Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File:                     fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier:          JKDV30Rktu+deY2eLcS0khglLu5kWH7klEOXK2TU/gw=
Subject key identifier:   E3:FE:A0:40:C5:4F:EB:C0:9B:87:AB:BE:C7:3B:B5:69:56:92:BB:9F
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer:       /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial:       018F8749EB56260D257762E8B6E8DF67DAA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number:          0BC0
Signing time:             Fri 17 May 2024 16:01:59 +0000
Manifest this update:     Fri 17 May 2024 16:01:59 +0000
Manifest next update:     Sat 18 May 2024 16:01:59 +0000
Files and hashes:         1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: m/jaonBxRZty7oQWP9xNTGR8Ug6BDSo10er1uX0O8u0=)
                          2: pPBgeojpcIg3swmGzejtTN7mrhY.roa (hash: cf1Lto6U+eObMIjJJwcLiYcGXVqZlr7Ldc6e4OgTsH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:eb:56:26:0d:25:77:62:e8:b6:e8:df:67:da:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
        Validity
            Not Before: May 17 16:01:59 2024 GMT
            Not After : May 18 16:01:59 2024 GMT
        Subject: CN=e3fea040c54febc09b87abbec73bb5695692bb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:e2:d0:31:6b:e5:d7:84:97:f6:d3:f7:2c:
                    4f:55:28:af:4e:da:e9:3a:68:b7:a3:7a:53:20:30:
                    a1:4f:cb:72:1c:3d:1b:54:a1:7f:15:a8:f2:f2:fd:
                    1b:b1:3b:10:1e:77:1b:47:67:ea:eb:e3:a8:05:60:
                    b7:26:b6:69:d7:9c:84:ee:90:e4:94:39:91:90:57:
                    ca:c3:6a:88:d1:1a:23:11:3c:f8:d9:0a:8d:6d:3a:
                    5c:fa:da:13:d1:17:a5:be:98:e4:42:16:fb:bc:9b:
                    26:92:51:5c:f5:a4:89:93:ed:1f:ed:fd:7b:ec:83:
                    ff:84:4a:77:1d:2a:4c:18:3d:17:9c:eb:de:1f:d0:
                    e3:ea:30:81:3c:45:61:c5:22:16:be:ad:33:0e:95:
                    b2:d5:b3:89:59:73:55:2f:4b:b9:4e:01:d4:c2:38:
                    6e:d3:8f:2e:21:12:16:59:32:1c:49:20:6a:8e:e3:
                    3b:03:ec:14:73:ba:91:65:ea:34:01:b8:5e:f6:5b:
                    90:78:c9:f4:7e:59:d4:ec:40:3e:ec:aa:c7:51:dd:
                    bd:09:9d:78:12:c5:89:0e:82:1e:1e:c5:c5:f4:23:
                    8d:40:aa:e4:a3:5d:41:31:fb:41:a3:64:15:1f:c8:
                    64:36:01:b1:d6:09:81:a4:4c:aa:0e:12:e9:f8:0c:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FE:A0:40:C5:4F:EB:C0:9B:87:AB:BE:C7:3B:B5:69:56:92:BB:9F
            X509v3 Authority Key Identifier:
                keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:16:e8:6a:83:70:29:2d:76:fe:af:0d:c6:c7:05:2a:4a:b6:
         70:07:ac:3b:db:bf:23:df:06:bf:be:1a:40:69:06:fb:d9:38:
         d7:06:be:ea:b9:20:e1:12:2f:db:b8:6b:5d:71:b7:fb:af:cf:
         28:bb:68:1e:43:b4:53:ac:e8:38:34:ec:81:0e:3d:ce:f4:c7:
         4a:df:59:7e:94:cf:d5:9c:1c:95:2b:c1:28:18:be:5d:f1:81:
         9e:7b:ec:63:b8:dd:31:36:1c:cc:83:00:4d:06:79:bb:e7:6b:
         5d:1b:24:ae:cc:9e:d6:4b:6c:f8:ed:0d:b7:c8:59:d6:0d:11:
         3a:92:8f:70:70:98:a1:97:23:91:ee:23:94:bd:07:40:b1:ba:
         bc:59:97:29:05:d7:58:37:34:27:43:1c:28:89:62:83:8b:a3:
         dd:6c:4e:d1:72:ba:ac:ba:eb:5a:e8:54:b8:60:5c:92:df:d8:
         28:06:99:06:1a:98:02:f2:41:7d:ed:28:2e:a4:ad:8e:52:c0:
         34:55:a0:3a:b2:e2:8b:b2:a4:c5:69:d2:7a:f4:f7:48:42:19:
         15:80:eb:80:04:40:05:de:c6:0a:d0:ba:5f:94:94:bd:84:84:
         75:1a:67:e8:16:46:f7:53:2a:2b:3c:93:77:53:83:a3:65:93:
         71:7c:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:41 2024 by rpki-client on console-fra.rpki-client.org