Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File:                     x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier:          69FtxCISARFuZaaL6KZXM6u1EiviqL4/bmQ+STWmPSc=
Subject key identifier:   02:9D:42:15:9B:6A:0C:13:11:5D:45:C9:EF:E9:5D:9D:D1:56:FB:B9
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer:       /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial:       018F87EDB60A530ED8607C6CC04DD305C526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number:          0B73
Signing time:             Fri 17 May 2024 19:00:53 +0000
Manifest this update:     Fri 17 May 2024 19:00:53 +0000
Manifest next update:     Sat 18 May 2024 19:00:53 +0000
Files and hashes:         1: Sni0e8DXmW1gWx5XqDFaFBEV5i0.roa (hash: avliRauxY6AxtYMTmSOXM+4Pwipcn5CiWzmC7cZsMz4=)
                          2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: JmhSwfkMVygBrSfT7OQGiXtf1kHWYYgaLwUDZm/g/rk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:b6:0a:53:0e:d8:60:7c:6c:c0:4d:d3:05:c5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
        Validity
            Not Before: May 17 19:00:53 2024 GMT
            Not After : May 18 19:00:53 2024 GMT
        Subject: CN=029d42159b6a0c13115d45c9efe95d9dd156fbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:71:a5:12:bc:a5:3d:59:5c:3f:be:b4:c8:
                    c5:ed:50:13:ce:73:1d:47:ec:0c:9b:68:9a:3f:2d:
                    ce:b5:f3:3f:fd:1b:58:d3:b3:b3:94:69:e9:24:8a:
                    a3:49:ef:0a:50:a8:3d:a3:8b:fb:7f:87:60:41:34:
                    ec:f5:e6:42:fa:56:3d:bb:49:9d:74:35:9c:b2:48:
                    0d:9f:e4:be:9a:aa:ca:31:4d:d8:30:2c:ce:35:a6:
                    ef:af:cd:94:b3:72:3a:bb:c1:dc:f3:1b:6d:1a:4f:
                    54:97:44:d9:06:a9:10:4e:d8:bc:64:7b:26:f6:92:
                    f3:f0:48:da:ab:5f:66:b5:bd:c2:29:32:5c:df:f0:
                    a8:41:f6:a8:39:b7:ab:b9:7b:c1:d6:4d:78:cf:f9:
                    3d:67:64:60:7e:66:b8:ed:52:56:de:16:48:42:a5:
                    3e:16:8f:a2:1f:5d:ac:4d:c5:07:a6:b6:ea:33:9d:
                    6a:f8:63:a6:26:d0:4c:94:d2:b9:d8:1a:e4:dd:dc:
                    1a:30:c5:e4:3e:13:0c:28:70:51:7f:86:7d:7c:52:
                    25:26:3a:4b:df:e0:f3:2a:dc:80:9d:64:b7:d5:0a:
                    f1:f1:89:e2:76:0e:b8:be:c9:9a:61:31:ad:64:a6:
                    ab:9e:64:12:b0:25:c6:41:45:f5:a5:d2:eb:fd:40:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:42:15:9B:6A:0C:13:11:5D:45:C9:EF:E9:5D:9D:D1:56:FB:B9
            X509v3 Authority Key Identifier:
                keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c9:90:b7:ea:71:b4:6c:31:58:4f:17:18:6e:77:7f:a5:39:
         57:f9:df:fe:17:30:83:04:7f:42:b6:f4:22:f3:f0:35:27:ee:
         df:c8:43:a1:d7:79:d0:40:5b:86:f9:41:5d:bd:5e:7f:6d:82:
         01:72:f3:63:dd:02:f6:14:79:94:c4:3d:bd:d0:d5:1c:4e:05:
         19:e0:41:65:f5:fb:11:15:af:d8:4b:89:00:4b:09:02:1a:de:
         9a:cf:9c:d5:1a:c3:96:73:0f:ba:5b:33:b7:df:58:3b:c5:60:
         82:36:65:21:f7:52:ed:02:f6:51:0e:e0:e7:03:55:c9:db:c7:
         10:1b:81:de:d8:f5:d8:7b:47:19:c1:58:a9:bc:9c:ae:92:c5:
         ab:85:3d:69:8c:bc:be:31:ad:94:4d:24:84:23:00:19:92:1e:
         e1:ae:db:4a:f0:a5:06:5b:3a:ae:85:c8:11:77:71:6f:93:a5:
         9c:33:73:06:30:9b:84:79:e3:80:ba:f7:3d:8a:a0:f7:d8:3f:
         d4:34:55:c4:9c:87:1a:52:7e:ff:45:0f:97:59:07:5a:6a:09:
         16:0c:64:89:a2:1c:31:8e:2f:b7:8a:1a:81:c2:7a:5c:b7:3c:
         0c:81:b3:52:ac:8b:ae:c5:c4:df:3d:a8:a3:27:ed:91:2e:69:
         5f:68:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:29 2024 by rpki-client on console-ams.rpki-client.org