Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
File:                     d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json)
Hash identifier:          FcEyOjzc713Ad8Fj5XjCSn5mTBfdnAICKtmUp2feS8o=
Subject key identifier:   C8:ED:E8:83:1C:97:9B:6D:95:64:59:13:79:4B:40:5D:BF:0F:35:6F
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Certificate issuer:       /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial:       018F0DA0100B7142A4A4311620847DD9AE9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
Manifest number:          0AA0
Signing time:             Wed 24 Apr 2024 01:02:24 +0000
Manifest this update:     Wed 24 Apr 2024 01:02:24 +0000
Manifest next update:     Thu 25 Apr 2024 01:02:24 +0000
Files and hashes:         1: KwHg1lKXjHmlnjNjvXEqSG0tQ68.roa (hash: Shrzlr/rK73jWcbI95NRr0K2lMw816cMjiQkMDmOD1c=)
                          2: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: R78+a0CyYoFQPjl7poZ0pFaTQ1KcaqT5onyQTnFBGvI=)
                          3: woJWXVstFHUtgq-D2T_zRArE0Kw.roa (hash: 2XfR6tG9YgDM6agozB+JbYxXmDDwuxeYkASQOzjtCLU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 01:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0d:a0:10:0b:71:42:a4:a4:31:16:20:84:7d:d9:ae:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
        Validity
            Not Before: Apr 24 01:02:24 2024 GMT
            Not After : Apr 25 01:02:24 2024 GMT
        Subject: CN=c8ede8831c979b6d95645913794b405dbf0f356f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:bd:89:e9:d1:7e:ea:3a:fa:71:7a:c1:d7:
                    5b:fd:c0:61:12:88:e9:b1:ea:5a:c3:d9:6e:24:76:
                    94:be:cf:fe:58:63:15:0b:5a:a9:3e:77:60:37:88:
                    55:50:f7:67:cc:9e:0f:60:23:3a:a1:11:57:81:9a:
                    6b:ae:22:4f:41:b3:01:de:bc:5c:23:57:92:53:c1:
                    ed:42:63:49:ca:53:ce:f9:87:19:66:3a:50:58:d9:
                    89:34:25:32:1f:d7:44:b8:e0:5f:a2:de:83:e9:1d:
                    1a:33:a6:46:6f:88:8a:8a:a0:05:59:c5:fc:00:4c:
                    17:85:71:06:72:61:6f:e0:70:2c:39:a5:82:05:64:
                    27:63:ea:57:96:e9:a5:a4:bc:eb:25:2b:7c:48:a2:
                    3b:87:41:67:02:85:ea:78:b5:3f:10:4e:cf:aa:b4:
                    08:e1:70:dd:03:2d:6a:e3:62:85:f5:90:3c:e1:56:
                    f3:df:0c:7b:22:07:b1:8c:61:f1:df:11:3d:af:94:
                    96:e8:23:e4:41:2a:59:45:ab:f6:3e:c7:2d:1f:bb:
                    ae:9c:0d:f2:e2:20:b1:ad:a1:71:8c:e1:71:d1:b5:
                    97:e8:c3:0b:d9:cc:b0:cf:5e:e9:3c:d2:07:b2:b0:
                    3f:a6:dd:d6:04:17:b0:34:4a:9f:51:d1:59:5b:a4:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:ED:E8:83:1C:97:9B:6D:95:64:59:13:79:4B:40:5D:BF:0F:35:6F
            X509v3 Authority Key Identifier:
                keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:db:3d:5a:01:67:92:a8:58:1b:bb:a5:9c:fa:f4:53:24:af:
         63:18:b7:a3:de:43:50:5f:a5:ac:98:07:48:c7:0c:56:4d:b8:
         f7:13:51:a6:37:a8:48:0f:b7:9f:91:ab:c4:02:42:8a:68:68:
         8f:2b:af:74:96:24:2c:2f:b8:e7:6b:9e:5a:99:84:1a:36:5c:
         47:47:a7:9b:d2:67:90:41:6d:8d:76:74:bc:3c:b4:86:40:d2:
         05:2e:46:3d:aa:77:bf:73:7c:49:81:eb:71:fd:ef:9a:af:ec:
         52:83:cf:3e:58:be:12:40:1a:10:04:93:3b:bc:bb:e7:8b:a6:
         34:80:7e:f5:5d:6e:85:98:c4:3e:61:d2:fe:e8:20:ad:0e:a8:
         56:22:a6:a3:fd:3e:63:55:4f:48:59:70:cc:e6:a1:49:52:10:
         d0:5c:00:22:46:bd:51:d6:7d:2d:e7:f3:3f:16:f4:91:66:ab:
         05:6d:c5:ba:4b:59:d9:8b:69:d5:44:95:ed:16:25:6b:07:8f:
         b5:b2:f3:73:23:12:24:80:af:a5:4a:57:ec:03:89:8e:3b:d1:
         eb:0e:54:f2:dc:81:ed:06:29:ed:2f:2b:8f:df:85:d2:fd:b1:
         61:c5:09:47:9b:f6:fc:61:27:32:34:c4:5e:4d:0b:ba:41:6d:
         cf:a9:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 07:22:22 2024 by rpki-client on console-ams.rpki-client.org