Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File:                     7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier:          J6l6jkyEzvvGMPMgYs+QXNsCv8N3AoxL8cxYgfVg36Y=
Subject key identifier:   90:E0:A0:FC:B1:80:82:62:AA:C3:59:C8:1A:61:C0:4C:5E:83:DD:2F
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer:       /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial:       018F23B8A5A12010EC04621284143BAA983B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number:          05A7
Signing time:             Sun 28 Apr 2024 08:00:54 +0000
Manifest this update:     Sun 28 Apr 2024 08:00:54 +0000
Manifest next update:     Mon 29 Apr 2024 08:00:54 +0000
Files and hashes:         1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: U589PAV8AC5Nr2WOQgcmgouVR6OAoCqxGHGpEkJ2wu8=)
                          2: sH0MKQ4NZ54uORR1_9i1QCnkgUw.roa (hash: Iy2uEuDAru/S6FbTyt4WECDGymswGaSuFdlQTSJMfKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:b8:a5:a1:20:10:ec:04:62:12:84:14:3b:aa:98:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
        Validity
            Not Before: Apr 28 08:00:54 2024 GMT
            Not After : Apr 29 08:00:54 2024 GMT
        Subject: CN=90e0a0fcb1808262aac359c81a61c04c5e83dd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:b7:01:3c:60:a5:5c:21:aa:a5:50:bc:50:
                    8a:24:30:41:99:e2:00:af:2e:51:0d:df:90:ec:4d:
                    b6:6d:67:13:07:31:ee:33:e5:1b:33:12:ad:76:97:
                    3f:e7:59:7e:e0:a5:29:30:2f:07:50:51:d5:98:df:
                    88:e2:a5:39:dc:80:37:83:6b:ee:11:8d:8b:71:ee:
                    ef:f4:8b:b9:d8:ac:d3:b1:6e:7d:1f:aa:ad:b5:f8:
                    b1:50:31:2f:f2:f1:f4:18:fe:d0:fc:cc:7f:0d:07:
                    fd:b1:37:28:b5:07:9b:62:66:c4:dc:08:93:49:33:
                    68:3d:94:79:c3:24:2b:53:88:a7:a6:a8:4d:67:57:
                    cd:6c:c8:f2:3b:20:0e:fe:c5:ad:28:93:8b:8b:cc:
                    cf:37:b6:17:16:97:10:d4:55:26:98:a5:81:c0:38:
                    ba:d6:98:34:7e:74:64:15:57:dc:63:c7:08:53:af:
                    29:a8:ff:ca:21:21:a7:ec:b6:3c:34:b4:38:52:28:
                    98:0c:2c:98:41:7c:73:3b:5d:42:29:29:de:b7:7e:
                    c1:92:60:6b:d2:a8:df:0d:75:76:30:81:49:c8:59:
                    70:c6:c5:36:57:a5:a6:d3:91:44:66:c3:09:aa:9f:
                    d3:63:18:97:91:12:93:a9:52:cc:21:2d:d7:b3:da:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E0:A0:FC:B1:80:82:62:AA:C3:59:C8:1A:61:C0:4C:5E:83:DD:2F
            X509v3 Authority Key Identifier:
                keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1a:5b:8c:38:5f:dc:1c:17:ae:90:d2:44:04:c0:e3:1b:8a:
         2b:f2:7b:ef:6c:57:5d:ad:38:10:01:25:29:2a:f9:99:8f:7d:
         61:c1:43:99:87:ff:9f:9d:6b:05:1a:d5:db:5d:1f:66:dd:13:
         cd:7c:bb:fa:a2:89:54:6a:8f:c7:3a:2c:5e:f6:a9:cd:15:3d:
         3f:3c:f8:7b:38:38:38:57:8e:a6:44:e2:7e:6e:5a:9f:34:86:
         9c:c1:f3:ed:da:c0:1c:05:d9:0b:8e:ac:92:36:36:3f:06:64:
         4e:f8:4c:6a:32:2b:84:69:0b:fb:51:53:52:12:7e:c8:9a:b3:
         12:cc:5b:cc:75:0a:67:f4:af:bf:79:e1:1a:d1:78:e4:a9:3d:
         e7:a7:86:bc:5a:a2:63:d9:f7:02:6f:9b:4a:f5:61:51:fd:46:
         00:7f:ac:ac:d7:36:b5:46:e3:0a:91:34:ae:5a:1f:10:1e:0d:
         bc:ef:4f:8d:f0:5a:15:d0:c7:87:8c:c2:13:0d:59:9e:db:25:
         59:9e:f5:3c:b4:d1:e1:b7:6a:50:1e:ab:9d:26:72:17:86:e5:
         ba:17:d4:14:4f:92:3d:eb:09:f0:82:9a:01:c2:0c:60:e7:d3:
         f4:ed:b2:75:b4:de:22:29:e8:b2:c8:9e:bc:93:98:de:1e:60:
         dc:a4:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:13:14 2024 by rpki-client on console-ams.rpki-client.org