Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
File:                     7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json)
Hash identifier:          6rgzicYSuEamQioADjqft+qvRrpuqy3L7tWICrumeuI=
Subject key identifier:   BF:96:58:49:5B:2C:47:A1:90:86:8B:AB:AA:83:58:C9:4B:5C:6D:CA
Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
Certificate issuer:       /CN=edafdca6eace4f1293223b02eebc278243869b7b
Certificate serial:       018F3A0B1C99C8E10D985DE7F88CA8E13AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 16:02:37 +0000
Manifest this update:     Thu 02 May 2024 16:02:37 +0000
Manifest next update:     Fri 03 May 2024 16:02:37 +0000
Files and hashes:         1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: lJ4XJK4XXw0GoL2BVKeHn9t6Fk4wnfQ4Evvk4Qj6Xwk=)
                          2: vebbC-kYWkbl3DwSqB7MacBA_3c.roa (hash: FeNDKmGW2EqV+ye/R9n8tlu4NGlLcO1AduHtcVyZO2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:1c:99:c8:e1:0d:98:5d:e7:f8:8c:a8:e1:3a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b
        Validity
            Not Before: May  2 16:02:37 2024 GMT
            Not After : May  3 16:02:37 2024 GMT
        Subject: CN=bf9658495b2c47a190868babaa8358c94b5c6dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:cd:65:d6:d8:b4:87:d4:4c:6c:1f:f0:7a:
                    8f:be:12:7d:24:04:d1:08:5b:a2:83:4e:ae:de:ee:
                    05:d9:b4:c2:83:42:20:d1:d8:9e:47:cc:05:dc:4f:
                    2c:ec:cb:c4:6d:ee:5b:99:28:6b:76:5b:70:dc:b1:
                    0c:d4:6e:39:ec:50:88:ee:d0:2e:53:a0:03:67:66:
                    bb:a0:06:7f:42:7a:c8:91:14:a5:ab:00:43:78:f6:
                    ef:7a:7f:30:ef:a4:6c:5e:88:53:ce:ab:cf:52:12:
                    83:44:d6:9c:f0:6a:49:16:2f:19:d3:76:a9:c1:6f:
                    6b:5d:9d:e6:cc:03:99:7d:d6:22:2c:f3:a9:67:c3:
                    3f:ff:88:9d:ba:6e:c8:d9:fa:1f:c9:aa:aa:bf:5a:
                    b1:76:c4:5e:78:db:b3:3a:27:33:44:37:bf:01:44:
                    85:0d:95:da:0d:4f:41:d3:c0:4c:ce:b7:5c:df:17:
                    6e:d4:e6:3f:ee:f8:58:cf:4a:ee:65:9a:eb:d4:c5:
                    1a:be:c7:74:1b:71:d8:26:01:a8:a7:9f:88:5f:11:
                    1a:31:37:97:ff:2d:6e:33:16:61:1a:09:cd:43:6f:
                    89:f8:ad:23:01:4f:be:68:52:53:e8:a2:58:68:ba:
                    33:43:42:d2:55:26:d3:b5:88:f7:a1:dd:94:52:87:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:96:58:49:5B:2C:47:A1:90:86:8B:AB:AA:83:58:C9:4B:5C:6D:CA
            X509v3 Authority Key Identifier:
                keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:98:2d:e8:80:56:fb:d6:7c:dd:51:d1:cb:48:f3:3a:6b:67:
         d7:8f:8b:dd:a1:17:dd:75:f4:0c:a9:8b:4f:ab:67:73:2f:45:
         2c:db:8b:e1:24:b5:96:06:43:2a:45:4f:ef:89:0b:ee:5f:10:
         97:a7:8f:91:e0:a1:6d:81:d3:32:b2:f3:59:1f:16:d7:10:76:
         5e:45:e1:b8:d2:c7:c7:fa:26:be:47:cd:19:34:50:f8:20:d4:
         bb:0e:2f:0c:ac:72:9a:73:0e:0f:db:42:14:2d:8c:74:c8:85:
         d4:9b:59:5b:98:fa:18:79:a3:fc:2d:3b:ed:8a:7c:a5:eb:0a:
         00:b5:10:e1:19:5c:e6:eb:4d:b2:45:62:90:8b:76:5c:36:9f:
         46:ed:06:ef:ea:c9:25:b1:27:93:5d:30:67:f8:75:11:1c:e8:
         8d:43:1d:f3:81:d5:0c:2b:d6:d7:61:e5:99:9b:4a:c8:e3:19:
         1f:dd:69:f5:3d:60:76:6a:97:b9:59:aa:f3:d9:d7:72:45:39:
         b3:51:8c:1b:85:06:41:c1:13:f3:73:ca:01:f1:23:4c:b3:0e:
         a3:e2:ae:b7:0d:e0:f3:80:79:db:a5:a4:84:fc:b8:e7:96:20:
         09:cd:9d:0f:3a:dd:16:00:3c:fd:41:84:51:04:6d:ab:d1:9a:
         fe:bc:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:28:38 2024 by rpki-client on console-fra.rpki-client.org