Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File:                     28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier:          kihqj9LpBxKzs7BUVmbj5DdfsKUpIpE11+3igXu743E=
Subject key identifier:   7B:3A:3A:B8:AB:AB:68:56:45:4A:B9:80:B3:6E:A0:50:44:BB:76:D3
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer:       /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial:       018F43B368058E4FA0A6375B3F27642ACEDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number:          113F
Signing time:             Sat 04 May 2024 13:03:01 +0000
Manifest this update:     Sat 04 May 2024 13:03:01 +0000
Manifest next update:     Sun 05 May 2024 13:03:01 +0000
Files and hashes:         1: 1DUDxiN76LkQ2OUlXg9t_DFqg6g.roa (hash: 9uztc5ckgtCrBXKcOkt/HNgGCAlgjU4Skl0Qr1Ed2xU=)
                          2: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: O2kHRUwj4i9qDHEh7Ax40ZvLHV17H4XXDW8do4IDTGE=)
                          3: RAIwJlLMmbi52uiNLBXpJx9fLmQ.roa (hash: EJekfAHCd3zvMtM0pKY1yD8kGniJzrVRKhuNilqk3iQ=)
                          4: yAp9Pdl_fhqg2grNpTEtVW5fOf8.roa (hash: O09Yg2shXLM/algKeAdXqS541W34LEbivhzmvySfLFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:68:05:8e:4f:a0:a6:37:5b:3f:27:64:2a:ce:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
        Validity
            Not Before: May  4 13:03:01 2024 GMT
            Not After : May  5 13:03:01 2024 GMT
        Subject: CN=7b3a3ab8abab6856454ab980b36ea05044bb76d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:a2:56:3f:9e:15:ee:0a:5d:9a:30:b8:cf:
                    f2:4f:c1:07:23:78:79:7a:66:4e:b4:88:8c:53:82:
                    1e:71:c4:ec:43:99:12:ef:e6:33:eb:d0:2d:11:32:
                    b7:05:ae:34:bb:5e:a1:4c:e5:bc:ad:32:62:29:d3:
                    1a:ba:10:15:de:f6:e1:93:2a:e9:2d:0d:83:f7:04:
                    bc:7e:f2:b4:a3:89:2f:40:35:49:da:4c:69:76:ee:
                    e9:e0:7b:ea:05:38:13:08:df:7e:99:6e:14:06:ee:
                    6a:83:d8:dd:2f:6c:66:43:0c:e4:16:fe:75:2b:21:
                    52:93:05:8d:1c:20:e7:8e:2e:fc:02:31:ac:28:55:
                    32:d4:d2:93:67:9d:83:1c:b4:d7:96:4c:38:db:83:
                    2a:c1:07:e8:ef:da:72:64:f3:d8:92:46:37:34:ab:
                    a7:25:50:42:63:bd:2f:ce:e6:f9:65:16:47:73:10:
                    08:78:f7:d4:8c:6d:9c:c2:e7:5f:ab:b5:62:43:30:
                    27:26:44:32:5a:c8:d8:af:fe:58:cf:7f:a5:6f:21:
                    50:5e:55:78:0f:16:0f:00:6c:e7:3d:4f:b9:30:56:
                    46:56:ce:46:8f:39:18:cf:ad:30:1a:b9:28:7e:20:
                    60:6c:fa:49:8c:bb:22:3a:c3:25:ff:9d:f7:a4:c0:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3A:3A:B8:AB:AB:68:56:45:4A:B9:80:B3:6E:A0:50:44:BB:76:D3
            X509v3 Authority Key Identifier:
                keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:7e:88:c9:a6:e8:6d:ca:e6:65:ca:9e:15:c1:91:4e:8f:
         e1:a0:bc:68:ac:4a:be:5d:a0:34:27:c8:24:07:c0:b5:79:92:
         7e:de:25:0c:15:58:24:c4:5d:29:77:6f:4c:12:26:99:52:67:
         90:b3:a4:0e:a5:2e:27:08:66:be:88:a4:87:74:dc:37:5b:c3:
         d7:2c:01:b4:47:49:26:8f:04:0b:24:35:13:d6:e3:cf:33:07:
         a1:6a:ad:18:b5:0e:0e:5c:a9:0a:45:56:0e:f2:8a:57:85:67:
         ee:21:94:d0:5f:03:78:6e:31:59:48:1b:d6:7c:59:5a:5c:5c:
         41:80:52:ae:71:86:dd:68:c4:d9:41:c7:4c:7d:fe:31:f7:39:
         7c:25:43:fe:62:2b:7d:e4:d7:06:ae:82:53:42:2d:a4:5c:7b:
         3d:d4:3e:b9:35:29:51:a6:00:de:81:8c:58:6d:d6:9d:f7:cb:
         68:5b:dc:65:cd:85:6a:f8:d6:3a:53:6d:94:fe:41:ed:de:86:
         e5:12:e5:aa:a0:c5:2c:ee:44:15:97:c3:4a:fe:e5:69:23:f2:
         26:95:f8:ab:ff:f3:16:a5:db:96:77:51:35:c8:92:b2:4a:27:
         6c:7d:d4:73:cd:00:97:0a:1e:2b:fe:f7:6c:63:6c:ae:8e:e0:
         ce:e4:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:51:57 2024 by rpki-client on console-fra.rpki-client.org