Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File:                     73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier:          tt13Mttcly21/jI5h7kdd1nfjMFz9/QGSPzSaImUkCQ=
Subject key identifier:   10:6F:1A:35:C4:2D:3C:15:CC:F5:15:E0:D6:52:43:63:70:FE:03:5E
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer:       /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial:       018F3440FA3DC5095E11F19112809251D1FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number:          0714
Signing time:             Wed 01 May 2024 13:03:44 +0000
Manifest this update:     Wed 01 May 2024 13:03:44 +0000
Manifest next update:     Thu 02 May 2024 13:03:44 +0000
Files and hashes:         1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: ZcgZO8wJvxvou0LpMQnCfULe83unKQAji/5ZW7FLAco=)
                          2: LGYf5QqJ9NkzHzDgUQKoJ2kh7qg.roa (hash: CwiAieFrMIUeBf5tO2B9cCKr2q6MQBmss/UXGfsDAq8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:40:fa:3d:c5:09:5e:11:f1:91:12:80:92:51:d1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
        Validity
            Not Before: May  1 13:03:44 2024 GMT
            Not After : May  2 13:03:44 2024 GMT
        Subject: CN=106f1a35c42d3c15ccf515e0d652436370fe035e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:22:9a:b3:41:5a:85:eb:e8:40:8a:34:f3:08:
                    6d:21:16:58:4a:0b:d2:de:a8:82:b4:68:88:02:8d:
                    46:80:0c:00:57:8d:ae:12:e6:c6:26:12:84:a0:22:
                    8e:58:fc:54:1a:f0:d0:a9:a0:ef:98:9a:fe:2c:32:
                    5e:1d:a7:95:e4:b5:1b:ca:cb:a1:a2:e8:f2:18:26:
                    6b:8b:51:ba:04:50:e2:0a:78:e4:d6:c4:3d:0f:b3:
                    8e:53:d7:bc:f3:31:46:6a:09:b6:5a:26:e4:52:eb:
                    2b:cc:7d:8e:8e:b0:87:df:c9:09:e1:55:f0:c8:69:
                    fc:e4:c9:65:cb:7c:e4:07:32:6e:4b:fe:c5:3a:94:
                    b6:34:40:49:6b:b0:ea:fd:56:bd:7c:09:04:66:48:
                    e0:3f:45:16:4e:d9:dd:de:71:b4:25:7c:ff:d9:5e:
                    35:42:71:68:e1:9a:a5:25:2b:cf:e4:bf:bb:bb:37:
                    c5:a5:8b:da:50:30:03:b8:17:c8:a8:59:17:56:15:
                    ce:b8:4f:ff:fb:44:14:00:13:e5:4a:f6:4f:4b:3b:
                    e4:bf:74:28:e3:81:ba:2c:72:c8:42:61:86:26:52:
                    00:4a:bf:f7:74:0f:ab:6c:a3:5c:c1:bb:b8:3f:2d:
                    ad:d7:08:32:09:30:9a:63:5b:53:86:c3:14:fd:ce:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:1A:35:C4:2D:3C:15:CC:F5:15:E0:D6:52:43:63:70:FE:03:5E
            X509v3 Authority Key Identifier:
                keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fc:0a:fc:e2:b7:c0:eb:ea:fa:7a:f8:c4:30:c4:d1:f0:bf:
         c8:98:1b:89:2c:f9:07:8e:2b:1c:27:d0:de:f0:a7:89:03:88:
         9d:9d:70:46:e9:4c:93:15:2c:2c:54:2a:d0:bc:9c:a0:9d:19:
         58:3c:ea:73:48:f1:e2:61:91:7e:2f:98:c5:0a:84:db:fe:87:
         4e:06:6b:8b:05:f7:ca:8e:da:1f:c9:8b:e2:98:a4:53:e5:34:
         bf:0d:7b:fd:a3:3e:b1:e5:87:e5:d4:12:b5:44:2d:50:a4:64:
         35:37:3c:d1:a0:f8:c6:26:4a:8c:91:0e:da:3d:49:7e:56:0a:
         58:b8:1d:8c:74:b9:25:b6:6d:32:35:8e:56:55:ad:36:c5:4f:
         b8:2c:a6:82:8b:c4:ec:10:c5:76:eb:8d:0c:66:51:80:81:49:
         06:40:52:ad:eb:11:5e:bf:3b:95:f8:4e:81:84:45:c1:92:62:
         e4:be:08:22:ec:71:04:1d:32:5e:b7:dd:e4:c7:29:f7:e3:e9:
         ef:95:4e:2b:15:4e:de:99:0d:c5:ac:45:c7:eb:9e:6e:2d:c1:
         76:77:68:ab:e8:8e:42:ba:93:c7:1e:c3:83:66:2c:cf:4a:4f:
         5c:62:b2:ea:c2:2d:c3:ac:66:7a:29:31:82:d4:b4:9f:b0:3f:
         4d:2b:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:51:41 2024 by rpki-client on console-fra.rpki-client.org