Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File:                     32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier:          XZKa1OtlKrTfB05VFAEdebAuUDicQ8lXIcDJc0Ujm/E=
Subject key identifier:   F3:38:9B:BA:A6:D1:57:3C:2C:DB:BC:D2:EF:62:B8:55:AB:52:A6:BD
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer:       /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial:       018F4D5ABB59C17EFFD397DDAABF04F29460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number:          07EC
Signing time:             Mon 06 May 2024 10:02:22 +0000
Manifest this update:     Mon 06 May 2024 10:02:22 +0000
Manifest next update:     Tue 07 May 2024 10:02:22 +0000
Files and hashes:         1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: G1czQgKTYGxrea/VPQtK4eoAbZRWk70TEIJxI7ks8lY=)
                          2: ESSqtK2wO7i2bUMK9L2wNaQe-eE.roa (hash: w1T7eC5xYqPCUrRh0ms1cvMKA8DmkoPGGFP2qqm45z8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:bb:59:c1:7e:ff:d3:97:dd:aa:bf:04:f2:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
        Validity
            Not Before: May  6 10:02:22 2024 GMT
            Not After : May  7 10:02:22 2024 GMT
        Subject: CN=f3389bbaa6d1573c2cdbbcd2ef62b855ab52a6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:cf:73:62:ba:aa:14:0e:0a:a3:38:b8:41:
                    0a:93:6b:3f:0b:07:31:3f:d5:d9:92:7d:69:24:01:
                    fc:00:9d:2f:38:ce:61:05:4f:6b:11:64:82:9c:42:
                    a7:be:88:c5:b2:4f:11:21:09:73:07:72:13:0b:76:
                    d6:8c:90:ff:7c:1b:9d:93:45:b1:28:de:f0:37:d6:
                    c0:73:40:55:ab:a5:d1:db:d2:70:01:d4:c1:70:7b:
                    02:a4:c9:ab:cd:f1:8a:49:a3:11:e3:b7:73:73:d8:
                    2e:1c:7a:8b:87:de:1a:b2:7b:fb:35:f6:af:6d:45:
                    93:26:25:63:08:79:07:71:ae:47:3c:69:2a:69:69:
                    ac:a9:02:16:f3:ef:99:25:90:c3:f7:65:4d:8d:8d:
                    49:5d:ee:5e:79:e5:bf:f3:13:ae:79:d7:73:9a:f5:
                    f8:e4:df:51:78:23:ba:52:40:4e:f9:0c:11:0b:67:
                    36:18:00:ec:75:0f:cc:6c:08:24:46:48:26:dc:0f:
                    75:46:98:17:fc:eb:0d:0a:f5:e0:c5:fc:61:ad:b6:
                    20:bd:d9:2d:3d:86:f9:f6:9b:47:cd:4b:73:a5:a9:
                    f9:bd:d3:76:51:c0:92:82:df:f9:7c:e9:1e:48:25:
                    a5:62:50:ae:28:d0:9a:ce:27:1e:1f:1f:d5:24:2c:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:38:9B:BA:A6:D1:57:3C:2C:DB:BC:D2:EF:62:B8:55:AB:52:A6:BD
            X509v3 Authority Key Identifier:
                keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:4a:b0:74:5b:5a:7d:5e:8d:1c:7e:46:66:c4:57:95:32:b9:
         14:9d:80:14:e0:ac:ad:9a:ab:6b:05:6e:bc:a7:2f:58:5c:ac:
         99:00:5f:8e:e9:24:3a:e9:9a:09:6f:94:3b:82:a4:b5:91:c5:
         3f:83:61:fd:98:7b:0c:77:8c:7b:ed:4b:9f:66:dd:41:a6:2b:
         33:e3:ea:85:9b:a4:23:2e:68:f9:57:b8:02:e2:cd:6c:45:12:
         32:e8:f2:03:f9:0c:ea:11:ba:76:73:6e:0e:15:a3:ec:58:25:
         d3:2b:c5:ee:b9:46:e5:a0:e2:2c:a9:55:a4:49:cf:d4:ea:ce:
         30:60:72:c8:58:71:10:e9:e1:49:6e:20:fb:53:b8:59:30:94:
         b3:2e:84:a4:f0:88:8b:e5:35:a8:77:13:8a:56:07:69:40:e1:
         dd:78:b9:88:7a:3c:7d:19:59:cc:78:7a:76:63:7d:cb:a1:92:
         f6:56:cb:de:6b:b9:bb:fd:de:4f:ca:63:90:48:54:b2:35:ea:
         fa:1b:54:18:83:af:79:8b:0c:f7:f4:dd:28:1d:01:6c:5b:a6:
         74:25:c3:40:e4:a9:a5:94:a3:6b:68:7c:e9:e4:98:1b:33:12:
         85:bc:d2:71:4e:01:01:a7:88:a0:9f:6d:bd:b9:24:b9:5a:7d:
         7a:d0:c2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 16:19:04 2024 by rpki-client on console-ams.rpki-client.org