Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File:                     cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier:          mqIoWAM3nBfyEH/e6u3rFl86jsUCPmIuZSRMOdufx2c=
Subject key identifier:   D3:94:14:A4:A4:73:DB:1B:64:42:EA:5A:9E:ED:C3:00:03:D1:93:30
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer:       /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial:       018F87ED337850AA7C8C1E25C2F81ABDBDEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number:          0D83
Signing time:             Fri 17 May 2024 19:00:20 +0000
Manifest this update:     Fri 17 May 2024 19:00:20 +0000
Manifest next update:     Sat 18 May 2024 19:00:20 +0000
Files and hashes:         1: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: x+e3+ieGXlaeg8/uP15MrtevLPkQcKF56ExTj6h7gCE=)
                          2: oP1uck7vT0EeQoJK0Uh_MIrT27s.roa (hash: r3X6w2UJb6A71oC+LQuwsNrP9F7a7CXOc7RFi7W49MA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:33:78:50:aa:7c:8c:1e:25:c2:f8:1a:bd:bd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
        Validity
            Not Before: May 17 19:00:20 2024 GMT
            Not After : May 18 19:00:20 2024 GMT
        Subject: CN=d39414a4a473db1b6442ea5a9eedc30003d19330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:21:4f:bf:ef:62:22:be:3d:ed:b9:f9:0f:
                    70:70:bb:2a:07:c3:ed:d0:e3:e9:72:36:9d:b1:c8:
                    96:92:93:61:be:15:c9:e9:d9:38:e1:53:7b:ea:09:
                    f4:af:f9:c5:c5:fb:b4:f7:65:82:a3:92:87:70:87:
                    47:81:20:bb:76:62:81:72:8f:60:94:ea:3e:ae:54:
                    be:29:d4:a0:9d:12:4b:20:64:db:59:2c:a2:c2:13:
                    27:ef:fe:91:80:19:04:14:7a:fd:7a:fb:75:7d:e7:
                    22:c2:18:15:37:b9:58:aa:ed:2e:e9:30:6c:f0:68:
                    b3:fd:1a:cd:6d:2f:8e:86:d5:08:ed:06:6b:99:b8:
                    92:a5:ed:ce:74:34:77:99:09:b8:67:5d:cb:3e:5a:
                    bf:88:b4:c7:be:66:f8:67:24:be:f1:29:a2:a3:d0:
                    1d:cd:83:0d:2b:3e:e3:8c:f5:95:42:c6:c0:ff:a8:
                    11:06:f7:2a:57:e4:cd:30:4f:b3:43:ff:bd:5b:6d:
                    c0:ec:05:75:a3:2f:59:ba:33:0f:13:e3:fa:27:2d:
                    3c:cc:b3:93:5b:3d:f3:d9:01:a7:fb:f3:de:79:0b:
                    3e:46:75:8f:1e:46:f1:5d:83:d5:32:36:b6:a7:fd:
                    11:20:97:0b:e2:cd:ad:d0:ae:c2:02:3a:77:6c:c8:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:94:14:A4:A4:73:DB:1B:64:42:EA:5A:9E:ED:C3:00:03:D1:93:30
            X509v3 Authority Key Identifier:
                keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c5:0b:7c:e8:4f:08:93:d9:fe:7e:85:48:7e:5d:27:f9:d1:
         ae:e2:36:33:61:9b:60:8f:86:4f:2d:5c:f2:cd:bc:fc:5b:ee:
         da:70:8f:76:25:35:36:d5:1a:4c:e5:05:e8:27:af:b4:4e:2e:
         9e:60:8e:4a:53:19:47:b6:d5:d2:81:68:9d:be:2d:d6:f0:95:
         b7:c1:04:e7:e2:3f:d7:02:ed:eb:09:73:03:05:82:95:ab:e9:
         ce:3d:7f:ad:41:62:8c:93:3c:01:1b:cc:76:94:7b:cd:2f:99:
         1d:31:b9:c7:cf:3c:a6:56:c5:e8:fa:aa:66:8b:56:7d:12:01:
         22:ca:b5:12:a1:37:0d:19:ac:aa:59:49:a7:b4:53:cb:af:cc:
         6c:7a:90:ca:5d:2e:65:fb:1e:0e:b2:78:7c:33:15:2d:e7:84:
         b2:97:f5:d3:cd:31:c1:97:da:ea:a2:de:d7:40:cb:55:03:d7:
         ce:d3:cd:1c:4d:ca:7f:3e:36:46:ef:e7:5f:2a:2b:e2:c2:86:
         bd:37:dd:62:70:c9:37:0c:02:6b:df:67:9d:6c:8c:a7:96:50:
         81:31:33:68:bc:37:77:a0:bd:b5:48:0a:0c:70:0c:f7:32:67:
         7c:73:66:09:f9:9d:65:c3:56:b4:87:e6:47:86:50:f4:0d:b1:
         4f:e4:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:04 2024 by rpki-client on console-ams.rpki-client.org