Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File:                     a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier:          tbxD/ZA/7QQDYGeBQVB8orLa1uLzfxquo0tGggaTBVM=
Subject key identifier:   9A:2A:01:19:DE:E2:8B:86:24:E5:10:B2:19:17:0C:85:92:42:F7:18
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer:       /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial:       018F874B764A75D88AE8FD5E8893A440420A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:03:40 +0000
Manifest this update:     Fri 17 May 2024 16:03:40 +0000
Manifest next update:     Sat 18 May 2024 16:03:40 +0000
Files and hashes:         1: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: 0I0wv9kae1ntDxlnLNQYpVRKeBPmN91znPFdcq/i4bE=)
                          2: oqamxN5aBvpJ7yR5XsjIYiZKDUE.roa (hash: xW4GdNkPllxpOYFhSLCsfdm2y0BcteI6rD3MR7qzUX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:76:4a:75:d8:8a:e8:fd:5e:88:93:a4:40:42:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
        Validity
            Not Before: May 17 16:03:40 2024 GMT
            Not After : May 18 16:03:40 2024 GMT
        Subject: CN=9a2a0119dee28b8624e510b219170c859242f718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:76:61:f8:7b:97:88:71:b4:24:64:2e:1e:
                    be:ad:43:0f:db:17:a7:c6:f7:be:c6:af:dc:50:85:
                    e6:f1:1c:0e:1f:7e:b5:8e:ad:9b:c4:3c:46:b8:ea:
                    60:43:be:ef:fb:d7:48:92:8f:71:d8:c0:a9:0c:58:
                    a9:df:9d:ed:db:3b:b5:b0:b1:fb:9b:17:e4:60:16:
                    38:34:f3:59:2f:fd:8a:89:4d:71:6b:7c:c8:ac:f9:
                    20:d0:96:99:7b:80:a8:47:41:76:7f:c6:36:7d:73:
                    b9:70:89:a3:b4:3a:50:30:b5:f8:74:e1:bc:87:50:
                    10:ee:f5:bb:f4:40:26:d2:cd:95:75:6a:9b:f1:07:
                    55:d1:ac:ab:68:d3:a3:d8:7a:05:4a:62:63:f3:45:
                    50:3d:e5:ea:d6:87:9d:02:04:cb:fe:a4:58:54:54:
                    a4:99:f6:62:88:bb:6e:66:fc:f2:31:f2:5c:e4:1c:
                    d6:60:d2:21:bc:99:14:22:e9:ad:7d:b1:49:92:bc:
                    4e:64:15:fb:b8:2e:4b:e7:e3:b6:9a:a2:93:bf:39:
                    21:89:a3:9a:e3:cd:3e:39:0c:94:f4:89:a9:85:41:
                    69:05:a8:41:04:fd:f2:7e:4d:16:b6:fe:08:66:c1:
                    f9:3d:a4:ae:a4:a9:75:a9:8c:57:71:29:0e:ab:60:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2A:01:19:DE:E2:8B:86:24:E5:10:B2:19:17:0C:85:92:42:F7:18
            X509v3 Authority Key Identifier:
                keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:d8:a5:71:93:9e:5b:b9:9f:68:75:c1:4c:06:b4:14:64:
         6a:bf:f4:1b:e0:34:cc:c1:f6:f7:6c:62:2c:4d:07:08:f2:0f:
         15:22:43:e1:15:28:c5:40:b7:a5:1b:c9:88:02:eb:97:47:fa:
         57:dc:be:f5:84:2f:8c:61:62:85:ce:eb:68:61:66:a3:20:89:
         76:76:ae:ae:fe:27:04:e1:69:18:40:2f:d2:a1:e9:e2:07:8a:
         ba:57:b0:54:ad:9c:8d:bc:ca:99:81:6b:70:87:6e:4f:85:cc:
         9c:21:60:09:19:4d:c4:2b:2f:cd:a4:4a:72:29:4f:5d:ed:71:
         87:d3:9e:7e:b2:8a:b9:5b:a2:b2:ea:56:46:e9:66:92:bf:66:
         84:f0:ee:6f:d5:28:a7:13:36:aa:35:3d:87:b9:a5:07:c9:7b:
         a3:22:44:89:b8:3b:1d:0e:d1:f8:4c:0d:f3:04:b4:f5:62:d9:
         e3:ac:c4:7b:1c:e2:9a:00:ec:34:ac:5e:c9:84:ef:ca:f3:07:
         25:ba:30:72:8c:99:34:a8:d6:2b:88:0e:10:a4:d2:a4:f2:7a:
         a3:66:e4:12:bf:89:f6:c7:ac:b2:bf:b2:f5:7b:47:15:df:06:
         65:ca:1c:4a:76:6b:c1:7e:f0:62:58:06:1e:e6:d6:0f:f6:1a:
         70:a2:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:36 2024 by rpki-client on console-fra.rpki-client.org