Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File:                     fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier:          zaL70XMsVqYUx+Bbd487QbstOK0fevHluzgd6+DyQLU=
Subject key identifier:   75:A3:C8:E0:13:84:65:85:2F:0B:A4:4E:FE:10:1B:7B:38:C6:51:81
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer:       /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial:       018F87490CDA97B5A6D42CA0DE2B9247B9D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number:          072B
Signing time:             Fri 17 May 2024 16:01:02 +0000
Manifest this update:     Fri 17 May 2024 16:01:02 +0000
Manifest next update:     Sat 18 May 2024 16:01:02 +0000
Files and hashes:         1: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: 4vVL6EDi4IzctyNfam9k3PaTOXMb71URHw3bSgJ/uao=)
                          2: qqxZHEfE3BM1CD-bU9ghbsmV2_8.roa (hash: MZr3hrKxpbDbL2XbXqAs+TriwwJIe65qIDeWX57mFgI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0c:da:97:b5:a6:d4:2c:a0:de:2b:92:47:b9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
        Validity
            Not Before: May 17 16:01:02 2024 GMT
            Not After : May 18 16:01:02 2024 GMT
        Subject: CN=75a3c8e0138465852f0ba44efe101b7b38c65181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:75:50:dc:53:8f:36:bc:d6:f4:47:19:5c:
                    ca:45:28:d3:9f:73:dd:71:13:54:e1:03:87:58:e7:
                    a5:9f:b4:ac:38:54:4a:aa:60:32:97:ed:be:d1:fd:
                    8c:ae:0c:b1:1d:c3:da:14:04:3d:a5:b6:ac:4b:01:
                    8e:7b:b0:02:f0:ae:55:02:a6:38:ae:6f:25:38:af:
                    42:95:7b:bb:70:1d:64:50:6d:1f:94:15:cf:b8:cd:
                    72:64:49:eb:45:07:ad:b3:d2:ba:3e:ff:38:62:d3:
                    94:19:a8:66:b7:ee:4a:82:c9:44:d1:de:4d:58:74:
                    01:2f:1a:57:27:a3:82:ab:ab:81:e7:04:74:b8:dd:
                    15:30:74:22:f1:19:45:f7:73:14:7f:b9:ea:91:ef:
                    73:b1:76:98:5e:13:aa:37:d8:c9:1c:e6:2a:0d:17:
                    01:bf:3f:8d:42:67:63:6d:d6:7d:36:b2:03:66:01:
                    d9:be:49:e6:d6:ea:f9:ac:77:92:9f:5e:4e:09:aa:
                    49:2f:02:1a:b3:89:0a:61:54:ee:a2:f1:f6:0d:36:
                    a9:bf:7d:15:e9:bb:2c:d3:cd:4b:e8:cb:05:f3:3d:
                    e4:53:24:ff:cc:14:78:b0:0b:b1:99:86:a2:b7:a1:
                    d6:2a:d6:08:32:bd:f7:53:96:98:3e:f2:5d:95:66:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A3:C8:E0:13:84:65:85:2F:0B:A4:4E:FE:10:1B:7B:38:C6:51:81
            X509v3 Authority Key Identifier:
                keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:63:ef:43:01:37:6c:56:56:74:1c:3b:34:b8:88:e5:bc:bf:
         cc:77:3d:5f:8a:e9:00:a3:53:2c:2d:b1:0c:af:d7:39:cb:42:
         74:3b:6e:59:2e:27:a2:89:fc:2a:75:84:b2:53:a2:64:dc:36:
         15:e4:5a:79:3e:9f:9f:be:f9:df:1b:e2:94:db:b8:b1:25:44:
         0f:b2:31:a7:6e:4c:39:96:da:b0:40:d0:3b:73:4a:6f:81:d7:
         85:c1:05:c3:fb:8d:14:ac:de:a6:6e:1c:6e:02:7b:9a:06:ea:
         5e:83:46:3d:85:f0:e8:81:4d:78:2b:c2:b7:7f:01:e3:80:26:
         8f:6a:35:c9:33:6b:59:d5:00:17:85:d1:5c:16:5c:d3:12:5a:
         fc:93:df:2a:81:1d:f7:c4:20:20:99:50:a8:13:57:68:63:4d:
         cb:c4:4a:7b:33:4a:5f:88:06:a8:22:f7:df:6b:6a:ec:47:b8:
         89:b9:6f:82:ff:f6:85:0e:ef:e1:55:01:71:5f:91:7d:29:43:
         e7:c7:44:4d:fa:f2:33:43:d9:08:d5:0d:5a:7d:56:d0:b7:11:
         f7:41:06:c5:ab:4a:d0:89:32:ee:65:b1:02:3f:e7:7f:31:04:
         ce:bd:47:4e:00:c9:3b:41:51:08:d2:1e:fe:8b:37:93:12:68:
         7c:fc:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:01 2024 by rpki-client on console-ams.rpki-client.org