Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File:                     7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier:          W2prUbtTre7Hdl+UqzidxGkkosuO64TsuRz2SjhFDeM=
Subject key identifier:   99:1D:EE:39:7C:CC:D4:C7:03:80:66:CB:DD:41:82:6A:FA:EA:E4:4F
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer:       /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial:       018F355138D2864CDF647E3AE18E804C3554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number:          08BB
Signing time:             Wed 01 May 2024 18:01:06 +0000
Manifest this update:     Wed 01 May 2024 18:01:06 +0000
Manifest next update:     Thu 02 May 2024 18:01:06 +0000
Files and hashes:         1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: /HdFb33mGYUG0atkpFBW9q5j0lZYyjWJUwhZj+qprE4=)
                          2: xQ7OtTcgWKRlEvdzSQWhw9QWrfM.roa (hash: MIskvWiPN1qSWv25Ti3kWZHxQxMCcq58quYRw/sfKjU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:51:38:d2:86:4c:df:64:7e:3a:e1:8e:80:4c:35:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
        Validity
            Not Before: May  1 18:01:06 2024 GMT
            Not After : May  2 18:01:06 2024 GMT
        Subject: CN=991dee397cccd4c7038066cbdd41826afaeae44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:af:e2:db:af:02:e0:22:11:3f:f3:4e:d7:ee:
                    bc:13:5e:30:5c:df:c4:92:34:fe:d4:31:4d:fb:8d:
                    e2:f7:15:0a:bb:45:2e:88:a5:8a:dc:ca:ca:0e:86:
                    5c:68:81:c1:bb:a1:7e:ca:b7:ff:da:dc:14:da:da:
                    50:3e:5a:4f:e1:a9:19:db:c6:8a:65:db:ad:58:48:
                    f0:bf:e5:15:0c:54:f0:aa:d7:c0:c8:ab:f0:43:f4:
                    ba:cf:c7:f9:97:1f:d8:57:a9:af:f9:b2:25:ae:2e:
                    b6:4e:25:53:7b:d1:c4:0b:eb:a4:da:3d:29:49:36:
                    d8:3d:cc:9d:14:93:30:8d:7c:6e:34:bf:83:79:2a:
                    b6:ed:02:ef:47:b2:40:cb:94:d8:e5:0d:f7:36:f7:
                    62:e3:46:e3:1b:e3:fa:ee:b3:62:cf:be:b5:1f:cd:
                    e6:27:22:10:4d:13:5f:c9:97:2a:cd:25:49:87:a5:
                    94:2f:c1:67:09:3a:b5:0e:e8:20:e0:24:0f:6d:ca:
                    b7:ec:83:65:66:49:53:74:ef:60:1e:89:9a:2c:b6:
                    b2:a0:76:1f:e8:04:3c:ab:42:c2:16:ad:9a:62:56:
                    33:c7:bc:ec:e2:00:23:fa:51:4f:4f:0f:4d:76:29:
                    d6:ab:9c:6a:07:8c:9b:8a:16:60:7d:28:d3:4c:77:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1D:EE:39:7C:CC:D4:C7:03:80:66:CB:DD:41:82:6A:FA:EA:E4:4F
            X509v3 Authority Key Identifier:
                keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:64:e0:93:75:99:10:c2:98:c0:42:df:2f:b5:65:66:b4:09:
         a9:7d:33:60:46:f3:31:05:9d:15:e7:e0:01:98:99:81:dd:69:
         7e:cf:1f:98:8b:fd:f1:16:b2:28:d7:da:98:fe:17:6b:fd:d4:
         5c:b8:86:f3:6b:de:f9:e2:50:b8:16:0f:20:02:9e:14:d5:b4:
         e3:a7:ce:7a:89:8d:10:df:74:20:37:53:e3:45:1b:2a:94:9d:
         40:b1:6d:a7:44:a2:63:ab:80:4b:13:f5:18:24:cf:e5:f4:86:
         86:e6:bb:40:0e:b9:60:20:86:07:76:29:ff:b4:3c:46:9e:53:
         42:d3:4f:40:0e:da:5e:fa:98:cf:a4:46:f8:80:cd:cd:22:f1:
         26:7a:f1:9e:c2:46:c9:2d:9a:3e:bc:79:4c:0b:b5:93:1b:63:
         61:f5:ac:4d:75:e6:f5:89:35:bc:0f:fd:5e:66:81:90:be:7c:
         c9:99:16:52:d0:9b:c5:cb:46:01:25:ba:6a:3c:a6:b8:96:24:
         51:c7:9c:d6:f8:1d:bc:67:79:a6:23:f7:fb:2b:db:68:c4:e8:
         7a:d0:16:94:c7:5d:c1:ba:fa:60:70:bb:4e:5c:1f:49:52:bb:
         fc:14:4e:8f:c8:19:31:d7:02:80:4f:19:2f:33:fa:98:57:f2:
         07:46:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:51:05 2024 by rpki-client on console-fra.rpki-client.org