Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File:                     7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier:          unGUUyyd7vwPeXx5g8ywzTw4JfrlqdvKCSD8uKjXRgM=
Subject key identifier:   B6:33:FC:42:F7:5D:0F:0A:97:9E:5B:2B:A5:14:82:13:60:BB:CF:6F
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer:       /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial:       018F3FD72B9AE6A0596C66C548A2E3DC8A9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number:          0920
Signing time:             Fri 03 May 2024 19:03:37 +0000
Manifest this update:     Fri 03 May 2024 19:03:37 +0000
Manifest next update:     Sat 04 May 2024 19:03:37 +0000
Files and hashes:         1: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: APHoNuMSCWoBE2KiEbyK4nBTnpYMC/F6Xu3+SuV7z0s=)
                          2: DTq0SundLMcslF2PS6MWfq0s-jk.roa (hash: jykLdwOwE2HDL7JleeCSO13uEcZahaYmTmDjqPH4Weo=)
                          3: MHk9tnAsGAkTqheavgh8KpZhses.roa (hash: frt4hqfW89P8KPzn/ij04Lp2LApVzFkeI6N50tcaFBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d7:2b:9a:e6:a0:59:6c:66:c5:48:a2:e3:dc:8a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
        Validity
            Not Before: May  3 19:03:37 2024 GMT
            Not After : May  4 19:03:37 2024 GMT
        Subject: CN=b633fc42f75d0f0a979e5b2ba514821360bbcf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:4a:c4:f1:92:e7:eb:30:e1:26:03:47:49:
                    91:e1:98:52:ac:b3:c7:31:eb:ed:f3:da:99:89:ae:
                    51:b0:0a:a1:d9:fc:53:1d:55:77:a9:96:f1:22:e8:
                    30:54:49:45:72:94:62:92:ef:60:59:09:90:27:c9:
                    d3:b9:d3:a4:23:5c:63:13:ad:37:e3:cf:0e:43:a8:
                    ba:1e:b4:1c:84:e3:be:97:9b:c6:7f:8b:e0:df:19:
                    b9:40:9f:b6:ca:d7:dc:c8:a5:3e:60:43:56:4e:af:
                    3b:07:4f:9d:c5:80:7f:ee:af:36:76:8c:19:e8:c2:
                    41:93:1f:93:48:5f:7d:aa:2e:f6:53:52:3c:3e:38:
                    e8:f5:a4:79:73:43:64:f9:b9:c5:34:51:b9:29:a8:
                    a4:0c:42:db:88:e4:da:9a:cf:ed:d4:04:1b:d0:89:
                    c6:10:6f:bb:c4:35:09:15:ed:af:0f:ab:34:e5:8f:
                    e8:d0:73:ec:7e:11:b5:14:67:45:92:1d:29:d2:c3:
                    fc:4f:c8:74:bb:96:85:d4:08:ce:6d:c5:83:5a:6c:
                    82:46:7b:ff:56:b8:4a:18:a9:fe:3c:e9:a3:7d:73:
                    a1:ca:76:6b:a4:7f:b5:22:94:c7:0a:e5:7b:d9:08:
                    d6:5b:02:eb:67:d0:e1:3f:73:83:38:17:b2:aa:ae:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:33:FC:42:F7:5D:0F:0A:97:9E:5B:2B:A5:14:82:13:60:BB:CF:6F
            X509v3 Authority Key Identifier:
                keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:03:6e:be:96:5d:b5:aa:fe:16:d4:ea:e8:ba:79:9a:ab:d3:
         54:21:cb:58:f4:07:bb:0f:17:dd:4e:77:f7:6d:bf:64:30:ec:
         2f:3e:9d:93:36:e8:36:8c:44:6e:f0:6e:96:11:ef:da:f1:db:
         4c:7b:e7:e2:3e:9f:57:6b:20:85:9c:07:8e:5c:0f:8c:6a:bd:
         ed:29:1a:22:c6:5d:2f:0e:8e:61:67:63:a7:90:50:80:a5:49:
         8e:92:6c:8c:42:a6:25:9c:a0:96:cb:f0:a1:5f:23:7e:72:43:
         aa:fc:db:b4:ba:db:c9:c2:f9:56:68:81:85:1a:16:cb:59:62:
         7d:36:06:87:3f:33:1c:9f:d4:8d:6e:6f:97:16:51:0a:7a:7b:
         ff:33:93:b3:04:52:5d:b9:0c:89:c1:2f:a8:0b:41:e4:74:d5:
         bc:22:f7:c7:98:d8:d1:30:f3:e2:04:1d:b4:5a:85:8a:74:94:
         fb:bb:a6:ff:bb:5c:bf:84:35:19:12:01:55:3e:18:72:87:a6:
         44:f5:9a:89:19:dc:76:21:e9:d0:23:7e:2d:e8:56:86:20:40:
         51:fb:20:c3:4b:9e:cb:10:75:a5:6e:9e:b7:53:34:0d:31:d7:
         5d:20:f0:d4:9a:9b:94:d2:56:4e:db:b9:a5:09:73:3a:cc:df:
         76:7b:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:31:49 2024 by rpki-client on console-ams.rpki-client.org