Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File:                     rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier:          woM/RrHtnd2hMZfFrwSTMpnCuF9rRgmOkPxCp5l+O3U=
Subject key identifier:   71:A4:06:CA:0A:2B:79:A9:B5:D6:07:6E:AE:C8:6F:C1:61:5A:B2:89
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer:       /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial:       018F87ED4EAC8917D6F08DC37773C755471A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number:          0EBA
Signing time:             Fri 17 May 2024 19:00:27 +0000
Manifest this update:     Fri 17 May 2024 19:00:27 +0000
Manifest next update:     Sat 18 May 2024 19:00:27 +0000
Files and hashes:         1: EDgSaZwV4G-vCadph_HbcA1FV9I.roa (hash: y0G1Yovm9AiF27/VRAzxCkVWRIxa7rz8Hf75po8bnqM=)
                          2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: lUuEqI7bkmKJbpx1DKhZvERPRZYWX9yZr1BDIoY2Jck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:4e:ac:89:17:d6:f0:8d:c3:77:73:c7:55:47:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
        Validity
            Not Before: May 17 19:00:27 2024 GMT
            Not After : May 18 19:00:27 2024 GMT
        Subject: CN=71a406ca0a2b79a9b5d6076eaec86fc1615ab289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:90:74:5b:6f:03:ff:2c:c3:ab:54:3d:4b:
                    bf:a5:9d:c7:58:aa:7e:4e:ae:3c:9d:f6:ac:8a:6c:
                    00:22:0e:5d:c4:bf:32:8f:22:74:6e:13:87:fc:b6:
                    6a:61:c3:f7:7e:f2:6e:0b:56:a7:a6:ce:3f:c1:52:
                    fb:70:54:8a:a8:ad:c2:b4:e0:7e:40:10:f4:b6:4e:
                    5d:24:a8:79:72:0e:cb:d3:98:9c:2b:41:15:2b:2e:
                    df:3f:5d:8c:d6:00:b7:46:37:b2:a6:7d:d7:c2:4c:
                    7f:61:8b:d8:1d:05:58:1e:ea:60:59:1c:9a:c8:ff:
                    04:4d:5d:6d:7f:ec:11:cd:5b:5e:5e:e2:93:03:58:
                    b9:0f:0c:a4:d6:3c:07:b0:c0:a7:ac:78:4f:a2:b0:
                    b3:94:bb:62:3a:b8:a8:3e:20:14:b7:85:69:08:fc:
                    05:ba:58:d6:ce:2c:ae:d3:86:d1:bc:52:0a:72:71:
                    d4:cf:94:59:7b:04:76:d7:32:51:16:6b:da:f1:97:
                    79:e3:d9:18:d2:41:4a:08:d4:f8:0c:bc:9e:69:32:
                    57:c5:4c:8e:cd:96:e8:21:45:45:43:36:04:e2:ba:
                    01:6b:57:09:aa:a6:71:43:0d:03:b5:d5:13:2a:0e:
                    be:79:2f:e9:39:e8:c9:f7:61:9c:ec:e6:9e:4f:07:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A4:06:CA:0A:2B:79:A9:B5:D6:07:6E:AE:C8:6F:C1:61:5A:B2:89
            X509v3 Authority Key Identifier:
                keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e8:21:cb:c3:a9:7f:b6:e4:dd:e7:e0:1c:b0:43:7c:a7:29:
         4a:67:cb:f5:ba:e1:3e:2c:b1:51:c2:ec:9b:78:f8:9a:16:ed:
         de:c9:4f:35:e3:9f:c2:50:3c:8c:51:48:6e:d4:d3:f1:3b:0d:
         9d:66:af:6e:fd:84:d9:b0:f9:36:f2:6a:5e:6c:ed:96:d0:99:
         41:68:76:28:b0:98:31:14:42:4e:15:a9:e3:3b:31:2b:5f:0e:
         fa:fa:11:48:73:31:f6:1e:1c:a6:30:9a:b6:ee:64:45:11:c7:
         cc:64:c7:d5:04:ee:3b:8a:99:57:92:6b:3c:d7:6d:06:f1:52:
         3e:a5:ce:ec:f1:77:17:73:5d:54:3c:52:19:a4:52:a1:74:a0:
         7f:6b:30:96:17:79:76:c1:42:86:53:02:65:ee:47:69:80:26:
         2c:47:13:23:b1:53:df:47:59:e8:8c:b6:36:61:22:0b:38:90:
         5f:63:ee:bd:9a:9b:66:a2:02:ff:28:49:8c:27:04:eb:54:99:
         1c:70:d4:f8:94:8c:64:03:25:9d:56:e0:4e:bd:15:e3:f6:e1:
         94:17:38:24:5a:5f:dd:bf:89:82:22:60:ac:70:ef:07:b7:0f:
         b6:64:09:5f:e1:a1:9d:fc:ff:94:56:a2:eb:53:92:41:98:2b:
         32:0f:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:44 2024 by rpki-client on console-ams.rpki-client.org