Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
File:                     7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft (raw, json)
Hash identifier:          JzADoIvMOpTnBVEe0GvC5lWRTCw6CydkoBRqSb0PY7g=
Subject key identifier:   BF:C4:4A:DE:E1:3D:47:35:59:03:8C:07:F1:D0:FD:82:51:27:EE:4A
Authority key identifier: EE:52:7C:9A:03:56:29:02:32:83:74:E1:50:99:C3:65:84:6A:6B:E8
Certificate issuer:       /CN=ee527c9a03562902328374e15099c365846a6be8
Certificate serial:       018F42686619492B553876F47705875F5EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 07:01:29 +0000
Manifest this update:     Sat 04 May 2024 07:01:29 +0000
Manifest next update:     Sun 05 May 2024 07:01:29 +0000
Files and hashes:         1: 7lJ8mgNWKQIyg3ThUJnDZYRqa-g.crl (hash: nXFQ7wtOiUeR/fnOn7e7dtIKvFo/lbkKDvJN3IWvghw=)
                          2: ih-u8mSFv40UxhXyOm_u4-X6-tw.roa (hash: klWrPvGSxFkLCtYkV52VKMOc0yabch8S9qe5lFh5SVw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:66:19:49:2b:55:38:76:f4:77:05:87:5f:5e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee527c9a03562902328374e15099c365846a6be8
        Validity
            Not Before: May  4 07:01:29 2024 GMT
            Not After : May  5 07:01:29 2024 GMT
        Subject: CN=bfc44adee13d473559038c07f1d0fd825127ee4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:70:bf:e2:56:61:ed:34:85:e3:24:89:d2:
                    94:50:79:1b:d9:9a:c5:db:72:eb:44:f8:d0:d6:82:
                    a9:84:a7:0b:f3:66:92:46:3f:fc:71:d1:54:f5:3b:
                    f3:25:8b:ec:df:c1:ae:35:44:88:6a:62:f3:10:1e:
                    47:8a:f2:8d:0d:e3:31:58:95:e2:d1:1c:01:41:36:
                    4e:6b:89:b8:b8:fc:f2:07:5a:3c:6d:bb:ef:23:14:
                    14:a7:1c:4d:6b:71:25:f2:f5:f3:9c:8a:d0:13:3d:
                    39:21:f1:53:1d:7e:f6:53:3d:bf:47:6e:1d:a3:ab:
                    67:8c:e5:d8:e0:d3:d5:25:e8:a7:bd:dd:dc:47:8a:
                    c9:3b:d3:5b:ac:24:1d:73:e7:7a:23:3c:f7:54:04:
                    a7:7a:d7:ae:2c:8a:59:84:14:c0:93:c3:75:34:2c:
                    4b:ea:50:18:ee:a1:c5:31:5a:eb:62:d8:de:72:6d:
                    ff:b9:23:30:56:14:18:88:4e:12:22:ab:56:c6:b8:
                    83:f8:81:02:06:0f:f1:0b:9a:d3:47:64:92:d0:71:
                    31:e6:af:da:e2:28:b5:52:df:45:23:60:10:e0:c5:
                    18:8c:4d:1d:87:4f:39:5b:a5:38:b1:72:01:af:06:
                    fa:49:ca:7e:d4:7f:0d:d3:91:a6:92:46:71:ae:14:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C4:4A:DE:E1:3D:47:35:59:03:8C:07:F1:D0:FD:82:51:27:EE:4A
            X509v3 Authority Key Identifier:
                keyid:EE:52:7C:9A:03:56:29:02:32:83:74:E1:50:99:C3:65:84:6A:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:60:f2:06:1f:3a:e8:31:10:bb:20:97:06:a5:c9:a1:71:ad:
         d2:71:f4:9b:25:8c:6a:e7:d5:c7:13:6a:d1:5e:58:e1:f7:78:
         4b:0b:a2:41:78:58:1f:3b:38:6a:40:13:24:ae:39:cc:f1:06:
         7d:9c:c1:40:79:0d:51:00:5d:8c:16:eb:e3:a1:bd:b7:b5:d4:
         d9:32:d5:f0:23:5b:29:23:de:c6:42:ef:51:89:af:02:7a:f8:
         cc:3d:f8:5b:f4:0b:a4:98:55:d3:23:0f:da:4d:26:c9:9c:ee:
         64:0d:c1:f5:cb:74:4b:68:6f:7d:3a:0e:30:4f:da:a1:f9:7d:
         15:87:58:a7:63:1b:af:6b:1c:e7:44:dd:ca:9b:fb:c2:b5:10:
         34:8c:c3:f7:83:90:fb:1a:a8:d3:16:cd:83:b7:75:29:97:d9:
         49:57:80:52:d0:e8:ce:bd:6d:30:78:d6:94:a8:84:52:f2:22:
         fa:a7:ee:43:e8:5e:c2:73:96:18:f2:db:aa:6c:74:76:d2:8a:
         d4:31:5d:6f:94:4d:48:c0:0b:a4:46:9c:4d:7b:85:0b:47:47:
         32:d1:5f:3d:0e:88:b7:a6:57:1c:fa:2c:9a:07:f6:a9:cf:18:
         47:0c:5e:ff:fe:22:a9:be:eb:40:bd:df:55:3d:96:12:ed:fc:
         74:35:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:17:47 2024 by rpki-client on console-fra.rpki-client.org