Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File:                     73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier:          MV38NIffq88dCdxZm3/8CBC0D1P/GNh0Iy5xJRguWjo=
Subject key identifier:   42:70:AD:B3:72:EA:92:59:AA:0B:48:6D:58:FE:BA:2A:77:EA:B0:79
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer:       /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial:       018F4D5C8359397971C44108A5FD4AAA364C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number:          091E
Signing time:             Mon 06 May 2024 10:04:19 +0000
Manifest this update:     Mon 06 May 2024 10:04:19 +0000
Manifest next update:     Tue 07 May 2024 10:04:19 +0000
Files and hashes:         1: 7-zYrwfartn6vrVMVZIZeBDDio4.roa (hash: PoKuDwfCKAcOHSMbuuwgqLt97WHROgjd93iCm0uM9B8=)
                          2: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: Tenak3RB+M31DHDS7J5tPYIoemsbaIcpDqOyQcEHUTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5c:83:59:39:79:71:c4:41:08:a5:fd:4a:aa:36:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
        Validity
            Not Before: May  6 10:04:19 2024 GMT
            Not After : May  7 10:04:19 2024 GMT
        Subject: CN=4270adb372ea9259aa0b486d58feba2a77eab079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:61:a0:ff:4f:81:54:27:c4:69:16:48:f3:
                    b6:bd:15:29:18:98:23:46:75:32:a7:ca:36:8d:51:
                    6f:9e:1b:c9:95:4d:63:0e:b8:23:0d:ec:b2:f8:4d:
                    38:35:a5:18:0d:29:f5:37:36:93:43:5f:e5:a5:2c:
                    2f:db:5d:6f:40:d7:27:83:a8:e4:16:7b:af:f5:d4:
                    13:25:ce:0c:8b:82:f3:ef:ba:e3:3e:9e:94:16:f6:
                    7d:02:7a:14:6f:c8:bd:7d:ca:de:f0:dc:1b:ae:5e:
                    30:9a:4c:10:41:77:f6:44:3d:d5:0a:d8:fb:ef:03:
                    33:1a:44:70:66:c1:c1:69:1e:df:7a:2a:8f:26:d5:
                    ec:a7:c0:c0:88:de:f8:14:cd:52:9c:85:f1:0e:4b:
                    92:76:7e:d0:df:dc:22:cc:e3:5d:84:d1:8c:fa:f2:
                    46:73:85:b4:88:00:a2:53:59:68:ff:70:31:60:b0:
                    ab:93:88:cb:b3:9a:ed:bf:22:1e:2d:86:b6:9a:67:
                    93:76:43:51:6c:56:ab:a2:9a:21:e3:33:6f:8a:b0:
                    fe:4a:7e:10:d7:c9:f0:72:1b:f1:e4:72:34:df:fa:
                    64:0b:92:7e:75:c9:67:7f:b8:99:7f:15:7b:ef:6a:
                    88:0b:64:6e:17:00:b4:4a:22:08:99:79:f4:fa:8d:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:70:AD:B3:72:EA:92:59:AA:0B:48:6D:58:FE:BA:2A:77:EA:B0:79
            X509v3 Authority Key Identifier:
                keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:3c:19:c0:80:31:3b:2e:06:b6:ea:dd:28:f6:dc:c7:bd:
         74:48:76:65:e6:36:ff:61:a3:8e:66:db:8d:2b:7f:ef:a4:26:
         5f:61:38:1f:ca:59:de:bd:08:3b:74:9a:69:12:c7:34:d7:fc:
         e4:23:17:66:fc:4a:d2:68:fd:9e:3d:d6:40:51:47:68:9f:26:
         32:3d:5b:e9:70:a9:0b:8c:81:7b:8a:87:b2:69:06:8b:74:bb:
         23:10:b5:48:48:04:28:ec:87:43:fa:b3:de:b1:87:a3:27:6b:
         46:b1:2d:6c:ad:57:19:55:6c:ad:c7:b8:14:d0:79:d6:43:35:
         76:4f:f7:1f:cc:17:e1:2b:3a:a3:db:a2:2a:57:54:48:52:4d:
         28:48:f3:68:32:bf:73:41:0f:f6:4f:c5:73:37:4e:75:8f:4a:
         ae:33:19:af:28:57:6d:29:a3:d8:ae:af:48:39:9b:cf:c1:e8:
         79:cf:79:09:4e:ac:ef:07:2f:52:e8:0a:15:02:95:a0:36:10:
         28:ec:91:2a:e2:a7:cd:20:2a:e2:a6:ac:e1:27:6a:9c:0b:fd:
         25:75:8f:60:f0:70:d8:44:55:81:8b:22:7b:ad:5f:3d:5f:0c:
         92:c0:19:c8:40:b1:ce:ba:0a:03:b2:49:c6:22:18:72:03:d8:
         15:31:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:41:46 2024 by rpki-client on console-ams.rpki-client.org