Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File:                     7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier:          jL4Qvu0SG42eGBfYnqGVJ8gAmbW66PlesmgmQZxD/9Q=
Subject key identifier:   29:EF:0F:80:7F:8C:62:69:F8:E7:3E:A8:48:53:91:2F:41:F7:FA:43
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer:       /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial:       018F5437506953496B12B4D0921737116333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number:          115E
Signing time:             Tue 07 May 2024 18:01:02 +0000
Manifest this update:     Tue 07 May 2024 18:01:02 +0000
Manifest next update:     Wed 08 May 2024 18:01:02 +0000
Files and hashes:         1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: +rZEt0Wtdi9bgfhEfEJJq5R3RMmDRA8WqGJPZ9BH3fU=)
                          2: gc6tyuD9na-jtm82_8a6ibtdeuY.roa (hash: /ubLPvozII99NDtyT4pQcOTtexf3r4oV1gV6RBwKpps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:50:69:53:49:6b:12:b4:d0:92:17:37:11:63:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
        Validity
            Not Before: May  7 18:01:02 2024 GMT
            Not After : May  8 18:01:02 2024 GMT
        Subject: CN=29ef0f807f8c6269f8e73ea84853912f41f7fa43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:4e:13:9c:91:eb:d8:10:09:50:48:19:ef:
                    68:c9:cf:d0:5c:ee:71:44:cb:2a:57:9a:87:40:74:
                    ff:15:8b:fb:8d:b1:bb:7a:84:c9:a0:8f:41:4e:e5:
                    60:35:35:65:96:8d:4f:09:94:21:e6:17:f6:d1:85:
                    60:28:28:03:01:cf:44:7f:e3:22:95:0a:6a:0b:4b:
                    c0:77:31:e9:5a:0a:c4:05:d9:98:65:7b:b3:0b:4a:
                    8e:8f:b8:b2:20:2a:9c:b8:8f:5a:83:99:c2:ef:19:
                    18:71:21:18:22:6a:3e:66:9f:9a:22:46:7a:d5:49:
                    78:22:cb:f9:21:cd:f4:ca:1d:e7:da:f4:69:a4:e8:
                    55:09:8f:c1:92:16:68:8f:0e:47:59:b5:7b:06:4c:
                    26:59:bf:4d:f1:e5:29:71:8f:be:a1:f9:61:99:20:
                    61:50:e5:e2:14:68:2a:cc:48:a3:6b:a0:21:e2:af:
                    0a:8f:e9:d8:ab:06:e9:04:68:f7:63:9f:b8:1d:a5:
                    7f:00:8c:32:b1:16:ac:95:82:d8:74:bb:bf:43:79:
                    b5:7f:01:36:54:c6:ed:a2:e4:3f:d3:70:a6:21:1f:
                    3f:f4:dc:57:ae:ac:be:f2:d9:94:3c:b0:6c:07:fd:
                    c0:e1:61:96:00:ee:80:c1:86:2c:29:a8:dd:cb:0b:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:0F:80:7F:8C:62:69:F8:E7:3E:A8:48:53:91:2F:41:F7:FA:43
            X509v3 Authority Key Identifier:
                keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:19:d8:d1:94:1e:31:bb:98:bd:da:77:0b:2f:76:84:8f:57:
         e8:66:57:24:69:0f:ae:77:c1:23:76:c7:7f:2c:d9:77:f5:c1:
         c5:ce:b6:a1:bc:6f:d4:00:fa:8d:71:94:c9:58:a3:5b:d3:99:
         30:f9:a6:9b:e4:5f:7e:a8:2e:93:bc:3d:84:1d:dd:59:02:54:
         b7:e0:40:8a:06:7a:83:62:dd:d6:98:b5:60:c6:44:e8:26:ce:
         ae:46:e6:ce:af:f0:f0:90:01:06:81:ac:1f:cd:7e:46:db:e1:
         0c:67:41:32:18:b8:9f:a2:77:8e:76:56:37:4c:a8:6e:a1:b0:
         87:af:f4:3b:ba:c6:9f:3a:5e:b6:95:bf:63:68:6d:b9:2c:98:
         35:a0:60:24:a5:66:e5:a3:a0:8c:fd:48:1f:bb:45:c6:53:f8:
         2a:61:e8:50:35:eb:2d:d9:5a:1a:63:1b:4a:e6:5f:65:d6:3f:
         e8:1e:3d:49:f8:48:8e:42:2e:16:3c:69:95:3d:6f:b0:92:c1:
         3a:8a:dd:19:8c:4c:6d:14:de:7f:98:88:e4:17:03:b1:10:1e:
         96:3b:5b:50:f1:d4:5f:10:8b:49:77:ea:f9:77:1d:6e:cf:7c:
         ba:fc:a6:e6:a2:e1:70:40:94:e4:54:8f:51:6b:3c:f3:7d:74:
         23:1a:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:56:05 2024 by rpki-client on console-ams.rpki-client.org