Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File:                     7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier:          gu/pEEC/0NePX6+ssTVT9NAi9Jx7Df8CQcFN5V1mKp4=
Subject key identifier:   71:22:61:6D:88:7C:AD:FC:B9:FE:F5:BF:7A:5B:B9:57:21:5E:70:A4
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer:       /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial:       018F47C54CA6EE7143ECB775D14FA8025016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 08:01:03 +0000
Manifest this update:     Sun 05 May 2024 08:01:03 +0000
Manifest next update:     Mon 06 May 2024 08:01:03 +0000
Files and hashes:         1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: qkay6Z3iDDuMXIz2bk7CmCE5KKji4t9F5phe3tWwe0s=)
                          2: 90Dc4VeDx-LdyMrF2kuqvFGgvBA.roa (hash: KJhIDc4NkdTtSR3DnCZwd+97ByF5ig6I2me5MNIv8ng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:c5:4c:a6:ee:71:43:ec:b7:75:d1:4f:a8:02:50:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
        Validity
            Not Before: May  5 08:01:03 2024 GMT
            Not After : May  6 08:01:03 2024 GMT
        Subject: CN=7122616d887cadfcb9fef5bf7a5bb957215e70a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:23:02:48:77:4a:e7:96:f7:39:3f:91:32:
                    d7:ab:8d:68:a4:e3:85:e4:15:3b:a2:76:61:77:2e:
                    99:1e:d6:8f:2a:7e:e0:db:2b:de:2f:80:41:af:1e:
                    ac:50:82:f6:f4:42:77:64:5a:f3:9f:51:10:2d:ee:
                    86:79:d1:5a:d5:03:65:86:03:f0:6e:0f:24:a2:8b:
                    f2:b4:30:7a:4b:7f:0a:df:64:d3:8e:ac:59:aa:28:
                    c6:5a:89:7d:da:0c:b1:bc:bf:a2:9b:ff:41:d5:4c:
                    34:96:66:0a:f8:2c:f6:0f:95:97:15:8b:83:fd:35:
                    61:16:28:6f:c0:bb:a6:2a:a9:87:7b:23:13:c1:3e:
                    78:cf:1f:7a:9c:cd:ef:43:82:8b:cd:fb:51:a7:56:
                    5b:5c:d4:98:58:b8:dd:b9:a8:00:25:a6:6c:cd:85:
                    98:01:f1:4d:71:36:47:74:38:1b:47:ef:16:4a:11:
                    7d:a4:59:11:33:5c:6f:17:58:1f:9d:04:da:c9:f7:
                    db:b4:f8:8b:29:6f:f6:0b:a0:c4:68:97:e5:68:f0:
                    51:33:27:6a:7d:99:9c:01:93:cc:e2:f3:a9:f7:ef:
                    b8:cc:e8:e7:bf:8d:b4:22:37:24:f8:31:96:6f:4b:
                    98:fb:05:7e:a5:a7:58:5d:26:cc:a1:ab:00:d3:71:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:22:61:6D:88:7C:AD:FC:B9:FE:F5:BF:7A:5B:B9:57:21:5E:70:A4
            X509v3 Authority Key Identifier:
                keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:79:40:89:dd:d4:d5:54:32:73:89:ed:37:37:2d:13:12:eb:
         42:a2:91:24:25:ca:41:f7:6e:c5:d1:05:d6:8f:fe:7c:a6:d4:
         82:6f:39:11:75:44:2e:47:3f:50:4b:a9:15:8f:b4:2e:f7:97:
         cb:0a:e5:2f:ac:82:5f:36:d3:c3:4c:e3:a8:45:42:be:0b:ef:
         99:58:3d:f4:3b:94:92:fc:f2:71:74:18:dd:c7:39:71:fe:cd:
         8c:1c:c3:18:d8:85:0c:dd:6f:42:e9:ab:00:68:74:e9:36:d9:
         04:84:df:86:4b:42:ce:ed:5e:b1:03:cc:98:cc:a0:2f:aa:80:
         b9:09:2f:72:eb:c8:30:69:e7:ac:08:10:40:2a:aa:a6:5c:5a:
         e4:51:e4:e4:9e:49:71:29:59:4f:87:9a:49:bc:e1:c8:16:a0:
         2f:04:c4:e0:c3:9d:e1:8a:bd:80:f3:32:6c:f1:eb:00:da:5f:
         3a:5a:47:c3:fd:4e:2f:db:43:17:8a:6a:36:d7:30:fc:86:33:
         41:28:2f:12:9d:04:da:02:53:62:3e:2a:ec:2d:f1:e7:45:43:
         38:48:b4:99:4d:15:65:a7:54:96:39:04:f8:f6:53:1b:1b:39:
         17:0c:7a:5a:0d:1c:14:1d:4d:ca:f8:76:6d:66:49:12:85:51:
         2d:a0:1b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:04:38 2024 by rpki-client on console-fra.rpki-client.org