Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          AzJhqpOr1iggF1jA0lR3+iP/V9olQsOm7GFawr7cJ9U=
Subject key identifier:   CA:E6:C0:AE:CE:E4:C7:03:3E:F0:B2:47:5E:3E:48:2A:D3:2E:49:34
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       018F2381F27035A713230D834A85C0D80A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          0E77
Signing time:             Sun 28 Apr 2024 07:01:09 +0000
Manifest this update:     Sun 28 Apr 2024 07:01:09 +0000
Manifest next update:     Mon 29 Apr 2024 07:01:09 +0000
Files and hashes:         1: 0FnhdMQCmf52NBJCNAWXUz8BWl8.roa (hash: f0R+1bBJLq2FNJPVZF0gaiiuvvfA/FIuGkWttv2ZvMk=)
                          2: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: 4Zi9Y0TpkyXLogAF/4E6xtjn8dXhagnHUCqtecXggnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:81:f2:70:35:a7:13:23:0d:83:4a:85:c0:d8:0a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Apr 28 07:01:09 2024 GMT
            Not After : Apr 29 07:01:09 2024 GMT
        Subject: CN=cae6c0aecee4c7033ef0b2475e3e482ad32e4934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:55:3b:e9:97:7b:02:51:94:ba:2c:68:e2:
                    37:89:dd:d7:68:f7:5e:63:e6:d8:6a:4d:3f:be:37:
                    f0:ce:18:89:29:4e:bd:55:43:a6:1d:48:96:fe:11:
                    7d:d5:11:a9:50:6a:b1:0e:79:69:28:89:04:76:6a:
                    99:bf:c9:49:d8:a8:9d:a6:88:20:c1:e8:65:8f:72:
                    c8:7b:bc:dc:49:48:27:42:04:1a:41:ad:45:d6:6a:
                    a9:e9:48:e5:11:a1:d1:85:0c:74:2c:69:3d:71:35:
                    97:3b:e4:31:28:ca:3f:79:34:f7:46:69:12:dc:4d:
                    ab:b6:a1:de:55:d9:97:a1:85:da:0f:dc:4f:7c:a0:
                    12:1b:19:4a:28:a9:b1:20:50:4d:ab:63:d6:d4:58:
                    25:a2:32:58:7f:aa:b9:cd:5b:61:95:b3:77:1d:dd:
                    c8:38:4b:d9:5e:52:2a:f3:96:f0:67:cf:1a:02:16:
                    30:e8:ae:16:86:ff:7e:22:a0:57:bf:de:36:27:46:
                    79:10:28:1b:35:57:e7:5f:5a:1a:18:d9:fe:55:e8:
                    3d:2f:61:7c:92:7c:28:91:5e:5b:3c:1d:e7:b4:22:
                    bb:2f:75:dd:d0:47:0c:2a:22:60:15:d6:22:c9:5e:
                    f6:7d:1f:84:98:c4:03:70:34:f1:16:42:0d:a5:8c:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E6:C0:AE:CE:E4:C7:03:3E:F0:B2:47:5E:3E:48:2A:D3:2E:49:34
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:f3:06:c1:be:fc:32:fb:6b:ef:30:c7:4e:82:65:ed:34:
         32:8e:09:66:b0:1e:14:fe:5a:c6:df:65:46:1e:63:95:bf:91:
         22:58:6a:66:67:48:4f:e4:a3:ee:c9:57:8a:59:cd:75:c0:8e:
         2f:e4:ae:b5:8f:95:8d:08:c9:5d:68:50:5a:c7:da:4c:ae:ac:
         81:a2:fe:24:aa:d2:94:be:11:be:ca:a5:a5:3f:3b:8b:24:a9:
         be:c2:a5:09:f6:fb:98:95:4d:7e:a7:7e:34:c8:df:7e:3b:05:
         cc:dd:aa:55:a9:21:a5:f3:82:66:79:e9:26:2c:23:06:e5:77:
         cc:44:fe:73:26:a3:3c:b6:3f:d5:17:6d:74:6f:9d:01:f2:53:
         9f:c6:b0:95:98:c4:bd:76:7a:d4:c8:1d:5f:ba:bc:11:08:a3:
         95:6d:63:3d:0d:fc:68:7d:62:f8:14:78:bc:4d:44:68:f6:dc:
         28:80:84:eb:aa:b4:ae:e8:7d:39:bb:e8:83:d2:04:cb:50:65:
         22:d5:be:67:70:f1:7a:17:cf:c9:5a:a0:18:0a:18:85:77:e8:
         15:41:ba:5c:da:df:97:e1:f5:36:5c:3e:41:0a:c4:7b:79:e7:
         67:8e:fa:4f:10:10:bf:c0:ab:b0:c0:36:0c:51:90:0e:50:15:
         8c:23:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:35:31 2024 by rpki-client on console-fra.rpki-client.org