Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File:                     7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier:          aWd0Fwmw167czSIDjUdNVP7o5uL4dI1ztcNCltMXE0U=
Subject key identifier:   89:58:1D:29:BB:31:F3:6A:C5:59:2F:F6:A6:FC:CD:A1:5A:60:94:83
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer:       /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial:       018F43B4B994AB3C10AE03E6ED76CA010691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 13:04:28 +0000
Manifest this update:     Sat 04 May 2024 13:04:28 +0000
Manifest next update:     Sun 05 May 2024 13:04:28 +0000
Files and hashes:         1: 2gcjAPrQDCbhbq2PRmj5M--lH-s.roa (hash: t7q7mfYZ5gnjmKX5CFpGP1jKJQAa9eo7610APq+tmZY=)
                          2: 56NJ6u-_ATOrOljAA4Fv6qZo9xM.roa (hash: 53RTejatOWjfjhOC7l3sSKj9RC1SxTKcImx4S9VTgxA=)
                          3: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: W/VxC6BBL16OpBH4/pGZ9tihSAFNCyicvHnVGaiYT2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:b9:94:ab:3c:10:ae:03:e6:ed:76:ca:01:06:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
        Validity
            Not Before: May  4 13:04:28 2024 GMT
            Not After : May  5 13:04:28 2024 GMT
        Subject: CN=89581d29bb31f36ac5592ff6a6fccda15a609483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:6c:6e:2d:64:91:ff:da:25:ef:66:16:fb:
                    7f:55:f5:61:8f:f0:3b:12:ee:2f:61:3d:8f:df:f6:
                    95:06:04:2d:81:b2:86:8d:fe:ec:fd:57:7f:ac:80:
                    aa:fa:72:b9:ee:1c:66:da:d0:70:83:47:2b:38:9d:
                    a0:12:7c:cb:68:52:bb:ac:30:48:bc:cb:39:a8:2a:
                    5c:56:80:b8:ce:23:6e:76:3b:0d:60:cb:f7:c9:3b:
                    b4:5a:f2:03:c4:a3:3c:62:93:c6:09:f6:45:ae:46:
                    22:3c:ec:14:a3:c0:45:5e:7d:a9:fe:e5:2e:b0:8f:
                    4b:df:c5:38:9e:d0:d9:0e:34:75:23:6c:bd:b1:a3:
                    32:2b:f9:b7:d9:d0:28:96:3c:8f:63:f8:8f:a3:5d:
                    ae:50:d5:8e:c9:f3:d2:a4:c9:80:8e:78:30:6f:b6:
                    e8:01:ee:a0:d6:a5:f4:3d:2e:a0:52:a9:d0:84:cb:
                    ec:ab:e8:2f:a7:99:14:5d:70:0e:37:75:ca:b2:7a:
                    fd:2d:52:23:23:b0:a7:ff:67:6e:ee:47:a1:2f:97:
                    9a:95:35:90:80:63:11:ba:f3:aa:bf:e9:6d:ba:93:
                    84:ba:93:a1:fc:2f:9c:11:58:39:00:16:be:8f:23:
                    4b:ae:9f:34:42:1c:c4:f0:01:82:79:41:53:34:dc:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:58:1D:29:BB:31:F3:6A:C5:59:2F:F6:A6:FC:CD:A1:5A:60:94:83
            X509v3 Authority Key Identifier:
                keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:06:df:d8:ba:08:73:9e:a0:7b:5d:d7:0f:62:41:0f:f8:
         df:23:f7:46:55:5e:c4:36:00:d8:a5:9b:41:5f:30:4d:2e:3e:
         d0:30:94:38:42:6e:39:9b:b1:ee:64:09:41:ea:88:20:1f:07:
         3b:46:b3:26:27:24:eb:b6:b9:5a:44:87:d2:60:ab:c8:ec:66:
         48:93:97:ca:9c:ea:b9:97:ec:a1:30:53:de:c3:a6:b6:c0:09:
         68:f7:29:e0:87:ed:79:93:d1:b6:23:4d:e7:4f:b6:ee:99:1b:
         54:db:48:f1:c0:a0:30:f6:31:2c:33:1c:54:a4:a1:4a:90:e6:
         ba:a5:04:eb:28:87:c6:85:19:a7:41:fd:fa:a1:23:b2:db:20:
         29:05:f9:ca:83:83:ca:d6:be:f2:cc:fc:37:e3:de:c7:03:a5:
         7d:e4:ec:fa:89:26:ad:86:c0:f9:77:72:58:18:0a:bd:de:68:
         26:07:45:ec:11:27:df:9d:72:4b:96:0b:d7:ed:49:79:e0:36:
         d2:f9:7a:19:f7:e1:11:0b:29:2b:b1:c7:3f:76:d3:8d:e6:4c:
         88:7b:83:cb:78:15:fa:9f:7c:a6:c0:21:71:cf:54:5b:ef:fd:
         af:a9:cb:cf:5b:54:62:55:20:63:df:2c:b2:0b:0c:70:64:cd:
         d0:28:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:31:19 2024 by rpki-client on console-fra.rpki-client.org