:f8:14:a4:7c:35:11:c1:
         dc:d9:c9:75:70:65:50:85:15:dd:4c:e1:32:cf:4f:66:5f:b0:
         ad:0c:bd:38:95:f6:d8:42:04:68:f2:1b:ba:52:9d:7e:eb:df:
         b4:99:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:05:34 2024 by rpki-client on console-ams.rpki-client.org