Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
File:                     7piHul9FfXl6_awsVVHe-0U9iPM.mft (raw, json)
Hash identifier:          g7Tlb3Ams9Ab4dpQQf6I7C85qcESqGRx878ajKc08zw=
Subject key identifier:   FE:6D:15:8C:C7:70:62:77:84:CD:9A:B4:B7:83:B7:42:F3:40:3A:67
Authority key identifier: EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
Certificate issuer:       /CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Certificate serial:       018F8748BBF208909164EE09E615722D822B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
Manifest number:          013D
Signing time:             Fri 17 May 2024 16:00:41 +0000
Manifest this update:     Fri 17 May 2024 16:00:41 +0000
Manifest next update:     Sat 18 May 2024 16:00:41 +0000
Files and hashes:         1: 7piHul9FfXl6_awsVVHe-0U9iPM.crl (hash: 4C6AspYDZNNGWOAa0aBvz5hVKopR7Ub5BZi5C8jbsr8=)
                          2: tbET4Q70dHUeLSrHe6Vrzddg8aA.roa (hash: ndH0e+mhwIvR7jocfNmm03ui+O1b2ofWvm28B0FdXrc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bb:f2:08:90:91:64:ee:09:e6:15:72:2d:82:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9887ba5f457d797afdac2c5551defb453d88f3
        Validity
            Not Before: May 17 16:00:41 2024 GMT
            Not After : May 18 16:00:41 2024 GMT
        Subject: CN=fe6d158cc770627784cd9ab4b783b742f3403a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:40:94:5e:2d:fb:1b:e2:33:5c:5b:0f:11:
                    58:26:fa:ff:4e:2c:9f:ee:ab:20:da:bf:d9:6a:bc:
                    56:12:fc:5e:c8:9d:a0:57:88:21:e9:48:0f:0f:ba:
                    4b:80:f8:09:6a:26:44:05:e7:8e:27:e0:54:10:1b:
                    9d:67:9b:e2:56:66:d8:c1:a4:96:ef:bd:09:9a:52:
                    42:90:bc:03:f2:43:73:80:57:63:70:4f:4c:51:7f:
                    bc:68:fd:f5:cf:f0:d0:50:b7:c7:a7:88:56:2b:80:
                    fb:98:04:4d:62:08:e9:58:75:ee:4f:c6:97:aa:6f:
                    e7:f3:77:7f:7f:83:32:bc:56:ac:f2:18:0c:67:a6:
                    3c:30:a1:f9:af:c6:ce:44:21:45:23:7a:60:48:ad:
                    d5:51:84:25:16:33:86:92:59:23:58:a1:4b:89:19:
                    80:c3:1a:75:35:4e:5b:0d:97:f4:83:1c:32:39:2e:
                    ce:00:cb:28:65:f4:c8:dc:e1:4b:bb:a8:3c:74:5d:
                    6e:79:f2:1c:15:28:69:5f:20:37:ab:c5:62:3f:ff:
                    53:d6:b4:28:fd:ad:86:40:60:e0:cf:02:98:4f:06:
                    f6:36:62:8d:a6:03:36:1f:c9:f5:97:37:7d:0b:56:
                    2d:2f:ee:83:fe:c7:66:cc:3c:7e:4a:95:e5:e7:71:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6D:15:8C:C7:70:62:77:84:CD:9A:B4:B7:83:B7:42:F3:40:3A:67
            X509v3 Authority Key Identifier:
                keyid:EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:43:4a:81:3f:85:af:78:6f:2b:38:a5:a3:f9:af:30:e6:
         3c:47:94:96:db:53:19:72:73:35:55:5e:e2:ba:79:6f:68:f1:
         27:7d:f5:12:e2:80:ef:52:a2:b3:b6:02:9c:7b:f5:5d:23:62:
         8a:a4:bc:6e:77:8e:31:d6:cf:77:3a:7d:b8:c0:8c:0b:e1:38:
         64:8a:d7:77:0c:9a:fe:54:92:4d:bd:a5:73:f2:64:b2:bd:e5:
         41:7a:87:14:f4:a4:97:39:ec:8f:05:6c:96:31:c7:f7:4b:f0:
         6c:e7:83:bf:78:f4:b1:f5:ad:7c:73:03:03:ac:7e:86:bc:02:
         27:c6:80:a6:68:08:40:9d:fa:f5:2f:fb:0d:d6:e9:79:24:cf:
         e9:da:ae:5a:5e:9c:54:2f:bd:e7:3a:ba:b6:61:23:cf:7e:15:
         f2:0c:76:da:d9:6b:52:b8:91:11:c0:b8:5e:5a:73:46:8c:f8:
         cc:4c:28:09:97:6d:44:14:c5:47:17:f5:c7:08:96:c1:c5:1f:
         53:f0:d1:3c:58:eb:d6:32:b9:e2:c9:f0:51:c4:a3:b1:5d:01:
         36:64:ab:70:26:ba:12:74:15:94:6d:4d:25:e0:23:b7:cf:c0:
         90:97:b6:54:19:11:57:a3:2b:d4:27:c7:ac:bc:c9:6f:09:31:
         da:fb:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:02 2024 by rpki-client on console-ams.rpki-client.org