Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File:                     7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier:          /10vl8thrmavzpgJp4sZX2QJ8ou/oW1Xto93sDPYCks=
Subject key identifier:   1D:87:3E:E1:20:FB:CE:91:4C:47:31:EC:1C:80:BD:EC:13:86:72:56
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer:       /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial:       018F91CC0DF8F682280CFDAD8E4F1979A04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number:          117D
Signing time:             Sun 19 May 2024 17:00:20 +0000
Manifest this update:     Sun 19 May 2024 17:00:20 +0000
Manifest next update:     Mon 20 May 2024 17:00:20 +0000
Files and hashes:         1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: MOJdfojZbSx0YxTu0aMWEK/gz0jccNhC80QTNrFbK6U=)
                          2: XPo4e0UmRRltedavpSnNAfSGwEo.roa (hash: 6JpYLElZV4fHyVJXstUVTmpH/3NsNCJQ5TwXWPlV4mg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:cc:0d:f8:f6:82:28:0c:fd:ad:8e:4f:19:79:a0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
        Validity
            Not Before: May 19 17:00:20 2024 GMT
            Not After : May 20 17:00:20 2024 GMT
        Subject: CN=1d873ee120fbce914c4731ec1c80bdec13867256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e6:4c:99:36:91:3f:2e:cc:a1:bd:d5:65:b4:
                    2f:8a:b1:0a:50:56:25:19:d5:8c:79:27:9b:c8:38:
                    4a:e7:54:3f:bc:1f:ba:cc:b9:66:ea:9e:fb:d9:7a:
                    54:45:ec:19:aa:5c:4b:5a:de:8d:51:ce:eb:e8:7c:
                    cf:86:77:9d:55:f3:0d:06:97:23:a0:99:c5:66:05:
                    25:ab:19:c6:85:50:ac:b7:fc:7a:8a:78:54:3d:ba:
                    dd:3f:e4:e4:d4:6b:3d:2c:27:14:3b:40:12:a9:6e:
                    1a:76:88:9e:d9:67:a7:6e:07:e9:9e:e1:91:c3:db:
                    6f:ed:02:2e:80:b3:71:80:56:39:e0:44:1e:99:b1:
                    ce:d9:45:d6:bd:63:a4:ec:08:ff:9e:92:fc:5e:3d:
                    87:b1:55:21:36:0f:26:11:15:56:fe:7c:da:bf:5f:
                    49:3a:f2:2a:89:ee:5a:04:e8:ca:66:cc:b8:a3:71:
                    c3:98:27:6e:72:84:de:02:a1:a1:31:58:6f:47:2f:
                    a8:4f:89:fc:2f:c3:05:c2:61:ad:96:7c:fb:06:86:
                    f4:1c:09:10:e5:1d:9e:03:2b:80:ca:aa:6c:79:45:
                    29:c0:a0:ad:ff:ad:a4:0c:0f:b7:a2:32:26:59:db:
                    fb:0e:a9:c2:87:ee:05:55:f0:4b:93:cf:83:25:d3:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:87:3E:E1:20:FB:CE:91:4C:47:31:EC:1C:80:BD:EC:13:86:72:56
            X509v3 Authority Key Identifier:
                keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7d:0e:94:10:3c:e1:c3:f1:ba:71:22:bc:26:fe:61:1a:6a:
         ee:58:28:58:e9:c3:51:06:47:f3:e9:36:0a:bb:82:64:cd:95:
         1c:6e:10:d4:b3:c4:ac:2c:bd:e1:32:b2:5b:48:f9:e6:f4:64:
         12:2e:79:08:20:1d:62:8e:9d:e2:03:de:20:8c:5f:0e:97:76:
         d7:9b:ea:95:bb:fe:65:9c:da:13:14:17:84:64:1f:c3:04:60:
         7a:40:16:45:90:85:0a:7e:24:ab:bb:d8:88:e8:9b:98:7c:80:
         03:1d:0d:95:60:d3:0f:f6:04:9e:c6:9f:d0:1d:31:6a:29:a7:
         dd:cb:8c:95:ae:64:1b:02:bd:ca:7d:31:d4:32:df:da:69:c6:
         c7:14:9d:cc:dc:f4:df:a8:85:50:42:bc:3d:73:bf:4e:a4:74:
         48:1f:8d:4d:9d:3f:51:27:33:b6:1b:34:fe:d6:7a:ae:3f:6f:
         62:4e:21:07:3a:e4:95:a5:15:1f:35:6f:32:92:8d:0c:7e:88:
         46:54:29:6d:c3:c4:99:51:4f:da:da:29:5b:82:31:81:16:4c:
         db:5b:09:04:6d:40:5f:14:7c:d0:37:50:71:13:ac:6e:d2:b1:
         45:20:75:f6:26:e6:26:33:e4:2f:ed:19:f5:f1:b0:66:67:1a:
         a5:ea:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:39:19 2024 by rpki-client on console-ams.rpki-client.org