Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File:                     s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier:          qrZM/itjYC4lL88OcUV9yN7U7XVEptvWAcdb6PhOJIQ=
Subject key identifier:   41:69:57:3D:73:D6:FA:C5:E5:E4:A7:E0:36:FC:CC:C8:98:31:9C:8B
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer:       /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial:       018F83A282382AD56B284CF38C6EC7773284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number:          01E7
Signing time:             Thu 16 May 2024 23:00:16 +0000
Manifest this update:     Thu 16 May 2024 23:00:16 +0000
Manifest next update:     Fri 17 May 2024 23:00:16 +0000
Files and hashes:         1: S4gtWYTYDEjS39eHVUxbFmHGZV4.roa (hash: zKLPTHhzh4CAXPLKwlgSG4GwY02X+J75JpY4N3k3zgw=)
                          2: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: UGVSO5ZC+Go2CXt447f7215Gsauqa4jctjp2OKgrXTI=)
                          3: wEztfgDsD3VgXR_6I7E9tHgko-0.roa (hash: csoAzGEEjkxJQ7QLqTKr0Z1Z0z14AnLYZP4PrJptqYE=)
                          4: yil-i8cAnOl5qnTClU7qPnqdIuU.roa (hash: EymTDlfA1ToaMHTTSx0gGlKgcMeq9SrJOmk8zxrHtBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:a2:82:38:2a:d5:6b:28:4c:f3:8c:6e:c7:77:32:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
        Validity
            Not Before: May 16 23:00:16 2024 GMT
            Not After : May 17 23:00:16 2024 GMT
        Subject: CN=4169573d73d6fac5e5e4a7e036fcccc898319c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:a1:dd:55:f3:18:13:e7:87:68:24:da:00:
                    74:43:f6:5d:1e:d9:19:53:0c:52:02:ff:ea:15:3c:
                    e4:38:81:dc:83:a9:a9:67:9a:e1:e3:2f:e9:66:7a:
                    e7:8d:12:fc:9a:4e:fe:6b:81:0f:1d:2e:4f:78:42:
                    f2:fe:6f:a1:00:a4:8d:05:c9:76:69:89:9a:76:ec:
                    30:34:75:4d:74:c0:c4:06:92:db:82:c4:ea:16:dd:
                    e3:91:5f:3e:aa:40:6a:54:05:19:ba:e6:7c:9d:84:
                    e2:5e:f4:e9:20:66:73:62:ed:64:4b:03:9d:91:5e:
                    67:6c:bc:93:8c:50:ee:13:f4:15:f1:8b:83:18:14:
                    80:a9:ff:0e:41:c3:83:ae:71:40:0b:16:de:f4:e7:
                    1e:2b:0a:d0:f7:3e:83:9b:fc:07:b0:a2:bd:ea:01:
                    45:34:6f:b7:2f:37:d0:9a:59:58:ff:6e:d1:08:1f:
                    43:61:3e:65:60:c8:bb:77:51:fa:c9:4a:9d:1d:0e:
                    05:90:7e:37:3d:63:86:df:1b:8a:76:5f:9c:9c:81:
                    b7:71:26:f7:ea:2f:73:da:2d:27:76:c6:42:fb:dd:
                    5f:22:38:34:e0:a4:59:fe:57:1b:86:12:a9:2f:07:
                    ad:27:58:9e:78:bb:b3:6a:0b:3c:2e:a5:3e:8b:b7:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:69:57:3D:73:D6:FA:C5:E5:E4:A7:E0:36:FC:CC:C8:98:31:9C:8B
            X509v3 Authority Key Identifier:
                keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:66:81:60:20:85:9e:54:3d:a0:69:26:86:eb:b3:87:f3:
         66:31:6f:33:ed:32:d9:6d:1b:2e:be:63:00:43:01:1e:8b:08:
         6b:e9:c4:5c:b0:0d:4b:3d:a2:aa:9b:f5:d3:05:23:b3:a9:d5:
         7a:34:4a:98:36:8c:81:01:d9:6e:4d:56:fb:c3:37:f0:72:ed:
         b8:fe:79:a3:41:28:9d:61:65:d0:a4:88:55:8a:e2:ef:31:84:
         6e:d1:05:73:33:58:6c:ec:3e:93:0f:6e:e4:79:de:b3:c9:33:
         07:70:12:55:40:ce:4f:a8:24:50:81:9d:25:f7:c4:87:56:dc:
         00:6f:8f:76:60:57:40:2e:2a:5e:72:ca:e9:8a:03:90:3d:23:
         cb:45:cf:bc:27:42:ae:01:80:5e:4a:39:ee:75:a7:67:87:ed:
         c5:83:08:17:a7:98:ef:32:33:60:26:3c:bc:ec:70:29:a2:c0:
         44:38:99:87:d4:d6:6f:8b:f9:c7:60:39:e5:d4:c7:c3:fe:50:
         b0:96:72:d3:b6:1c:4c:52:25:7a:46:52:3d:b4:d4:75:b8:71:
         b4:e7:b3:cd:b3:0f:3c:7a:8b:18:0c:d0:ab:c3:16:5e:1c:17:
         f2:c6:b0:f3:89:50:48:5a:97:7d:ce:93:00:55:10:a8:44:3b:
         8c:92:c6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:49:34 2024 by rpki-client on console-fra.rpki-client.org