Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File:                     7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier:          fFUtsJAjogOI8+EKo8tS4b1P5xSNvRxjvbL0ejGpGN0=
Subject key identifier:   27:E6:BF:A6:D1:32:61:A2:51:D6:3B:F0:F1:B9:3D:7C:2B:66:23:5F
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer:       /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial:       018F4DC7760E2BA7FA55B7AFE9E1FC67312A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 12:01:08 +0000
Manifest this update:     Mon 06 May 2024 12:01:08 +0000
Manifest next update:     Tue 07 May 2024 12:01:08 +0000
Files and hashes:         1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: mcDQCjZAz2n8aDTEwVMYfIyIyrdc83ZZqat/YZfwp0M=)
                          2: Oyb2jvlBpEFJaRJcilVS7M0RinQ.roa (hash: amwi0biJkfyXTYCvNWhejnSbHkumqzfgfl4EbVshDyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:76:0e:2b:a7:fa:55:b7:af:e9:e1:fc:67:31:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
        Validity
            Not Before: May  6 12:01:08 2024 GMT
            Not After : May  7 12:01:08 2024 GMT
        Subject: CN=27e6bfa6d13261a251d63bf0f1b93d7c2b66235f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:78:50:39:5e:8d:35:e8:58:c5:d5:ed:c7:
                    26:b3:bf:f3:6e:a3:81:78:a1:67:fb:94:53:01:2b:
                    b4:e8:dd:ae:29:34:e7:3b:37:a5:10:b7:cd:51:8c:
                    cf:a4:b1:55:4d:1a:41:4d:4a:4f:b2:01:19:b6:12:
                    63:33:f0:07:0a:3c:96:39:27:79:3b:6a:c9:27:ec:
                    16:a4:f7:4a:7b:b7:aa:8f:08:58:43:5b:9d:38:25:
                    50:5e:79:61:83:44:c6:3a:2b:4c:ee:c6:86:ae:3d:
                    c9:6e:af:b3:c2:76:ea:8e:77:d1:ad:6d:2d:1a:d5:
                    b2:e4:66:cd:b0:9e:44:6f:e9:9d:d6:d7:60:80:e2:
                    42:35:f7:37:56:b5:81:10:4d:66:ea:74:bc:dc:7a:
                    e5:79:e0:a2:9d:8c:c7:91:8d:91:71:e8:4c:dc:6e:
                    13:f8:c5:ca:5d:4e:2a:da:21:3d:92:81:10:f6:47:
                    87:73:7b:55:3b:8f:9c:db:31:1b:32:3b:ac:11:a4:
                    7c:58:85:c1:12:98:21:7c:94:6d:ba:42:1f:fe:e8:
                    2f:84:2b:f9:37:4a:db:0d:31:ab:9e:26:5d:c0:eb:
                    08:96:cb:d5:ce:6a:63:31:9f:87:51:bb:ac:89:9a:
                    ee:0b:9d:35:79:07:71:39:e4:9a:a3:22:68:c0:f2:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:BF:A6:D1:32:61:A2:51:D6:3B:F0:F1:B9:3D:7C:2B:66:23:5F
            X509v3 Authority Key Identifier:
                keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:95:38:3e:24:8c:6c:b9:32:ad:27:d6:d1:e1:39:f9:c3:3b:
         7d:99:3b:58:5f:c1:c1:ec:f6:fe:f8:0e:42:44:b3:d4:d9:93:
         64:fc:bf:94:1f:ab:db:ff:3d:e7:16:a5:c1:06:3c:ca:fa:f0:
         b9:5f:0c:6e:48:42:30:93:74:81:c9:16:b6:aa:a7:f4:14:58:
         7f:ef:c7:c3:cc:f3:35:ee:82:60:65:97:e7:8b:68:b7:91:dd:
         8b:8f:50:e5:52:0f:c1:d8:2f:f3:5e:cf:7b:ba:a7:24:0f:f9:
         a3:4f:a5:bb:bb:73:02:94:43:16:ba:19:19:53:40:a2:ff:b9:
         5a:11:ff:bd:ab:78:e5:93:dc:0b:73:0b:4b:ca:46:86:84:63:
         e9:57:a0:1e:40:fa:7c:fa:fb:50:53:7e:30:8e:2f:36:64:d4:
         76:90:96:d4:ed:4b:1f:aa:71:10:7e:6e:d6:f1:fd:f6:70:58:
         6d:0c:2f:10:e3:92:d7:86:e3:78:79:6e:e9:b7:5b:e3:33:60:
         28:f7:f7:22:41:09:0b:0c:ad:39:5c:f1:23:35:89:73:29:08:
         8f:e3:8a:d9:5d:e0:42:d8:47:db:26:70:96:db:41:61:f9:35:
         61:c3:69:81:0a:6a:ea:94:ec:39:5d:d7:a8:cb:ce:ca:91:f2:
         e5:d0:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:01:48 2024 by rpki-client on console-fra.rpki-client.org