Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File:                     7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier:          6F5uIkIw2BiM9w4hwOlBPFpHd3TOGpHUN7Ml4kLU+fs=
Subject key identifier:   EA:9F:E5:86:5E:EE:B1:BB:14:09:37:A9:CB:CF:B4:9F:6A:19:EA:3C
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer:       /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial:       018F3BF9E59E6121C8BE4C618E6FCDA25040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number:          1080
Signing time:             Fri 03 May 2024 01:03:03 +0000
Manifest this update:     Fri 03 May 2024 01:03:03 +0000
Manifest next update:     Sat 04 May 2024 01:03:03 +0000
Files and hashes:         1: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: +dJ4LLEbVPJs3l8sa2LihK2A/qm5N904vM6va3uTvcE=)
                          2: ZqAcmb1aNfacQkxqwU6ps24KV9I.roa (hash: FhAKzOmnkPx3zs485lQu2KjwAN19ruV6SuSo/lvCgPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:e5:9e:61:21:c8:be:4c:61:8e:6f:cd:a2:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
        Validity
            Not Before: May  3 01:03:03 2024 GMT
            Not After : May  4 01:03:03 2024 GMT
        Subject: CN=ea9fe5865eeeb1bb140937a9cbcfb49f6a19ea3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:a9:43:5c:c5:c9:2d:d9:e4:1c:1a:98:7e:
                    28:04:32:b3:b1:f3:96:b9:1c:fd:c9:e6:5e:ff:c6:
                    05:16:29:83:81:fb:76:ec:2f:07:ef:5d:70:92:07:
                    06:44:a3:df:e1:04:62:97:50:3c:78:f8:e9:fd:71:
                    cd:85:b2:7d:8b:83:48:9d:ec:f0:7b:8d:68:e7:ad:
                    c4:ab:a8:c1:ac:00:67:9c:f3:c0:ba:af:a8:ee:41:
                    12:d6:f3:0b:5e:7c:4c:1a:12:ee:7d:21:64:48:53:
                    91:4f:4c:e1:7a:2c:3d:be:e0:b7:98:7b:06:ad:24:
                    01:1b:3a:18:71:cb:53:47:ec:0e:ad:a3:2c:3d:24:
                    b1:ff:93:90:af:90:3a:d1:13:38:08:fd:44:68:29:
                    7d:83:ac:15:2b:46:ff:a9:b6:75:6a:6d:9b:80:9e:
                    a8:40:33:f4:b7:ee:18:d9:9b:8c:e6:b5:be:fb:d5:
                    77:3e:70:3b:f4:07:85:40:be:5b:b2:df:e8:d3:8c:
                    87:d3:f0:08:57:a2:df:ea:3a:94:63:41:81:f2:87:
                    28:27:32:0c:1f:e0:b3:0e:fd:d6:e2:d1:62:eb:e8:
                    52:4b:b9:18:c3:7f:5c:b8:b9:0c:69:9d:45:e0:1b:
                    c9:a0:6d:6d:2c:83:fb:79:a0:4e:cd:1d:6f:50:19:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9F:E5:86:5E:EE:B1:BB:14:09:37:A9:CB:CF:B4:9F:6A:19:EA:3C
            X509v3 Authority Key Identifier:
                keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:5c:c9:d4:14:df:aa:7d:ae:6e:81:e0:61:70:5c:7b:da:79:
         93:59:22:64:20:33:ef:68:a1:b4:ec:e9:bf:ad:49:8e:e8:3c:
         4e:15:26:41:7a:11:70:3b:93:21:9e:50:8f:bb:f8:74:8a:ea:
         4f:fa:1f:ad:22:36:35:bc:46:90:2f:18:87:a3:69:f8:a0:96:
         29:f1:0a:37:80:e2:f2:34:0d:0e:5d:3b:c6:89:75:5d:f8:97:
         62:dd:a7:61:2a:f6:9d:71:c8:8c:ad:80:a0:55:36:84:11:0d:
         2a:d3:4b:3e:dc:e9:a6:88:b4:cb:a5:0a:e0:49:92:16:ab:8e:
         0a:00:92:6f:91:de:ca:f6:4a:a4:2a:77:49:1c:db:c7:4c:cc:
         80:d9:86:6b:14:e4:bf:6d:f9:f2:f3:d1:9f:bd:05:02:c6:bb:
         68:c4:4b:71:a0:6d:be:d5:10:d4:c6:a0:e7:f6:59:72:84:89:
         27:ee:c8:85:e1:82:ae:57:35:56:69:9f:54:f2:40:e3:21:ce:
         e7:86:5e:23:b9:1f:c0:a2:c9:15:02:ef:50:ef:9c:3f:91:14:
         ce:93:27:4a:3c:c8:64:3f:26:17:55:41:fd:f0:5d:ac:dd:17:
         3d:a3:14:cd:79:31:bb:a9:1e:8c:16:2d:29:54:ee:17:e8:ce:
         3a:47:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:09:20 2024 by rpki-client on console-ams.rpki-client.org