Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File:                     76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier:          i1KiVPNlAfp5g9ZSF5XsoQJCKgG14cf55XhCA5XvbPM=
Subject key identifier:   9B:C2:9F:05:27:46:D7:94:2E:CF:A0:FF:5B:D3:0D:45:66:90:26:AF
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer:       /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial:       018F3C667688A4D08E26BBFF01CEC9662FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number:          10E5
Signing time:             Fri 03 May 2024 03:01:38 +0000
Manifest this update:     Fri 03 May 2024 03:01:38 +0000
Manifest next update:     Sat 04 May 2024 03:01:38 +0000
Files and hashes:         1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: NhLweCaeYTNNNjDd+l1tq+BU/7d73Iaz/sKmtOAsYk4=)
                          2: FhQ69VG90KjPVyq5OYmdevUMLmU.roa (hash: DKdVxBbgXUFZU/obDvqJi889ocbcD7Q2TSWC/kx0zGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:76:88:a4:d0:8e:26:bb:ff:01:ce:c9:66:2f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
        Validity
            Not Before: May  3 03:01:38 2024 GMT
            Not After : May  4 03:01:38 2024 GMT
        Subject: CN=9bc29f052746d7942ecfa0ff5bd30d45669026af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:26:83:36:52:71:eb:31:4f:c7:f3:97:33:c7:
                    95:e3:40:cf:c3:50:d3:ff:c9:d9:43:7e:5f:24:98:
                    0f:17:15:64:a8:83:ec:b0:3a:69:92:c0:f4:26:82:
                    25:6e:5e:24:96:5c:da:2a:c1:8c:c9:80:e7:ed:18:
                    a6:30:e5:18:48:74:13:cd:63:84:de:b3:06:d3:a0:
                    0b:8a:66:02:3e:40:80:e2:45:75:a2:32:05:fd:4c:
                    ac:43:71:bd:7f:f3:11:5f:d0:0c:93:21:db:e5:26:
                    ff:d5:cf:6d:56:84:b9:6b:40:dc:26:32:1d:68:34:
                    0b:8e:20:f6:d8:44:2d:d9:60:2f:07:5f:6a:d3:66:
                    51:cf:da:6d:d2:ec:8e:d9:b4:d9:4d:b7:84:7b:14:
                    f3:47:96:68:23:aa:fa:be:11:1d:6e:0c:3b:79:87:
                    4d:39:8b:ce:9b:30:37:41:f2:f2:2e:8e:77:9a:e5:
                    c7:36:86:a7:0b:10:90:78:b1:d4:46:0a:e2:50:45:
                    a9:0b:53:02:bf:a3:1e:38:43:e9:e2:c5:b8:55:65:
                    7e:cd:06:fe:48:83:16:cd:c9:b6:ea:12:5b:61:a9:
                    4e:17:4b:22:ce:f9:11:2c:13:08:d3:0d:c1:c1:6a:
                    9a:6c:31:cd:0a:5e:a9:c3:27:ea:14:47:e6:64:5b:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:9F:05:27:46:D7:94:2E:CF:A0:FF:5B:D3:0D:45:66:90:26:AF
            X509v3 Authority Key Identifier:
                keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c0:56:65:d5:df:21:43:7b:57:ef:08:6b:8e:f2:6f:0c:64:
         94:2c:bb:2b:79:ff:22:c0:b3:4c:36:88:45:ac:b6:a1:33:26:
         80:f4:93:09:fe:57:6d:a7:d9:c4:6e:46:08:89:6b:49:80:3c:
         3c:40:07:26:9f:56:79:54:cb:af:36:bc:aa:5a:56:e8:49:41:
         8b:b8:3a:ce:21:40:b0:8b:d5:32:64:80:e2:f2:6e:00:b2:84:
         12:17:9a:58:78:6c:68:5a:c7:eb:13:61:a6:e7:94:1e:76:80:
         a5:d1:3d:79:f8:75:49:b5:1b:07:0a:17:5e:11:8b:24:4e:0a:
         c6:78:3d:31:19:0a:49:ef:cc:f6:91:e8:3b:55:07:69:49:10:
         12:da:de:e7:54:56:4f:f5:2f:76:ca:fb:14:a7:fa:5a:27:d0:
         c6:8f:7b:c2:54:dc:92:bc:d4:4e:d1:b9:5e:0d:28:e3:14:74:
         e3:0a:19:b9:5b:88:04:de:d7:c6:51:85:4f:1a:c8:df:83:6d:
         d7:e5:45:ce:42:00:74:93:36:4a:92:98:70:05:1d:f4:d7:b9:
         f5:58:78:ce:ef:e6:37:44:bf:41:37:cc:ef:2d:46:28:3e:5d:
         93:cb:7f:e3:87:43:05:b1:49:4a:b9:2e:93:bc:e5:b6:00:1b:
         a8:c8:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:52:14 2024 by rpki-client on console-fra.rpki-client.org