Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File:                     71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier:          XuWXihB9S1v9znTDT+YZVBjoquMxQYkZyaBPxZrZGlg=
Subject key identifier:   50:4F:A8:D1:C7:4E:3A:EC:BD:B0:F4:E6:EB:48:BE:74:DB:2F:43:3D
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer:       /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial:       018F505A96F2E56C5E884E112E3B92563CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 00:01:05 +0000
Manifest this update:     Tue 07 May 2024 00:01:05 +0000
Manifest next update:     Wed 08 May 2024 00:01:05 +0000
Files and hashes:         1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: 2aYClUFPP5YYqmMxLv0wmQQU6r6bDejMfepslCnSWZg=)
                          2: MdHDHQ3oqJJzFSrNEnCuCOCYvPQ.roa (hash: d04Ov7eXSMtS6ell7biOtUWgIAS6h7+pxx5AoEpdNDk=)
                          3: _6sxy31l23Ebt-7OJZAYWUkexGY.roa (hash: UXZdcK1cO0QOscYIezG2c7Twcjx54hSloxJdrM+D6l8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:5a:96:f2:e5:6c:5e:88:4e:11:2e:3b:92:56:3c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
        Validity
            Not Before: May  7 00:01:05 2024 GMT
            Not After : May  8 00:01:05 2024 GMT
        Subject: CN=504fa8d1c74e3aecbdb0f4e6eb48be74db2f433d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5c:7f:b7:14:67:ad:b2:18:21:e3:7b:17:ae:
                    2f:f9:9c:34:3e:0f:a7:c3:60:99:50:d1:64:b2:63:
                    0c:36:3f:f2:93:4a:77:7a:20:a5:85:74:10:78:93:
                    63:1c:fa:1a:40:2c:89:07:3b:5c:28:fd:d0:9e:02:
                    98:f2:e3:9e:30:b2:d3:27:70:95:38:1f:f8:b5:38:
                    8c:2a:68:e2:b0:00:77:5f:07:9f:f8:2f:f3:87:45:
                    2f:23:0c:82:a2:f7:6e:68:f9:38:a9:69:0d:ba:41:
                    4e:a0:08:bd:e5:a5:c6:ca:c0:33:15:c7:29:8e:f9:
                    45:41:b8:9b:42:c8:0f:51:b8:43:e4:c9:7d:b2:62:
                    38:9e:24:b8:62:c1:19:78:45:dd:92:56:f2:38:6f:
                    65:93:87:d7:d8:dc:bc:ea:e1:ff:36:95:89:96:de:
                    a2:34:1c:b0:2f:c8:37:bd:11:1d:d3:4e:91:f8:d7:
                    b3:d9:ea:0b:1b:27:79:d4:15:76:08:c5:80:ee:8e:
                    42:5c:d7:ab:8b:72:ec:fb:ec:63:6c:b4:28:28:0d:
                    83:cb:8c:58:c9:2e:1b:c6:06:e9:20:57:10:76:2d:
                    b4:9a:e0:2a:bf:5c:4d:18:72:78:56:9c:b4:ce:ce:
                    bc:2f:ea:c6:1e:e7:3a:46:bb:2c:b9:9f:9c:92:66:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4F:A8:D1:C7:4E:3A:EC:BD:B0:F4:E6:EB:48:BE:74:DB:2F:43:3D
            X509v3 Authority Key Identifier:
                keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d0:84:57:05:58:58:07:56:42:0c:75:1b:72:5c:00:79:63:
         bb:a5:cf:22:00:7b:88:72:b2:d0:30:06:cf:67:eb:6e:29:dd:
         7f:45:bd:fc:7f:ca:83:5b:a2:ca:2f:f3:e7:ce:81:04:88:fe:
         b6:b3:fe:3a:3d:fe:b2:9f:2e:d8:83:ff:75:03:17:41:5b:b4:
         cf:d5:b0:15:3a:2d:e7:ec:83:cc:40:7a:c0:0f:c7:29:e8:0a:
         ef:1b:75:14:b0:f1:0f:b2:c4:7e:4a:e9:04:4f:0d:df:e9:49:
         cb:89:1f:2e:08:cf:dd:da:41:f9:7c:89:51:a8:d7:18:4f:cc:
         1d:98:db:7b:c6:25:04:eb:95:ae:f1:c1:43:e1:d6:6a:56:44:
         87:ef:fd:b2:55:f4:79:25:c9:d5:b6:5f:1c:75:20:f7:63:a4:
         c8:0c:58:42:a9:08:cf:b8:72:db:8c:85:0f:fa:d3:f4:00:12:
         07:bf:a1:38:c8:df:b1:d9:c2:b7:72:ae:df:f0:a7:47:c9:f5:
         1e:4d:4c:20:03:86:ed:a0:4e:b2:b7:9c:f8:b4:b1:f6:7b:71:
         27:72:ee:41:3a:9c:a6:9a:f9:c2:3e:17:7d:f4:c3:88:c8:3c:
         18:dd:d2:f9:67:eb:75:c9:a0:e4:5e:d8:a2:a6:8c:30:20:68:
         91:08:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:53:21 2024 by rpki-client on console-ams.rpki-client.org