Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
File:                     sUJ73NR8eEMfZioIWJAFrLULk0E.mft (raw, json)
Hash identifier:          cXh7cNrGpMhJIEA1c0cMTkaXtPgn69E4lwBw9GARWoY=
Subject key identifier:   E2:D5:FC:35:13:9B:FC:32:9C:7D:B5:E7:42:41:FC:AB:93:91:B7:D0
Authority key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Certificate issuer:       /CN=b1427bdcd47c78431f662a08589005acb50b9341
Certificate serial:       018F87ED7DDE3D9EB2899124876BB43872B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
Manifest number:          073E
Signing time:             Fri 17 May 2024 19:00:39 +0000
Manifest this update:     Fri 17 May 2024 19:00:39 +0000
Manifest next update:     Sat 18 May 2024 19:00:39 +0000
Files and hashes:         1: INBgK1MYGzmciVM3XCCmgc0AJ4E.roa (hash: uo5/TOOJj1ebGbYc/0PMkFiqgxM2KczSp2bMmpi323I=)
                          2: sUJ73NR8eEMfZioIWJAFrLULk0E.crl (hash: 9ANJ0HgylDSOH6clZ7nPTNA8wnQoaotW7CID8jDSn5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7d:de:3d:9e:b2:89:91:24:87:6b:b4:38:72:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1427bdcd47c78431f662a08589005acb50b9341
        Validity
            Not Before: May 17 19:00:39 2024 GMT
            Not After : May 18 19:00:39 2024 GMT
        Subject: CN=e2d5fc35139bfc329c7db5e74241fcab9391b7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:d0:62:58:70:f3:a1:1d:7f:69:a4:35:fe:
                    43:0b:10:5e:71:90:27:3d:f0:c4:3f:3a:2b:14:38:
                    46:93:22:e6:2e:8b:44:b3:b8:63:dc:0d:6d:18:c0:
                    92:32:18:2e:12:2f:34:13:c8:e9:36:e6:59:ea:cc:
                    e7:46:e5:af:7d:1f:b1:8b:ba:03:a3:dd:47:24:56:
                    18:49:e3:76:53:c7:de:0b:8b:32:82:83:b4:2a:69:
                    bc:8d:9c:8f:55:b6:8b:16:31:e3:37:7c:33:3d:8f:
                    74:18:25:63:52:29:38:03:a6:c7:b1:8c:da:94:3d:
                    a9:67:b9:02:3c:14:36:01:04:32:d7:b5:9c:7f:04:
                    8e:e6:34:12:b8:c4:1d:5c:a0:1e:a8:7e:74:9d:57:
                    b0:05:a5:44:f1:6b:4f:a4:6b:76:77:df:36:17:fb:
                    36:28:b8:89:46:90:2a:65:7f:a7:df:cf:2a:3d:01:
                    43:1e:1c:2d:8b:03:3b:9d:88:cc:44:50:df:b9:41:
                    c0:1d:64:86:47:12:cf:d6:35:e1:a2:7b:ea:2a:bc:
                    32:e1:36:f8:3d:9d:0a:86:c4:9d:09:78:8f:27:eb:
                    7e:14:8a:2c:f7:f9:c3:57:ae:e5:aa:ac:44:eb:c6:
                    3f:e0:c3:68:5d:6c:8d:be:bb:1e:25:fa:65:c4:e7:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D5:FC:35:13:9B:FC:32:9C:7D:B5:E7:42:41:FC:AB:93:91:B7:D0
            X509v3 Authority Key Identifier:
                keyid:B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:39:1e:e8:91:a4:9a:e9:72:e6:86:65:a2:6c:bf:b3:52:10:
         66:df:92:05:37:a1:66:ad:8d:6b:86:31:24:24:c1:bc:7b:7c:
         8a:0f:ce:b9:5b:88:de:9e:ee:74:77:3f:99:49:91:f2:ca:8e:
         62:8a:e0:bc:ea:40:8e:d3:e5:b1:29:f6:39:9a:a0:f4:6e:87:
         1b:b0:19:f8:3e:df:3c:8d:21:87:ec:f9:dc:c0:8d:54:1b:0f:
         fe:8e:0c:71:f6:6e:94:48:0b:a6:d9:3c:5c:d4:80:70:e2:ac:
         37:86:9a:58:f3:e8:48:ca:c1:25:49:c1:ea:52:17:35:87:ff:
         ba:93:9a:1c:ac:df:f1:3e:9f:73:11:eb:60:78:bc:ed:18:b8:
         e3:de:47:79:54:d9:12:c6:eb:dc:b1:ad:e9:30:1e:39:1c:1c:
         4c:d8:36:de:11:8e:01:4e:77:49:fc:af:4b:d7:0d:86:6b:6c:
         23:59:3f:c3:92:6c:57:bf:29:84:d6:2b:08:4d:1c:b6:cd:6f:
         e3:56:5e:d2:76:8f:d6:ee:91:cd:56:d5:46:4b:70:b1:3c:e6:
         c7:95:d5:43:ee:d8:4b:19:fa:ed:cd:f5:1b:82:72:59:12:05:
         cc:58:11:d2:1d:78:d5:b0:11:35:c5:f2:b9:ef:ac:d3:a3:11:
         92:5a:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:48 2024 by rpki-client on console-ams.rpki-client.org