Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File:                     7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier:          DIabIyuVkN/iBLiitWjtWadqn1llCUiI3efherfDVQg=
Subject key identifier:   5D:75:70:89:F4:5E:1C:16:18:03:63:60:80:58:15:C3:5B:B9:0D:C1
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer:       /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial:       018F479029DCDDEAF5B9F12EA6CB31AA9B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number:          03C8
Signing time:             Sun 05 May 2024 07:03:01 +0000
Manifest this update:     Sun 05 May 2024 07:03:01 +0000
Manifest next update:     Mon 06 May 2024 07:03:01 +0000
Files and hashes:         1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: Ta3AyVeBHSgcgztiddaD+vc2utvUn2rgndoqdwm/ZmM=)
                          2: 8dvjc1GD5UexScXj9MISlSPdCeg.roa (hash: z3aYDUtRgxZsVk+oUibdwQb6O5jmgTOkxJfBIRzviaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:90:29:dc:dd:ea:f5:b9:f1:2e:a6:cb:31:aa:9b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
        Validity
            Not Before: May  5 07:03:01 2024 GMT
            Not After : May  6 07:03:01 2024 GMT
        Subject: CN=5d757089f45e1c1618036360805815c35bb90dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:49:1d:a7:9a:42:ba:0a:a9:5f:13:78:23:
                    fb:f8:22:86:13:94:c9:05:47:c0:74:e7:f3:45:c1:
                    fe:51:11:0d:33:3a:85:6e:ac:f1:23:b3:1a:8a:43:
                    6f:cd:06:5a:74:b2:f4:be:17:16:3f:2d:02:b3:74:
                    02:f5:59:d6:4a:67:db:3d:ae:ed:fe:7f:b4:04:1c:
                    0b:22:ba:ee:06:97:f5:a6:6e:0c:63:b7:e6:05:13:
                    cb:cf:25:6c:73:1f:f8:8f:55:0f:cf:2d:6b:36:5b:
                    50:17:3a:f7:fc:88:00:b5:2f:2f:85:68:a3:67:93:
                    d3:33:db:ba:b7:03:96:b4:0d:c3:da:b9:82:3c:91:
                    bf:52:8d:1b:94:d7:ab:d4:36:e4:54:bb:e9:e7:0c:
                    de:ae:b4:ed:94:d8:10:30:51:b3:68:6e:b3:79:0a:
                    94:82:d3:73:5e:ab:b0:c0:03:01:19:1e:9b:d2:8a:
                    60:e7:f1:f8:9a:22:18:69:a1:37:cd:6b:c8:e4:84:
                    7a:6a:eb:65:c5:c6:be:65:14:ee:9c:10:c7:d9:13:
                    7f:2f:e4:a8:f9:26:02:8d:ac:6e:17:ca:64:59:e3:
                    60:b2:2b:09:d3:84:10:98:c8:1a:4d:bd:be:f9:f8:
                    83:3d:05:84:0d:a6:ac:75:46:09:a0:1d:bf:1a:46:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:70:89:F4:5E:1C:16:18:03:63:60:80:58:15:C3:5B:B9:0D:C1
            X509v3 Authority Key Identifier:
                keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:40:d3:d9:3e:78:0b:ea:9b:b0:0a:38:48:62:3f:88:aa:
         e1:97:35:74:d7:1d:58:ea:a4:3a:9a:6f:ed:bf:13:26:aa:70:
         b2:41:c9:46:65:3c:dc:d1:e5:81:4b:af:26:a9:31:e3:7e:d0:
         72:af:7b:dc:d5:ea:5f:0d:4b:2e:20:07:c2:05:63:13:2e:12:
         45:b1:dc:5c:fd:86:73:1c:54:c5:1f:c9:d3:18:c5:ff:08:ec:
         71:61:ab:79:56:36:1d:ed:57:f7:d8:c9:26:77:85:78:a7:13:
         a7:9a:d0:dc:15:6a:e4:ff:a9:1a:46:08:65:3d:ae:25:69:e3:
         56:a1:2c:8e:fa:40:49:c4:5d:1c:52:0c:0a:83:01:25:a1:24:
         14:14:1b:fc:e8:f2:ee:f0:ee:8b:03:9b:95:b9:97:db:be:6b:
         fa:d3:ba:db:23:68:32:8f:c2:b1:78:d5:62:36:f1:ba:a2:fb:
         96:68:d8:e2:60:0a:a0:9e:18:a9:9f:4b:ce:db:e9:6c:a7:6a:
         d0:65:62:e2:fb:06:34:65:ae:ec:ba:f2:d9:3f:5d:71:fe:18:
         ff:e9:b5:83:38:ae:28:29:bb:72:7c:db:d1:d4:95:30:8f:76:
         76:cf:70:97:3c:d5:3a:e2:5d:00:d7:29:c6:ff:da:31:f3:dd:
         16:cc:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:04:45 2024 by rpki-client on console-fra.rpki-client.org