Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          ogdLhtlmXC3I7/PlICpLXPoAeVvDXrbpwHFewKIe188=
Subject key identifier:   47:A7:95:A0:9D:8C:C4:05:E9:7F:CD:03:46:1F:60:56:22:A3:78:8F
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       018FD71BAF4602023F9A1242141D8D288F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          073F
Signing time:             Sun 02 Jun 2024 04:01:06 +0000
Manifest this update:     Sun 02 Jun 2024 04:01:06 +0000
Manifest next update:     Mon 03 Jun 2024 04:01:06 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: 1Q/L37/DnGy+ankSGgSQCXzl7Egg0IwKHDOFNiqT+rc=)
                          2: TdonjEDoXmoVbzxcAzY0W6zp2i8.roa (hash: mj7HWkoEk+RuSWFSNdIHsYB0Xt9oGY8lsmO0KXk+hog=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d7:1b:af:46:02:02:3f:9a:12:42:14:1d:8d:28:8f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Jun  2 04:01:06 2024 GMT
            Not After : Jun  3 04:01:06 2024 GMT
        Subject: CN=47a795a09d8cc405e97fcd03461f605622a3788f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:fa:53:8f:f6:93:ee:7a:88:19:1a:9b:fb:
                    15:52:dd:ff:23:bc:1a:28:ed:c9:57:25:91:ac:b1:
                    0a:d7:28:dd:d2:9b:1d:8e:6f:7a:45:97:d5:30:23:
                    a9:0b:9a:20:d0:78:6e:72:49:bd:ce:2e:09:4d:1e:
                    4b:28:16:ba:c5:91:a8:d3:e7:75:ba:9e:6f:80:b2:
                    e1:f7:11:09:30:98:20:3a:71:df:f8:80:ae:38:ba:
                    10:c3:06:ac:01:52:d8:e0:8d:6f:27:e4:4e:60:b0:
                    59:ed:40:77:02:84:5e:cc:9b:ca:0f:94:9a:ff:fa:
                    4c:92:ea:1d:f2:73:3f:14:da:37:06:a1:9f:e7:59:
                    bc:a8:a0:be:98:5b:75:97:94:c9:b1:8a:7f:51:89:
                    05:f2:1c:6f:6e:86:f0:aa:0a:68:af:32:84:4f:ff:
                    c6:02:5a:b1:c9:a4:d1:fd:e6:bd:e4:0a:87:7a:d0:
                    5e:bb:29:bc:c3:6f:4f:ef:5a:1c:49:53:88:eb:71:
                    9f:7e:ee:69:cb:fe:95:28:c5:8d:bc:a7:30:f4:d3:
                    eb:2b:3b:5d:4a:26:f8:01:4b:c7:fe:61:f6:85:cb:
                    b5:02:a4:b9:90:ad:b4:1b:1a:53:68:94:a3:4d:4c:
                    b5:7e:ba:6f:ac:ae:6f:82:23:d9:9f:b6:87:0f:e7:
                    55:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A7:95:A0:9D:8C:C4:05:E9:7F:CD:03:46:1F:60:56:22:A3:78:8F
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f2:00:fa:4d:a3:17:f0:fe:1d:81:9a:4b:9f:4f:03:9f:09:
         ee:be:0b:4f:0c:73:8d:dd:f0:6c:2a:dc:73:06:20:e7:da:08:
         0c:d1:73:9f:bf:14:5e:f1:59:b1:7e:68:d4:a0:43:a1:6a:ff:
         fb:de:02:4f:1a:22:3c:c4:9f:6d:d8:c2:e3:35:8c:f5:a4:15:
         a6:ff:c4:b9:b3:2a:56:11:77:68:09:0d:6f:57:cf:39:07:6a:
         a8:28:3b:fb:d0:46:dd:2c:a7:cb:a8:c7:6b:8c:c0:10:6e:76:
         d2:a9:ea:8f:7a:44:e7:1d:69:4d:a2:74:e4:7a:b0:2f:91:86:
         4f:be:4d:c8:03:12:92:8c:8f:53:08:2e:6a:01:99:a7:a0:c4:
         64:5b:86:d7:88:13:6a:24:22:88:6a:14:fb:41:73:29:73:9c:
         2a:b5:c2:7d:57:74:2c:bc:f5:21:a0:80:4c:5a:f9:12:8b:08:
         0a:10:44:32:f3:dd:2a:3d:31:c3:5e:ae:0c:9d:0e:bf:aa:da:
         06:20:94:9e:38:94:25:b3:10:d3:38:2b:ef:4e:71:62:cb:8f:
         c3:f5:e1:12:b4:36:7b:06:ae:06:33:98:c1:7f:d0:84:23:d7:
         d8:70:b9:df:4b:39:5c:03:5d:e2:15:09:30:7e:d9:3f:0e:e2:
         56:39:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:22:24 2024 by rpki-client on console-ams.rpki-client.org