Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
File:                     1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft (raw, json)
Hash identifier:          rHX4nfTsBaLXzfD/ewXTYNLxq+9rVOiwLrwBBm++xQQ=
Subject key identifier:   11:52:A5:56:F0:7D:C8:82:29:77:EE:9A:EF:3A:F4:CC:C5:C4:D3:0C
Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
Certificate issuer:       /CN=fbbe33c8d18e53bfd24822098dc748640550c504
Certificate serial:       018F5327763FD11D6C11B432027AF4FEDEDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
Manifest number:          110A
Signing time:             Tue 07 May 2024 13:04:05 +0000
Manifest this update:     Tue 07 May 2024 13:04:05 +0000
Manifest next update:     Wed 08 May 2024 13:04:05 +0000
Files and hashes:         1: 1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl (hash: p53p4O/k9ZAQCfGkO4b4Dg52VgNezthNwKPDxllNKbg=)
                          2: 536-pDj42ed4B5h-04-gmnqWcqY.roa (hash: wZvi6SWaT3IWyBRT1loNWGNzb+UHKYIyx4NreNA2VWc=)
                          3: OCEkcjsyK7Bed_2yDfoNPuJOHzU.roa (hash: dLNAXRjp8r3c7Cv3pQ3sMlEx84O8sAORcPr414eu3O8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:76:3f:d1:1d:6c:11:b4:32:02:7a:f4:fe:de:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504
        Validity
            Not Before: May  7 13:04:05 2024 GMT
            Not After : May  8 13:04:05 2024 GMT
        Subject: CN=1152a556f07dc8822977ee9aef3af4ccc5c4d30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:a3:f0:5d:f0:c8:30:4d:e5:39:43:62:11:
                    48:6d:da:b5:bc:1a:a5:5c:b1:68:e0:06:20:be:b2:
                    c2:bf:42:f5:d0:a3:08:49:43:06:9f:f9:54:10:62:
                    55:fb:31:5e:25:07:37:08:73:71:dd:23:28:f7:71:
                    24:98:a2:26:65:84:a6:f3:f2:3f:24:7e:15:ac:52:
                    c7:92:d4:0e:5d:7d:3b:13:14:63:4b:35:c7:29:44:
                    02:d1:e7:bb:9c:ce:4b:5c:72:7c:2a:bf:48:ea:80:
                    fc:14:9d:5e:4b:eb:46:51:e3:20:28:1b:16:1d:08:
                    36:34:38:14:8b:35:e0:28:50:36:df:b8:4c:57:35:
                    67:d8:46:7c:62:06:35:16:9d:1a:51:e5:55:7b:ad:
                    4e:34:37:d9:ab:d2:c2:d6:bd:7e:a7:1a:3c:d7:01:
                    0c:62:ba:91:75:c0:3f:dc:f5:2d:40:55:67:96:b2:
                    d6:f5:e5:0d:96:13:af:e9:3d:21:f6:a5:ac:c1:9c:
                    64:1f:64:d4:4c:91:11:a8:f3:a2:fa:74:d9:0d:46:
                    0e:38:27:76:a4:bb:f9:19:8f:57:7a:de:e4:be:e4:
                    14:62:49:d3:ec:ce:e9:20:d2:d0:33:c9:43:bf:89:
                    7a:56:bc:9c:b5:73:2c:2b:43:2a:4b:55:b0:19:49:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:A5:56:F0:7D:C8:82:29:77:EE:9A:EF:3A:F4:CC:C5:C4:D3:0C
            X509v3 Authority Key Identifier:
                keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:56:63:94:fb:80:9f:61:16:cf:30:9b:50:42:86:49:f8:
         17:e4:a6:45:ba:31:a6:18:2e:42:6d:04:eb:96:18:ef:63:7a:
         54:14:0a:d1:50:f8:5f:c5:32:d8:a9:90:ba:c1:47:72:a4:7e:
         e8:4d:d9:a3:9a:cc:e2:1d:77:bf:2c:cc:f2:bb:3a:70:8e:d2:
         6a:ec:91:a9:a2:ab:1e:a6:a8:0b:db:9c:ae:de:ba:b0:a9:2b:
         83:31:02:77:8e:bf:7e:a3:41:a2:d1:eb:49:95:24:7a:4f:75:
         2e:c8:5d:71:f5:ab:f1:2a:2a:0c:e1:72:44:f7:c8:77:ac:1d:
         b6:ad:65:d5:b2:35:1c:94:9b:73:90:60:c5:c5:ef:81:d0:08:
         e1:70:d8:d7:00:dc:02:ca:ad:d5:03:20:db:37:1d:f7:d8:ae:
         b5:f4:1c:c9:ed:62:ac:51:7e:86:d0:73:b2:89:0f:38:6a:7c:
         7b:24:79:9d:77:5c:54:13:27:cb:e2:1c:d5:4a:6d:dc:03:ba:
         5f:a2:92:80:2a:a4:3e:c9:c9:8c:58:23:bd:ed:c8:09:dd:86:
         6a:dc:a0:cb:49:cf:06:4b:04:c7:ef:b4:e9:1f:ab:b1:a8:3e:
         d2:5b:62:d0:0b:19:ae:6d:51:26:4d:c2:48:cb:d7:ce:dd:7e:
         f6:a7:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:46:24 2024 by rpki-client on console-fra.rpki-client.org