Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File:                     7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier:          ndaLGsDAj0uAxBGg70TyX8h7IdeCCldkPC8xrkFDh+U=
Subject key identifier:   AA:FB:D6:95:E5:F0:79:95:5A:8B:F7:A3:0C:74:42:98:7A:FF:AE:36
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer:       /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial:       018F460DC8119D50EA0A379964AD8EBD0605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number:          0E16
Signing time:             Sun 05 May 2024 00:00:59 +0000
Manifest this update:     Sun 05 May 2024 00:00:59 +0000
Manifest next update:     Mon 06 May 2024 00:00:59 +0000
Files and hashes:         1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: 5JMpnB/UhP1KlLwAsVeUWVcXq7HKOG4sey9tQQazDDY=)
                          2: IszRMTB3G-DJ4axv_EpdvVlf6gw.roa (hash: CY0TRU9a1uxqs27AvjddrwTXdq92hZRTpG3jg6Iljv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0d:c8:11:9d:50:ea:0a:37:99:64:ad:8e:bd:06:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
        Validity
            Not Before: May  5 00:00:59 2024 GMT
            Not After : May  6 00:00:59 2024 GMT
        Subject: CN=aafbd695e5f079955a8bf7a30c7442987affae36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:0d:cd:b9:35:ae:f2:9b:57:48:49:1c:f6:
                    66:40:f9:d9:f4:15:2f:44:da:60:ac:d6:7b:2b:ec:
                    aa:f6:b0:0b:f9:43:00:98:3f:18:b1:59:b9:63:f5:
                    50:37:53:27:3e:21:77:c5:f4:27:53:d2:e8:7f:41:
                    f8:cf:d8:09:d7:ee:9f:97:21:17:af:69:c7:bc:08:
                    60:2a:8f:5d:b6:41:2a:b6:2b:12:bc:66:62:72:85:
                    9d:9d:af:1e:7e:a5:49:4d:72:93:c3:6b:73:06:31:
                    11:11:02:a1:e0:29:3a:75:61:a6:08:d4:f2:db:80:
                    19:36:4a:a4:4b:4b:e8:63:f0:9e:d5:57:81:99:5a:
                    4f:e3:9f:c6:13:06:63:09:8b:9e:f7:2d:d3:9d:d0:
                    b3:b1:f7:05:6e:bc:3a:76:a5:f8:e0:ad:25:b6:7f:
                    db:84:04:48:fe:2d:ee:fe:20:50:c3:e1:4b:51:1d:
                    50:46:70:ec:0d:59:d0:70:41:c3:c7:39:a9:d7:fa:
                    92:0b:6a:c3:4a:5d:37:aa:7f:ee:1e:16:91:94:77:
                    c9:14:79:0d:b9:d1:7e:78:70:16:85:59:7c:6d:cd:
                    d2:49:55:15:95:1f:03:9c:58:df:0f:a3:93:62:27:
                    51:18:bc:a2:aa:7b:c5:2f:a9:0a:38:bd:5a:5b:b0:
                    e7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FB:D6:95:E5:F0:79:95:5A:8B:F7:A3:0C:74:42:98:7A:FF:AE:36
            X509v3 Authority Key Identifier:
                keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:48:20:f4:8a:7b:66:0d:09:e4:7c:5f:6f:f2:bd:99:0c:
         bf:36:0b:87:bd:bf:53:bc:25:f8:29:3f:d8:90:08:b7:c9:27:
         87:ae:4c:89:30:94:70:be:5b:50:06:75:f0:b7:d4:e0:a7:0f:
         66:23:9b:66:2f:4c:73:4e:e4:52:92:75:db:c9:28:18:8c:fc:
         bd:0e:90:a3:57:22:5c:d7:0e:26:0a:a0:64:25:6d:a9:f8:21:
         f4:38:7c:1d:fc:b5:3e:7c:b5:e0:13:2f:16:4b:53:7c:43:eb:
         34:00:48:1d:f7:4b:dc:83:ad:fb:1d:5f:1f:e9:35:79:a0:40:
         c9:89:b2:eb:0b:c1:a8:c8:e0:07:9c:2f:62:d0:bf:79:00:9c:
         f4:31:bc:4c:83:ae:39:87:a7:96:0f:34:f9:cb:92:a9:d4:d1:
         d2:5a:26:a2:59:9c:81:22:6b:f9:28:cc:2d:35:df:8e:0a:27:
         6f:fa:fa:9e:af:83:ce:b8:30:0d:b8:a8:61:38:5f:5a:11:bd:
         a1:eb:4b:1b:36:43:03:25:20:cf:bb:ad:a0:ad:63:7e:93:53:
         8a:75:a5:ea:ea:61:04:62:7e:3c:91:96:89:93:73:7e:9c:63:
         60:07:d3:7a:ee:40:35:95:79:14:8e:48:ff:25:b1:69:6e:63:
         03:99:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:31:38 2024 by rpki-client on console-ams.rpki-client.org