Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File:                     fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier:          lC4sjUJthGKIGyUx6MptZLZxlPGlSks/6KIWvQU/sIk=
Subject key identifier:   8F:14:5E:3F:21:59:8B:D7:1A:4F:11:E1:42:3B:AF:94:0F:6F:58:6C
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer:       /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial:       01907087251A6B42D58F0AEE0F97668914C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number:          39
Signing time:             Mon 01 Jul 2024 23:00:23 +0000
Manifest this update:     Mon 01 Jul 2024 23:00:23 +0000
Manifest next update:     Tue 02 Jul 2024 23:00:23 +0000
Files and hashes:         1: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: w4h8aCHiuu1sDSb9refjYsNe1a/W/sl/bJIj9BfmB5w=)
                          2: moO0u0O2gZF55Ae0JSxHBziU23M.roa (hash: imCpS88PEfNCtItHpZMsgm+2HxJ9DQabz4AC/P6jvIA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 21:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:70:87:25:1a:6b:42:d5:8f:0a:ee:0f:97:66:89:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
        Validity
            Not Before: Jul  1 23:00:23 2024 GMT
            Not After : Jul  2 23:00:23 2024 GMT
        Subject: CN=8f145e3f21598bd71a4f11e1423baf940f6f586c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:fd:22:9c:2c:85:56:85:a9:df:3b:fa:31:
                    f9:47:44:66:0e:00:3c:80:64:13:04:5e:38:8d:f7:
                    0d:a0:82:7c:2e:58:46:80:fa:a9:da:16:ab:f9:8d:
                    66:a9:a1:ee:0c:fa:95:d7:a3:a4:e7:aa:92:be:3a:
                    ab:b8:64:04:84:04:1e:ee:e5:41:ea:c7:8e:66:20:
                    7a:ee:45:1c:bd:2b:63:9c:1a:5e:18:52:83:cd:2d:
                    58:f4:53:24:99:22:8c:59:41:d5:12:19:71:88:09:
                    04:4f:1a:3f:54:be:18:f9:69:96:4f:d0:71:90:ef:
                    b2:99:af:2d:ab:b7:66:2e:f3:8c:09:35:a3:84:e5:
                    0f:c5:cf:46:1f:16:c4:19:7a:4f:72:41:11:8e:5d:
                    7c:c2:31:12:76:53:dd:c7:50:52:16:8b:4c:f5:78:
                    0d:ad:25:c8:af:d6:07:97:c3:2e:39:83:35:a4:5d:
                    77:26:e4:4b:75:a4:26:45:0f:18:81:51:c5:66:a0:
                    f4:9f:13:a5:a9:0a:fd:79:bd:a9:8e:0e:a6:e3:28:
                    c4:e4:92:5e:bb:0f:08:59:32:77:71:f8:99:60:b8:
                    ab:a3:03:19:8c:4d:8f:72:8a:61:a8:92:4e:74:3e:
                    a0:4b:65:47:e2:58:b2:24:39:c3:72:ed:86:52:e4:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:14:5E:3F:21:59:8B:D7:1A:4F:11:E1:42:3B:AF:94:0F:6F:58:6C
            X509v3 Authority Key Identifier:
                keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9b:4c:66:bc:ed:4f:62:aa:74:0b:06:18:d8:b5:9e:53:fa:
         48:49:83:d6:97:b4:d5:76:51:46:7d:fb:63:5f:1d:eb:b9:67:
         1c:3a:7c:a2:2c:2a:3b:6a:a3:b4:e7:1c:f6:09:67:d0:95:d5:
         ae:95:9e:b2:54:4f:a7:df:d7:1f:34:68:33:49:86:81:1a:d9:
         02:12:0c:ee:6d:e4:0d:60:32:a0:d2:81:71:25:0f:2d:a5:4f:
         ca:f7:f7:23:ae:72:47:77:24:cf:d3:d4:7c:fe:81:06:ad:24:
         6b:08:a3:78:97:03:0f:c4:9d:2d:db:73:b9:ed:d0:a0:9d:23:
         ef:ee:fd:eb:7b:0c:52:9f:93:5c:85:54:85:7c:19:cd:7d:8b:
         be:06:15:4d:b5:e4:29:69:dd:40:a6:e4:56:9d:24:77:54:9b:
         a9:b9:dc:cd:3d:48:fe:7c:48:7e:9d:b9:4f:d5:02:04:e0:bd:
         ac:37:49:60:02:4a:ad:27:cd:77:00:98:6f:10:de:b0:e2:da:
         3f:84:23:98:49:70:fd:4c:84:a4:e3:c5:c7:ba:78:ad:3e:be:
         5d:0c:dd:6b:9c:57:8e:cb:22:63:52:b6:f7:23:d4:d6:9e:7f:
         75:9b:9c:c2:64:a4:78:9b:62:d0:53:9f:53:12:e8:3f:c0:5f:
         6d:e7:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 00:10:36 2024 by rpki-client on console-fra.rpki-client.org