Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File:                     X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier:          NbrU6CiqYmR4aK6Ndf0wudDsCf2hzZFRvVNbn72qSBo=
Subject key identifier:   9E:E0:72:37:CF:88:7B:B2:B6:EA:FB:76:63:30:92:CD:5A:0C:60:6B
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer:       /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial:       018F7CC532F42B1D94857909F746B8DB79C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number:          0667
Signing time:             Wed 15 May 2024 15:00:49 +0000
Manifest this update:     Wed 15 May 2024 15:00:49 +0000
Manifest next update:     Thu 16 May 2024 15:00:49 +0000
Files and hashes:         1: NCUIFPYBE46xPxT9vDkAgERiZhE.roa (hash: 0YWBFT0brwWOlS/XjVuMvgoMwGUysC824GgKQhwp9r8=)
                          2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: jViwMFLxQB+4geFnz2hBaoI0FtJo7vnBbCHf45Xt92A=)
                          3: Yx5UYEtHJEqaFUEdpDqrgB3_pFg.roa (hash: qr9V2xm9rgb7tzvz8iBPH3CvCpH1miAF1lNSHGh8D+Q=)
                          4: vBZxo5xRa7wwp5UTXRhzpMnUDF4.roa (hash: slqEzKef+V0hkX2xxNfWrZesbPf6DnjOLtyVd2kenDI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:c5:32:f4:2b:1d:94:85:79:09:f7:46:b8:db:79:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
        Validity
            Not Before: May 15 15:00:49 2024 GMT
            Not After : May 16 15:00:49 2024 GMT
        Subject: CN=9ee07237cf887bb2b6eafb76633092cd5a0c606b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:07:7f:04:c7:91:09:2f:18:ce:cf:1a:f6:
                    97:26:05:18:d8:08:3c:fd:06:02:cd:c3:b0:64:4f:
                    ae:59:19:7c:ad:39:50:cc:13:86:a1:64:23:37:5b:
                    56:a8:cc:bd:5e:10:b8:d7:df:35:a9:17:82:67:7d:
                    51:7a:50:16:25:97:5c:21:03:7d:9b:e6:6c:08:0f:
                    cc:ec:ea:96:af:1c:99:9c:3f:2d:1c:07:b8:e3:b9:
                    f5:2e:c5:36:b9:e5:31:48:17:cc:cf:b7:63:86:05:
                    2c:da:e1:c7:b4:b9:5b:fa:48:bc:1d:d5:33:94:11:
                    19:eb:1d:20:00:0f:05:a1:88:31:e0:90:66:da:41:
                    c0:a4:68:36:05:16:4a:7e:99:94:28:12:e0:ea:14:
                    3f:15:1c:01:5f:46:df:c9:76:c4:6b:09:6d:3c:99:
                    06:19:7a:7f:d0:62:c0:44:fe:55:8f:ea:41:35:ff:
                    30:9e:93:63:af:d0:fe:80:dc:e3:74:57:ca:16:a3:
                    54:88:07:34:bd:4e:fa:03:7b:9e:f6:0a:36:0d:07:
                    3c:c2:99:68:7d:c6:ce:eb:6c:9a:a8:b2:db:54:a1:
                    80:04:32:54:29:80:ce:d5:28:7c:fb:3c:08:13:29:
                    b9:94:ce:89:64:4a:76:7c:4e:7b:2f:6b:c7:93:ef:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E0:72:37:CF:88:7B:B2:B6:EA:FB:76:63:30:92:CD:5A:0C:60:6B
            X509v3 Authority Key Identifier:
                keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5c:7d:ab:ad:45:50:b2:ee:01:e8:eb:5f:83:be:79:40:a1:
         27:9e:91:40:17:e9:75:c4:f1:f0:ff:c7:35:5f:f9:5f:66:e5:
         63:ee:d6:b6:1a:b7:79:84:d2:5e:51:5f:ab:a9:1b:14:69:29:
         45:29:e3:12:ec:c8:21:16:c4:bf:ca:02:be:94:06:2e:fc:8f:
         8c:ac:bf:01:0a:40:60:7e:75:c6:da:46:3b:36:3d:6d:bb:38:
         2a:d0:05:5c:b5:46:2d:fb:d2:e4:ca:1d:ae:1c:09:4b:ce:54:
         14:b9:61:6e:81:30:d1:e0:d4:35:9c:0f:27:f1:c1:72:5d:85:
         e2:f4:47:f7:b9:7b:be:a9:bd:08:de:94:d9:d5:67:09:92:17:
         b1:7f:c4:17:12:1e:6c:c5:b5:bd:ff:ea:26:72:49:66:f4:b2:
         2b:95:35:cd:6f:ef:21:38:63:4a:a9:b1:e0:3c:e6:d4:4b:a4:
         82:a5:1a:67:0c:51:e7:45:fe:a9:35:ad:bc:97:75:82:e9:12:
         de:07:94:39:85:df:40:45:33:45:cf:cb:a7:33:c3:81:00:66:
         2d:42:84:af:dd:90:e2:91:79:45:49:bf:96:69:8d:4a:8a:c9:
         a8:d2:f9:29:27:9d:fc:14:3b:79:af:bb:c5:b5:25:8d:6f:58:
         2b:83:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:27:52 2024 by rpki-client on console-fra.rpki-client.org