Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File:                     7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier:          t9okBVLjfN/C8Ue7aE0DpSSe3cqBmCaclEYsBvwFO1Q=
Subject key identifier:   88:81:EA:AA:8A:FC:99:2E:10:7B:97:FB:F8:5C:EC:BD:24:99:52:B1
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer:       /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial:       018F532693EDEEF5129AD13447D79535C0FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number:          1167
Signing time:             Tue 07 May 2024 13:03:08 +0000
Manifest this update:     Tue 07 May 2024 13:03:08 +0000
Manifest next update:     Wed 08 May 2024 13:03:08 +0000
Files and hashes:         1: 6WuJDLqkK5Z2xYhmx8u-BtyhDdY.roa (hash: Z9if4/2cziiCIHbICv5He2M3Y8yqRKqweMqrZaw0Dls=)
                          2: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: YkqMgENliJRkRF5Df51+C42TQmL7IHBs6rQIY8f6dfo=)
                          3: z1axDLzgcCtonhdmi2sKkKra3kI.roa (hash: qozlQVNqM5uEiSHvOmk4GEKYMvchvDy8p9FGtwuIAMo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:93:ed:ee:f5:12:9a:d1:34:47:d7:95:35:c0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
        Validity
            Not Before: May  7 13:03:08 2024 GMT
            Not After : May  8 13:03:08 2024 GMT
        Subject: CN=8881eaaa8afc992e107b97fbf85cecbd249952b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:3f:22:15:fd:ce:77:7c:2c:48:2f:dd:5b:
                    21:03:5f:f1:c9:66:63:5b:72:17:0e:84:a3:f0:0a:
                    b5:c0:7b:3f:74:a5:b0:06:65:61:6a:c3:e3:29:f2:
                    81:2c:39:a7:12:7c:84:3a:b4:ac:70:50:80:bc:37:
                    2a:11:68:13:ad:59:8c:0e:2e:92:f5:80:57:83:bf:
                    79:2e:58:a9:ae:5d:32:49:3b:5a:a7:0b:78:e6:43:
                    b0:41:2b:52:10:c7:ad:94:05:6e:d4:0e:b8:57:f0:
                    f1:6d:a6:3c:8f:06:42:b8:f3:41:41:40:11:db:72:
                    60:fb:08:b9:cb:ed:5a:e3:7b:8c:d8:c7:d3:49:90:
                    ce:93:86:84:96:e4:05:8c:a9:21:02:fb:dd:2d:a8:
                    6d:af:fb:32:0a:2a:25:21:62:b4:c4:69:5d:4d:b5:
                    c1:d1:5b:50:10:97:a0:28:ec:65:a3:94:ca:62:07:
                    d4:b4:cd:b3:e4:9f:50:76:a8:10:b0:61:2c:b5:2f:
                    66:e0:c2:db:56:51:31:c9:fb:d4:91:2f:07:9a:3f:
                    4f:78:8d:46:f5:30:fb:9a:49:3e:4c:a4:1a:4b:63:
                    4f:0c:fd:3f:79:6a:ee:33:18:c6:73:79:a4:1b:42:
                    b0:14:b6:6e:d8:32:3f:c5:84:5e:10:7f:31:0d:d8:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:81:EA:AA:8A:FC:99:2E:10:7B:97:FB:F8:5C:EC:BD:24:99:52:B1
            X509v3 Authority Key Identifier:
                keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:68:e4:e0:c4:e4:fa:5e:19:54:0c:c9:71:e5:73:10:cc:ba:
         04:74:32:50:e2:db:c0:c8:7c:13:b8:3c:a7:1b:e7:81:b4:fa:
         6f:07:47:88:40:e4:0c:f1:3b:84:d6:bc:d7:ca:e5:1e:d4:3e:
         6f:a4:34:d7:7b:06:26:33:34:e7:c6:7e:bb:54:5d:09:0f:4b:
         98:8c:da:33:fe:05:10:99:f9:02:8c:3d:ab:b8:35:f3:9a:97:
         71:38:8a:01:64:18:d0:86:aa:cb:75:82:12:0c:2a:84:5e:d6:
         5f:e5:ec:56:f7:d9:14:f9:96:cf:a8:dd:4a:f5:f9:29:da:0f:
         b0:fe:df:0f:d7:7b:60:f4:e5:36:c8:6b:49:fd:21:71:db:c8:
         b1:22:b0:8a:e6:7e:cd:f3:6a:c3:09:1a:c5:fe:c2:8b:6a:87:
         c3:57:96:40:67:88:20:bf:94:48:bb:78:d6:26:c3:44:08:00:
         cf:cc:83:55:54:04:21:91:89:d7:e5:b3:da:1b:66:54:ac:14:
         a1:0b:01:55:81:ad:cb:6b:b5:da:94:36:7e:86:e3:11:57:d3:
         f0:36:8f:b7:ef:6c:5e:b0:5c:50:1e:aa:72:b7:98:b8:75:d0:
         81:9d:79:4b:58:36:37:d7:ee:14:0b:99:e4:87:03:73:4d:96:
         4c:05:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:45:45 2024 by rpki-client on console-fra.rpki-client.org