Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.mft
File:                     37M6rDTClpjzL2oAkpMdL-Ipgxc.mft (raw, json)
Hash identifier:          ILqQrJr3schEMJ8svBmA9qQalizcJHS/se9ILaSgKM0=
Subject key identifier:   97:E8:8E:FF:DE:14:D2:4C:4B:32:F8:31:F8:09:81:4F:AF:70:BF:8B
Authority key identifier: DF:B3:3A:AC:34:C2:96:98:F3:2F:6A:00:92:93:1D:2F:E2:29:83:17
Certificate issuer:       /CN=dfb33aac34c29698f32f6a0092931d2fe2298317
Certificate serial:       018F4F49996C458A68D25B2940FBB5C2FAE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37M6rDTClpjzL2oAkpMdL-Ipgxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 19:02:54 +0000
Manifest this update:     Mon 06 May 2024 19:02:54 +0000
Manifest next update:     Tue 07 May 2024 19:02:54 +0000
Files and hashes:         1: 37M6rDTClpjzL2oAkpMdL-Ipgxc.crl (hash: vprJFLXDTxcHYPq5ZEhB9HbxAxbueXjquiPnSBBKfdY=)
                          2: wIShcJxugqdSi-FrYf1a9XCbgVY.roa (hash: qYaYsBJ0SDRaC86PjhB7vgbxHkPkAV2+87CVLBF8O4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37M6rDTClpjzL2oAkpMdL-Ipgxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:99:6c:45:8a:68:d2:5b:29:40:fb:b5:c2:fa:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb33aac34c29698f32f6a0092931d2fe2298317
        Validity
            Not Before: May  6 19:02:54 2024 GMT
            Not After : May  7 19:02:54 2024 GMT
        Subject: CN=97e88effde14d24c4b32f831f809814faf70bf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:3e:0c:65:60:39:9b:65:0a:10:0e:51:b8:
                    16:32:b5:9a:a5:8b:ff:da:69:6b:ad:a3:97:13:a3:
                    5b:e7:5d:11:38:d0:d1:a4:4c:05:f8:82:fe:47:48:
                    8a:de:02:63:16:cb:e9:b8:54:6b:ef:b8:01:5f:19:
                    df:60:a1:b6:22:57:be:9b:86:73:31:57:b4:d9:b2:
                    d7:3e:fd:4a:60:68:b1:59:bb:77:cc:01:02:66:86:
                    f1:e4:8d:c4:38:2c:85:4c:d0:ca:98:5d:e1:d9:b7:
                    9c:b0:4c:df:72:8f:a4:54:17:7b:63:62:cc:69:07:
                    c9:79:bc:c9:69:96:7e:98:74:66:62:98:8a:33:4c:
                    1c:8e:c5:a2:c1:5b:8c:e0:d0:a2:b8:ea:f7:ab:76:
                    0c:8a:18:8d:99:af:06:ff:28:f8:e4:71:60:01:9e:
                    68:e3:be:4a:65:85:d7:38:e0:7c:49:d5:18:32:99:
                    33:f4:b6:89:ae:4a:5d:45:e1:27:88:1d:13:97:91:
                    68:e3:91:48:50:08:dd:1f:bf:73:63:ac:a6:4f:17:
                    3e:f8:7a:0d:ab:d9:99:52:6e:81:66:20:5c:b0:20:
                    81:29:73:34:18:17:6c:18:5d:34:bd:34:64:6b:8a:
                    d9:26:c6:de:d9:0c:3d:e4:ef:e4:30:35:46:7a:a3:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E8:8E:FF:DE:14:D2:4C:4B:32:F8:31:F8:09:81:4F:AF:70:BF:8B
            X509v3 Authority Key Identifier:
                keyid:DF:B3:3A:AC:34:C2:96:98:F3:2F:6A:00:92:93:1D:2F:E2:29:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37M6rDTClpjzL2oAkpMdL-Ipgxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:55:04:41:56:68:dc:58:6f:70:4c:c4:6a:c1:6a:8c:ce:59:
         16:06:fb:04:28:e6:8c:1c:7c:10:92:d5:c0:08:dd:8f:d7:72:
         70:2c:06:99:30:c1:f4:12:ad:ff:93:80:53:25:14:8d:75:34:
         4d:60:bd:12:6f:0b:33:a4:0a:32:a3:4f:85:55:28:c8:57:02:
         2c:f3:17:55:2b:7b:c5:d9:b6:7a:cd:2d:d4:e6:87:7f:eb:c4:
         9d:d8:18:f6:35:5c:b6:0e:98:3d:15:41:73:3c:ab:bd:dc:6b:
         e2:c2:28:5a:f6:0b:8d:63:e0:5a:ed:6c:77:5c:d4:23:59:69:
         7d:71:c9:e8:20:9e:34:18:ff:ed:84:40:5b:6b:e3:54:18:06:
         b5:5e:d7:3c:83:fb:47:74:92:14:12:fe:f7:df:c2:af:af:bc:
         b1:87:0a:c1:49:29:75:c8:52:84:c0:0b:83:c7:36:fe:0a:a7:
         35:3a:36:b9:07:70:9e:23:f7:eb:6a:85:bc:cc:8d:64:99:24:
         19:88:2b:43:ce:9a:87:4a:43:b8:46:57:35:c6:6e:0b:ad:01:
         87:cc:76:1f:f9:ea:0e:9b:a0:61:08:02:88:1f:db:b6:b0:22:
         6d:84:1c:90:ac:c4:3c:dd:a7:bb:a9:e7:8b:ad:8c:dc:22:01:
         8a:a1:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:35:51 2024 by rpki-client on console-fra.rpki-client.org