Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          qn/bHwYWEFBv0hOUz/hOgYJNKgmp316MEDpdLKW7G74=
Subject key identifier:   A8:7F:3D:39:8F:55:75:AA:FE:AE:DB:C8:96:19:D2:A3:4D:CB:D6:F6
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       018F22DD95DDA4A7A425F32696909167D3E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          10D7
Signing time:             Sun 28 Apr 2024 04:01:38 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:38 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:38 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: Rzu2ZvRFCUh6R5cgCbwv1zbFwpb/Xr1QpfPSxjPMGl4=)
                          2: CFgfumA6eVbdyiTFC9BHJp42GfE.roa (hash: oFBXnKcPnVTkxujnsJ/QBxuD4X+2KW/MSJq1V1POY4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:95:dd:a4:a7:a4:25:f3:26:96:90:91:67:d3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Apr 28 04:01:38 2024 GMT
            Not After : Apr 29 04:01:38 2024 GMT
        Subject: CN=a87f3d398f5575aafeaedbc89619d2a34dcbd6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:a9:34:57:ed:bb:5f:4e:de:46:91:b8:0a:
                    67:fd:fe:5e:0d:25:8c:cf:10:ee:bf:9e:54:df:bb:
                    25:d9:ee:74:11:9b:69:04:d9:7e:47:33:5b:48:df:
                    59:6e:42:aa:f3:f7:26:5b:8d:8a:d9:21:7a:c6:33:
                    b0:c2:f9:76:5c:f5:7f:04:ff:e7:f8:0b:0b:10:45:
                    5b:d8:a4:9b:7e:b2:7c:cd:6a:d6:9b:c9:5a:1c:62:
                    42:3a:f5:61:8b:11:d9:d9:33:17:7e:84:5d:bf:c2:
                    fd:11:56:20:58:38:86:42:94:40:54:ba:ca:6a:49:
                    79:7c:a0:02:f4:67:a3:5d:02:b2:cc:04:cc:e0:38:
                    9d:e8:30:0f:70:f8:55:4c:72:d5:c1:a4:16:5c:8b:
                    c6:77:32:ae:71:11:3f:bf:b9:a3:3d:01:2c:3c:55:
                    a4:e2:da:3a:11:a0:de:ff:a7:5b:95:98:f9:3f:a7:
                    31:07:ec:e9:8c:14:1c:dc:7b:8f:dc:28:d4:cb:f2:
                    0f:e0:7e:7d:ca:19:4b:97:29:18:2e:5c:93:d6:bb:
                    fa:64:82:ca:8c:97:7d:10:82:3f:9e:a6:31:e2:3d:
                    8f:48:7f:c1:eb:90:ea:9c:4a:e5:fa:60:9e:7a:85:
                    dc:3c:cb:63:24:e2:23:8b:6e:92:e1:30:83:c1:b1:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7F:3D:39:8F:55:75:AA:FE:AE:DB:C8:96:19:D2:A3:4D:CB:D6:F6
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:96:8e:05:c4:6f:b2:6a:1e:cc:76:a1:e4:22:0c:53:f8:b0:
         75:4e:9e:5e:a6:7e:9d:b8:16:92:c9:d9:fd:8e:f2:1d:4f:19:
         f3:ba:a8:97:29:67:b2:bb:53:44:c8:b1:17:da:4a:12:14:28:
         11:6e:70:a7:a1:d4:91:19:f3:7b:8c:a8:da:08:f1:21:da:5f:
         70:7f:aa:a6:c2:53:94:26:66:f2:90:1a:9a:81:32:73:47:a2:
         a0:dc:23:8a:92:28:60:f5:df:b4:d8:7e:f3:a2:a2:94:98:24:
         8e:39:b8:fb:18:19:e0:a0:91:2e:e8:ae:88:a4:b5:8b:a4:6e:
         60:bc:81:f2:97:bb:fb:0e:3b:14:95:71:34:0f:b0:61:af:9c:
         2e:bc:a6:af:6d:63:2a:2f:16:30:d9:36:c1:47:7b:a0:ef:9d:
         fa:19:9f:d3:95:4f:4b:83:18:ad:33:94:76:2d:d0:d3:0c:03:
         a5:8d:f7:70:cf:f5:b7:f3:b7:e4:a6:78:40:8b:56:3d:bc:f2:
         d4:b9:38:f7:56:ad:87:63:e3:0d:d3:91:55:d7:db:74:f6:2e:
         f3:a9:b0:ee:46:3d:6c:53:3d:9f:27:77:76:02:db:4a:6c:cf:
         71:bc:c2:80:c3:cc:9c:2a:d3:5a:b1:c8:bb:a1:21:f6:65:ec:
         d6:4a:4d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:11:38 2024 by rpki-client on console-ams.rpki-client.org