Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File:                     97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier:          TYXkp4gZQildbH3tJEHMKOpd+hnsT2pJChANkON2Lt8=
Subject key identifier:   7A:97:86:33:06:1A:0D:05:5C:31:EC:84:1E:C1:DC:1E:83:35:E5:91
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer:       /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial:       018F351A639C5ED3E2998BB22CD7CF335965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number:          10DF
Signing time:             Wed 01 May 2024 17:01:12 +0000
Manifest this update:     Wed 01 May 2024 17:01:12 +0000
Manifest next update:     Thu 02 May 2024 17:01:12 +0000
Files and hashes:         1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: cT5thh+23y4keYUEYy0TXtEye7L3aLWgdsrL6W1/0rg=)
                          2: Fy-5PiRLeU4F1qGBk8FqPzNY-qY.roa (hash: egoNZvPlDs0u50QD7qboCOAXkkd9u5gNdMp/vhzrmME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:1a:63:9c:5e:d3:e2:99:8b:b2:2c:d7:cf:33:59:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
        Validity
            Not Before: May  1 17:01:12 2024 GMT
            Not After : May  2 17:01:12 2024 GMT
        Subject: CN=7a978633061a0d055c31ec841ec1dc1e8335e591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:33:15:f3:67:a0:5c:fd:bd:7b:0b:04:9a:
                    db:59:92:eb:28:d2:3a:9f:03:10:3d:ae:cc:57:ac:
                    7a:30:36:d3:c9:d4:ba:23:80:1f:d8:fb:54:22:cd:
                    98:49:9c:47:ea:48:31:98:49:ea:86:52:69:04:8a:
                    21:70:d0:3f:da:01:a8:e9:bf:19:51:69:55:07:22:
                    16:94:54:c3:5a:a9:22:cb:2d:0e:d3:25:66:8d:4b:
                    2d:37:70:9f:63:ae:de:6b:52:90:39:c3:9a:ef:16:
                    e6:39:9f:b1:4a:90:3c:0f:ae:1c:85:8d:f1:e5:1b:
                    55:cc:f0:f8:be:e9:4d:1a:9a:9e:59:82:ba:38:15:
                    6e:27:7a:3d:0f:34:5c:3d:a8:22:c4:70:42:c1:6a:
                    f8:06:60:97:54:52:59:33:e0:e0:a2:96:9d:15:60:
                    15:09:d0:4b:3c:2c:f9:6e:fc:d5:7f:6b:a8:13:5b:
                    1b:84:bf:d1:61:fc:05:fc:a7:ec:a5:7b:49:3f:c2:
                    cd:92:96:53:57:ee:89:f7:e5:47:69:ed:21:63:3d:
                    79:9d:d0:82:89:87:91:d9:10:30:d1:d3:8d:12:ee:
                    24:4b:5f:3f:ed:cf:49:07:ac:9c:47:29:a4:a2:80:
                    24:d8:8c:ed:2f:66:24:0d:80:db:23:50:6f:c5:dd:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:97:86:33:06:1A:0D:05:5C:31:EC:84:1E:C1:DC:1E:83:35:E5:91
            X509v3 Authority Key Identifier:
                keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:b7:c1:26:16:83:12:39:25:50:0e:5e:96:1e:e5:53:c4:51:
         b1:d2:9d:a6:b3:6c:5d:9d:ef:70:b9:a1:32:3d:dd:5b:db:6a:
         4d:b3:9b:c2:f4:f2:ed:bc:57:b2:ba:e2:0d:6c:1a:40:5e:ce:
         0e:8b:2a:ed:6d:c7:a4:ca:87:f4:d8:fb:0d:8c:cd:55:4a:5b:
         8b:2a:01:7c:9c:3d:cc:04:ab:c8:1e:0b:38:4a:4c:d4:71:f7:
         42:52:4d:d8:26:d1:08:50:6f:7c:0d:e6:a5:64:4e:da:45:1a:
         26:9f:4e:10:90:bd:00:00:32:2e:c5:5f:93:b6:de:ab:c8:b9:
         97:8b:0e:c8:48:66:62:3f:07:4a:ed:13:c1:84:a9:93:c8:07:
         b4:dd:72:f7:b4:03:e5:80:f7:b9:00:09:e0:8e:21:f6:d3:b7:
         8b:00:c3:3f:31:fb:ac:aa:a5:b0:a6:5a:9f:99:20:44:2c:cd:
         be:23:90:87:97:c8:39:ab:b8:4e:f9:7a:59:62:c7:e5:d9:c5:
         93:06:49:6c:b1:3f:30:d4:ec:e1:a0:b9:0c:05:ed:8f:75:77:
         f0:76:ca:4e:21:09:50:cb:f0:96:7e:55:47:ff:93:64:86:9a:
         1a:df:4a:9a:56:89:c6:82:7b:65:6f:8d:a4:07:77:bf:11:69:
         59:29:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:47:03 2024 by rpki-client on console-ams.rpki-client.org