Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File:                     D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier:          W4jf8H2z/bdzjDDJb9FRjMOYbUWWK0B+dV/jHyzoQOo=
Subject key identifier:   DC:6F:D8:61:0D:92:56:17:8D:BB:C1:F7:B0:F2:FA:EA:71:C6:0D:16
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer:       /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial:       018F86A37D1DD6D97AA4EDC2681DF8DF0BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number:          EA
Signing time:             Fri 17 May 2024 13:00:12 +0000
Manifest this update:     Fri 17 May 2024 13:00:12 +0000
Manifest next update:     Sat 18 May 2024 13:00:12 +0000
Files and hashes:         1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: YumzCMC214Q9Y60ug67XWxzE70fwgrnic9o3bnsiq1M=)
                          2: b4gWKzMR-ilW-tA6RXXDzBrLGh8.roa (hash: PWJBgEJvy5HDCq2WT420nfP79yvhdACDhDJh8o7ukSM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:7d:1d:d6:d9:7a:a4:ed:c2:68:1d:f8:df:0b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
        Validity
            Not Before: May 17 13:00:12 2024 GMT
            Not After : May 18 13:00:12 2024 GMT
        Subject: CN=dc6fd8610d9256178dbbc1f7b0f2faea71c60d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:8b:af:a7:b4:0c:e0:a9:d0:e6:98:7d:35:
                    ff:52:4a:e2:bf:bf:a9:e7:d4:3c:d9:58:1f:f3:b1:
                    c4:47:6a:7a:de:a9:e1:80:d3:d7:b5:7e:6b:d3:6a:
                    39:d5:f3:ad:d7:14:24:20:ec:0d:64:8c:42:fe:af:
                    57:a5:cd:ef:66:eb:fa:60:8c:c6:d2:19:a1:c7:3e:
                    66:b5:67:04:23:4e:e4:99:f9:cf:e5:33:e1:3f:c5:
                    ad:34:79:8d:9d:79:35:d1:91:48:a7:a9:dc:cf:24:
                    08:f2:b2:2a:11:c9:14:f9:b9:e3:d5:ef:dd:e5:61:
                    92:78:d2:4d:e9:0a:90:cc:c9:1e:d8:9e:2a:3e:33:
                    78:cd:ea:2a:7c:2a:0a:ef:f7:f5:59:59:7c:7b:4a:
                    7a:97:3f:db:7f:30:09:17:bc:29:93:79:9d:ba:17:
                    f1:44:08:5e:8b:78:54:a4:b0:72:5d:c0:38:63:31:
                    52:98:8d:fd:6e:be:8e:c8:11:b8:ae:0d:37:cf:8e:
                    15:43:ec:e2:29:ea:2f:18:a3:57:34:aa:c2:19:51:
                    d4:6e:2d:20:62:2d:9b:31:8a:91:0a:3f:b5:28:c9:
                    ac:4c:d3:f3:99:30:f9:8c:dc:3d:fe:ef:16:04:5a:
                    b1:b3:df:84:3c:88:2e:b9:0a:1b:05:20:a2:fa:61:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6F:D8:61:0D:92:56:17:8D:BB:C1:F7:B0:F2:FA:EA:71:C6:0D:16
            X509v3 Authority Key Identifier:
                keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:54:ea:92:c3:8a:99:06:74:d2:c8:a9:36:d4:5d:7b:e7:60:
         b6:53:1c:ad:bf:bf:5d:6f:75:33:e8:4e:e6:1c:e0:70:df:8d:
         fd:a4:73:9c:1e:9e:cd:e6:31:b4:29:32:cf:94:f7:66:27:37:
         f8:4e:e1:5f:63:fd:6b:d1:2a:de:97:22:22:40:b2:61:82:3e:
         d7:6a:93:0c:51:ef:ab:10:3b:b0:2a:32:06:5b:b5:8d:18:01:
         a5:bf:85:38:4d:07:49:e0:a2:3a:d9:87:7d:2c:53:c9:f0:68:
         88:c9:fe:78:28:11:05:65:d1:66:95:af:38:c1:3e:05:52:4b:
         0c:92:63:12:80:16:c0:e5:51:51:1d:0d:0a:f7:7d:75:55:3d:
         15:cb:e5:0d:b9:0c:6f:85:b3:89:11:fd:0d:17:38:21:a4:dd:
         11:d1:3c:52:eb:c4:54:91:81:8f:9c:44:c5:88:f2:b1:a0:9a:
         ad:17:00:e2:9d:a8:90:f3:d0:e5:fe:ba:04:d2:ef:21:b7:cc:
         ad:67:3a:d6:c2:e3:6c:9f:a8:8e:e8:69:72:f1:14:39:80:05:
         a9:f7:fd:3e:9a:10:6b:da:99:ee:b2:40:41:68:63:57:97:b3:
         8a:96:ac:1b:96:00:38:e4:e5:60:8e:fc:91:76:82:09:92:80:
         62:aa:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:59:12 2024 by rpki-client on console-ams.rpki-client.org