Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
File:                     7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json)
Hash identifier:          n3iMrO9YSLk3yl6U8ZuCM0Y98leEP+u3wIpt2UORAo8=
Subject key identifier:   3A:FD:94:AD:81:06:56:BC:2D:77:52:30:54:09:CA:B7:D5:BA:2F:E6
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Certificate issuer:       /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial:       018F40E7FD9843489E5EE2B259D2E9AAE8A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
Manifest number:          0E55
Signing time:             Sat 04 May 2024 00:01:36 +0000
Manifest this update:     Sat 04 May 2024 00:01:36 +0000
Manifest next update:     Sun 05 May 2024 00:01:36 +0000
Files and hashes:         1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: 1UGIWObMt+x9JkoSQO3aJPQ3b4uhElcakwFv97h50CY=)
                          2: XUmxs4DhAzLNBuLGzUVEXN6GdXo.roa (hash: D68XlNj2mdySEYDrG+BPbqyqwQFh13I4bxYHFK+QOLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:e7:fd:98:43:48:9e:5e:e2:b2:59:d2:e9:aa:e8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
        Validity
            Not Before: May  4 00:01:36 2024 GMT
            Not After : May  5 00:01:36 2024 GMT
        Subject: CN=3afd94ad810656bc2d7752305409cab7d5ba2fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2c:42:08:6c:ea:51:11:92:62:04:ed:b9:a2:
                    de:a1:7f:e2:60:a7:e0:3d:29:11:7d:d7:d4:54:55:
                    28:6a:47:4a:f2:1f:ef:6c:5a:fe:88:63:a7:18:7c:
                    95:4c:67:9c:19:85:8f:fa:71:c6:3e:7c:22:5c:28:
                    2d:dd:c3:7e:8f:cc:6d:c2:e7:44:ae:95:d8:d5:ca:
                    10:a7:6c:81:73:f6:65:32:13:2b:be:df:36:e2:a3:
                    c3:e9:1b:09:08:fd:f3:89:33:90:77:7e:9f:0f:cc:
                    fc:8f:a1:0c:38:69:03:7a:3d:17:4b:ce:be:ed:15:
                    b5:99:33:57:03:76:8f:b8:3b:8c:38:ff:c5:8d:9a:
                    85:7d:b5:83:f4:7c:6e:46:b1:b0:14:51:32:08:61:
                    5b:69:68:bb:36:fd:4c:41:31:5a:47:e5:61:8e:fe:
                    7f:2f:35:cd:fb:d8:01:67:f9:c7:4b:f6:40:9b:bf:
                    50:d2:58:a2:c7:71:ce:03:57:89:c4:ee:e2:02:b0:
                    bf:03:8b:d4:7e:42:32:ab:33:4d:17:a6:ae:ee:ff:
                    33:8e:d7:4d:9f:5d:37:84:53:99:2e:a8:d8:51:12:
                    0c:05:6d:9d:38:84:d8:75:59:e1:1c:8a:fa:3f:52:
                    dd:3f:3a:09:c8:e8:f3:74:a9:f1:af:65:1a:be:b7:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FD:94:AD:81:06:56:BC:2D:77:52:30:54:09:CA:B7:D5:BA:2F:E6
            X509v3 Authority Key Identifier:
                keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:04:0e:70:39:22:e7:2b:78:01:ea:fa:4d:f7:bd:00:03:a5:
         20:45:c1:e1:55:3f:0e:b9:a2:c9:84:a0:5d:73:ab:27:78:ba:
         16:56:43:e9:58:4b:54:ec:4b:ac:e4:8e:cd:3f:53:a9:dd:dc:
         26:21:ac:65:bd:f3:c9:33:7b:c4:6a:b8:32:7b:84:6d:bb:80:
         fd:18:86:34:c2:d6:55:5d:69:1f:2a:18:35:51:31:20:75:44:
         d2:80:6b:ed:79:98:ab:b5:b1:f4:4d:e6:96:61:60:5d:f8:3c:
         54:87:3f:3f:e6:39:39:dc:d0:15:8b:3b:00:d0:43:88:b3:7d:
         6b:50:4f:74:6c:a3:da:38:06:b5:93:43:bb:39:11:33:66:7e:
         ef:f1:b5:52:eb:3b:c5:50:4d:c7:55:ee:02:68:57:f9:3e:ad:
         6c:18:57:27:5f:f1:f0:35:87:9b:6f:0f:83:52:5a:e3:85:11:
         c6:c7:17:bf:4c:5a:73:a5:0a:ed:30:7a:fd:e7:7d:d4:4c:59:
         1f:27:8f:56:42:3c:c5:d3:93:87:72:4c:de:42:45:29:6b:dd:
         8f:fc:b6:65:c8:61:9c:a9:02:0d:35:61:70:ff:5f:98:69:0b:
         41:4f:d0:fd:0d:9f:ef:2a:74:47:c1:be:59:67:04:a8:70:cb:
         dd:93:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:54 2024 by rpki-client on console-fra.rpki-client.org