Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File:                     7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier:          d8ps9Q6OBnloa3yOS43+0jOifs65ztdyl5DnVoyawuU=
Subject key identifier:   C0:9A:7E:25:D1:35:98:D7:76:C5:8E:ED:A9:9C:36:22:A0:2F:79:A9
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer:       /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial:       018F362F461F2DCF2B0F18041628BB362E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 22:03:38 +0000
Manifest this update:     Wed 01 May 2024 22:03:38 +0000
Manifest next update:     Thu 02 May 2024 22:03:38 +0000
Files and hashes:         1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: G7AJpu6FiDkfpzWoXJj+whNsJTS4hixvWBZaIRHOS+A=)
                          2: XolyMeFrw-w4-LDhysbwnQQ898w.roa (hash: /BGdLu0JzkjUUFAsv/n97c84G46WAxR9DG/8bQOF9fo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2f:46:1f:2d:cf:2b:0f:18:04:16:28:bb:36:2e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff0ab25662757afb831675319296f63d989b69
        Validity
            Not Before: May  1 22:03:38 2024 GMT
            Not After : May  2 22:03:38 2024 GMT
        Subject: CN=c09a7e25d13598d776c58eeda99c3622a02f79a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:95:70:e1:ad:8c:ae:78:21:52:c2:b5:b0:
                    6a:78:fd:1d:d3:20:10:31:c1:03:31:9a:c1:63:ae:
                    c7:3f:30:03:64:d2:fa:94:3f:13:fd:79:21:20:ed:
                    34:52:49:9f:59:28:54:fc:8b:e4:5d:7e:67:a5:82:
                    8b:2d:b4:37:98:05:c8:a8:91:af:bb:50:a7:62:97:
                    e2:72:ce:bb:e6:a2:84:bd:76:e7:93:32:5c:d2:f0:
                    4c:03:07:4d:20:bd:7f:63:7f:89:1c:b3:46:6a:20:
                    ae:1c:36:05:02:58:d1:ae:a6:8f:eb:57:3d:8c:a8:
                    ef:9f:9c:0b:f6:f9:95:ff:4e:5f:b4:30:c8:a7:3a:
                    59:dd:ca:38:24:33:10:1c:73:69:42:68:08:6f:4c:
                    72:e3:6a:3a:e7:96:1e:7d:86:69:40:69:0f:a9:3d:
                    d9:78:3b:4c:35:ec:ac:79:69:58:e5:b8:06:56:59:
                    fb:62:9d:b5:ea:7e:af:73:48:c2:25:75:83:59:19:
                    d5:e7:7c:8a:69:12:9b:01:a0:f4:33:fe:6e:b3:4d:
                    1f:20:c2:9d:b6:9d:db:e4:35:17:64:41:73:b8:10:
                    5f:b0:35:86:9e:9c:63:fc:93:b1:f3:7c:ac:9f:85:
                    77:45:b4:45:bf:07:ed:46:d4:f6:b9:27:b0:91:f1:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9A:7E:25:D1:35:98:D7:76:C5:8E:ED:A9:9C:36:22:A0:2F:79:A9
            X509v3 Authority Key Identifier:
                keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:b3:da:3d:00:a5:5f:b5:ae:b0:ca:87:0b:05:5b:a9:0b:
         27:fc:b4:aa:d1:53:5c:1f:cc:cc:69:cb:65:ae:b7:06:ad:db:
         c5:ea:86:16:4e:88:63:04:27:67:8c:f6:92:df:87:3d:44:31:
         aa:f5:ff:f5:98:43:ed:6d:14:b7:ec:22:29:d4:29:90:0f:b7:
         cc:60:56:19:37:94:c8:3b:26:c1:2a:c8:63:52:2d:de:fa:91:
         11:0f:4f:2e:e4:49:92:25:b4:92:ed:49:27:3f:a3:69:be:9b:
         db:48:75:62:fa:60:5f:c2:1f:ab:58:70:2c:b0:30:8c:82:54:
         1b:ed:97:d8:41:7d:7b:19:fe:86:04:19:51:a0:d8:9a:5e:b8:
         42:8a:62:8c:12:ad:b7:6a:f6:92:36:a7:4d:4f:d9:f8:af:84:
         8f:e8:78:dc:37:96:5b:a8:8c:ae:1e:12:e5:94:a6:7c:06:fa:
         4e:2b:da:d0:39:2b:5c:02:b3:ef:79:80:08:c6:7e:34:e9:c0:
         f6:9e:ce:ee:b9:74:26:2f:45:23:50:02:c1:03:53:f8:bc:5b:
         14:fc:f6:79:9d:d4:0c:8b:c5:46:87:cc:35:b2:67:cf:e0:22:
         44:c2:1e:53:d0:99:e0:fc:c2:27:cf:c3:5a:d1:80:54:43:bb:
         94:02:a8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:48:11 2024 by rpki-client on console-fra.rpki-client.org