Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File:                     7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier:          xY1HUUq3f8+kMjgzt5NdvxzfwHff9W7aamqLtYrW7WQ=
Subject key identifier:   D0:8F:D0:EA:2D:D1:85:49:2F:67:FA:00:CB:86:86:27:B1:81:6B:A7
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       018F4C7E0DA41DF8CF8683A9C4FC6441C5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number:          115B
Signing time:             Mon 06 May 2024 06:01:20 +0000
Manifest this update:     Mon 06 May 2024 06:01:20 +0000
Manifest next update:     Tue 07 May 2024 06:01:20 +0000
Files and hashes:         1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: mh48TwUrXjeu2qmsFpnb83jGjTPIAMWZpSfIKpgvp7o=)
                          2: AmCavsB7sXrk2Lh_QqZeMx0oG6c.roa (hash: Z+ukCeYILz6Mg6vOM9y/O3LVWyGWtAxioJPt02Qnjk0=)
                          3: UGWZytFXBSTiJgNKNCCarirukKc.roa (hash: 3ZLhMwlpW668mhfvkUGZf0jI6WrEGECOTuhia2dkomI=)
                          4: iGq_HkflsuGXVBXMxRJvYVrCKt4.roa (hash: 5J3usOiq41wbspvKlkZhj3AzoYRZs/6wTi+fyILvEV8=)
                          5: tMJC2H5hC42J_zoGhjAgaRp_axo.roa (hash: 2C56hQaxT9FBBlRHSzwTV2lWteS44CS7E0813hBve8I=)
                          6: uaIRUdhpeBrihz5_tKPya0l1HQA.roa (hash: nXStrXqy+W1GQyxvaukh3YEfHw2Y+Etye5wsJybgLMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 06:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:7e:0d:a4:1d:f8:cf:86:83:a9:c4:fc:64:41:c5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: May  6 06:01:20 2024 GMT
            Not After : May  7 06:01:20 2024 GMT
        Subject: CN=d08fd0ea2dd185492f67fa00cb868627b1816ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:95:93:e9:eb:7c:21:da:fb:60:3a:3e:e3:
                    23:fa:f1:e5:fb:89:d6:5b:d7:1b:49:43:c0:89:2a:
                    3d:f5:c9:c2:7c:2d:38:4f:7f:96:62:6d:dc:b2:e6:
                    9a:5b:1d:28:fb:33:23:3b:8f:e9:96:56:47:b5:75:
                    64:09:48:61:e4:fd:3d:3c:80:15:ea:08:90:7b:91:
                    35:dd:7a:d2:6c:a7:3f:7a:c6:99:64:d5:05:36:32:
                    08:cd:46:68:04:fd:d8:75:11:cc:f0:6e:41:40:a6:
                    d7:67:87:47:1f:5f:32:16:b2:7e:3a:da:6c:55:bc:
                    cb:aa:4f:95:17:e9:f8:ef:90:0d:cc:77:1a:f8:07:
                    6b:a1:a2:56:8c:78:b0:d2:00:c3:b5:1a:49:e1:2a:
                    5c:08:02:51:ce:da:d9:99:65:c3:50:15:16:0f:74:
                    41:d6:c3:53:c9:90:58:52:8d:50:d6:bc:c6:06:78:
                    8f:1a:6a:33:c1:10:9e:df:7b:60:80:24:6e:df:e5:
                    8a:7f:4f:fb:b5:a0:87:3b:ae:b6:df:a2:8e:2b:9d:
                    87:17:29:9e:51:35:4a:23:07:60:e5:89:9c:e5:5e:
                    36:45:6d:8e:48:5a:99:0e:f9:38:82:82:46:6c:88:
                    50:a5:c8:9b:5e:70:87:a7:55:de:94:b8:06:5b:96:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8F:D0:EA:2D:D1:85:49:2F:67:FA:00:CB:86:86:27:B1:81:6B:A7
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:ea:98:fb:eb:f6:a7:23:3b:35:22:24:62:01:d8:b0:08:
         cf:37:5a:2d:de:8e:b7:72:e6:26:f9:fa:b1:4a:da:60:cd:e1:
         85:12:90:af:d3:f5:c2:8f:4b:be:4b:b4:dd:be:0f:6a:2c:98:
         f7:c6:ad:ac:1d:6c:d7:61:1a:a3:86:c3:b2:12:d4:eb:89:4e:
         d9:d8:08:04:51:4a:05:18:f0:e8:6c:0c:de:92:9c:21:4b:c8:
         cb:fe:0f:1b:de:31:38:46:b6:02:36:a8:7d:7b:03:19:25:eb:
         5e:bb:88:c6:fb:9b:c1:d6:d3:ec:69:2e:5e:50:74:7d:86:83:
         0e:13:d6:2b:68:16:a5:9f:5d:92:53:4f:85:65:b3:b9:94:a6:
         f5:a7:25:f9:c8:0d:f1:c4:d0:39:e3:fd:59:27:9a:1b:dd:85:
         6f:c6:31:e9:07:1f:a7:74:4f:11:70:96:fc:c5:41:77:b3:82:
         59:eb:d9:f6:ef:da:03:a0:4f:e6:f9:d6:4d:0a:71:8e:86:8c:
         79:26:be:28:80:bf:f2:fe:f7:b2:c2:b3:79:51:a3:c0:83:b3:
         bc:88:aa:f2:ad:78:c4:26:82:26:6f:bb:69:9a:b1:34:03:f2:
         6a:ec:e5:df:15:f5:ff:7a:33:43:05:be:8b:8a:95:69:88:85:
         62:6e:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:42:00 2024 by rpki-client on console-fra.rpki-client.org