Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
File:                     7hgkJLSEGX3DBFJAktzdmS_L5L4.mft (raw, json)
Hash identifier:          j/NLVU2OXCzFITR5QnzGPv37qI5ND+FametXahk3O5Q=
Subject key identifier:   68:CA:1A:2C:4B:E9:36:30:AA:91:CB:24:F8:1B:07:5C:29:43:AB:87
Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
Certificate issuer:       /CN=ee182424b484197dc304524092dcdd992fcbe4be
Certificate serial:       018F381C12B0CC4053631076159EEF0621A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:01:54 +0000
Manifest this update:     Thu 02 May 2024 07:01:54 +0000
Manifest next update:     Fri 03 May 2024 07:01:54 +0000
Files and hashes:         1: 7hgkJLSEGX3DBFJAktzdmS_L5L4.crl (hash: YUvp/gwACj/gvTiGmN7vrn5uN8RADW0afsB2VxNSaUI=)
                          2: GZABCZvLsjJb3yjR731Gq1lWQfQ.roa (hash: ePFD0dcdga6M4ul2IOpi0vQjZOd95PEwj2Lw8M+Op2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:12:b0:cc:40:53:63:10:76:15:9e:ef:06:21:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be
        Validity
            Not Before: May  2 07:01:54 2024 GMT
            Not After : May  3 07:01:54 2024 GMT
        Subject: CN=68ca1a2c4be93630aa91cb24f81b075c2943ab87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:8f:d3:24:d2:db:31:ad:3d:c5:74:d8:bf:
                    09:ee:a3:54:b1:33:90:f1:e5:a5:a4:ff:c2:7a:c7:
                    1d:8c:2f:18:a0:37:91:14:56:bf:61:2a:cd:ac:27:
                    d0:a6:40:eb:df:4a:1b:72:e1:64:0c:0b:e1:e1:1d:
                    85:96:d0:46:0f:38:e7:b6:c2:08:03:2e:3f:73:ef:
                    d7:9e:46:4a:81:c4:73:04:5c:46:81:0d:a9:b8:f0:
                    76:a3:ab:9a:6a:46:0b:45:59:78:9e:0b:56:0c:59:
                    af:56:e6:9e:9a:37:a7:fd:85:82:05:46:5c:81:91:
                    d7:2b:4f:5c:1a:7a:39:4e:16:54:c3:13:11:6d:e4:
                    2e:c8:71:ef:bc:b2:38:7d:81:fd:fa:6d:a1:38:6e:
                    c6:38:26:c4:32:53:5c:0a:a7:64:c8:d8:9d:65:7a:
                    18:4e:f6:59:4f:c9:d2:fd:dd:b0:9b:65:a2:20:02:
                    8d:93:c5:7f:2d:12:78:bd:48:df:25:f9:5d:8f:5a:
                    a5:65:c0:00:ca:72:a9:0e:54:dc:e4:79:4c:df:46:
                    8a:9f:68:62:2e:c6:ee:66:d3:26:c0:9b:d3:7c:0c:
                    3f:00:9b:79:7d:37:da:db:f7:bc:30:14:83:46:b0:
                    71:ee:86:90:b6:19:28:46:f2:9b:59:cc:41:ff:28:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CA:1A:2C:4B:E9:36:30:AA:91:CB:24:F8:1B:07:5C:29:43:AB:87
            X509v3 Authority Key Identifier:
                keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:0d:fb:43:50:95:8a:11:f2:28:4e:ba:50:fe:35:a1:26:06:
         cc:b2:d6:7d:cb:33:a0:e3:d3:71:f4:5b:a2:25:01:bc:eb:65:
         ed:6e:a3:c3:8d:7c:bc:1c:77:b7:c5:b7:fc:42:6d:d6:05:78:
         64:e9:11:46:69:67:f2:d4:01:9b:15:de:3e:97:c7:b2:e5:ee:
         74:b1:40:bb:f9:52:b1:0b:d1:f6:f6:47:76:43:dd:88:b6:88:
         56:ed:ad:e3:e3:27:38:c7:8e:9a:0d:fb:31:69:6a:df:07:38:
         d9:39:f8:31:73:7a:a8:0b:35:e9:0f:86:7f:4e:3f:7a:86:10:
         d1:03:c2:b8:25:8a:c5:bb:5a:1c:1c:37:59:4b:75:32:2f:a3:
         d1:d2:b2:33:3e:df:aa:dd:a8:70:6e:c7:5b:cb:59:c8:ec:51:
         ce:d3:94:4e:6a:23:d0:da:73:aa:48:cc:f9:4f:b1:eb:44:bb:
         22:9a:82:09:79:c6:00:ac:f2:5c:5e:03:7d:3b:6a:3f:2b:79:
         fd:02:9f:12:2f:34:6a:b8:21:eb:27:96:bf:63:97:eb:a6:9e:
         66:98:86:4a:1e:df:e6:67:ca:a4:20:6e:38:05:4e:c2:3b:92:
         a1:a5:e7:29:4c:cf:d3:58:50:84:58:79:71:b8:41:87:a8:ea:
         d3:d9:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:45:03 2024 by rpki-client on console-fra.rpki-client.org