Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          LdUeb0/u3xK4daaPYWwonm/C4r0rsXQidxhpgO9dWwU=
Subject key identifier:   9E:20:1B:8B:19:06:4F:D2:AC:37:4E:BE:38:1E:0A:5E:E3:DD:FA:05
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       018F430D621D0D37617F2043F7C8116DE417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          0AEB
Signing time:             Sat 04 May 2024 10:01:41 +0000
Manifest this update:     Sat 04 May 2024 10:01:41 +0000
Manifest next update:     Sun 05 May 2024 10:01:41 +0000
Files and hashes:         1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: lcxla/6WUaH31lNzWdbx3D+UwRAgfNIVkPxzi/KtvMM=)
                          2: lEM7voHZ4kIjN9pTLMW_Fzby9qw.roa (hash: xehplS6By0BioM3I/N8Yk6zvZjv8jTM2kU5AHa+3nso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0d:62:1d:0d:37:61:7f:20:43:f7:c8:11:6d:e4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: May  4 10:01:41 2024 GMT
            Not After : May  5 10:01:41 2024 GMT
        Subject: CN=9e201b8b19064fd2ac374ebe381e0a5ee3ddfa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:d8:e9:72:8a:68:19:4c:5e:29:73:20:74:
                    67:fc:e9:60:dc:fe:70:5a:92:09:f3:79:62:ca:be:
                    c3:69:9f:8c:ee:86:43:d3:93:d4:62:8c:14:d0:1c:
                    cd:d2:60:4b:87:52:c0:14:d2:88:92:04:18:b2:42:
                    dc:31:31:e6:73:b4:46:38:7e:86:82:8d:7d:cd:cc:
                    e8:1b:03:90:94:60:bf:df:db:43:0e:10:f1:32:14:
                    5d:dc:93:a0:3b:76:c5:a9:bc:09:0e:80:aa:3c:bd:
                    8b:a2:d4:73:21:3a:93:b2:3b:06:11:74:a5:6e:d6:
                    db:e0:07:31:07:0f:22:a2:86:51:51:0d:97:20:63:
                    e2:76:b5:12:c8:c6:7f:58:5d:93:37:ca:f0:b2:56:
                    ee:44:5a:0a:3c:c5:51:69:72:a0:4c:c7:09:c6:fd:
                    a9:97:15:c5:c6:91:da:7e:e5:f4:1d:e9:6a:f9:68:
                    e4:7e:ea:e2:1e:0c:49:9e:8d:69:48:0c:09:bf:58:
                    3d:79:af:f7:0a:d2:c6:d9:7d:f1:67:12:ae:68:3e:
                    e2:02:31:2a:b3:47:af:ad:89:ec:9a:59:73:bd:0c:
                    bb:ce:87:48:63:40:3f:3d:5e:e3:aa:84:83:b5:7d:
                    c9:75:b6:cf:a8:d5:f2:7a:20:13:1c:f1:2b:36:dc:
                    3b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:20:1B:8B:19:06:4F:D2:AC:37:4E:BE:38:1E:0A:5E:E3:DD:FA:05
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f7:c8:59:91:43:ad:f0:b4:50:a2:2e:44:be:88:7e:ff:ae:
         ce:b8:df:cb:47:41:d1:26:d0:35:89:19:a5:ea:8e:71:cf:83:
         4d:9d:ff:e0:89:df:34:2d:fb:72:e7:a6:82:a6:b6:ff:b0:9d:
         8b:77:91:50:5b:24:f7:16:38:4c:90:d4:49:b6:38:82:57:c7:
         f8:f4:aa:49:22:88:2f:c3:89:49:11:b2:c4:cc:fc:ea:35:82:
         b7:0f:25:b4:95:b8:73:38:cb:ab:bd:3e:3f:1f:5d:0c:6f:1b:
         f9:59:d8:b9:60:c4:bc:88:f5:78:64:f4:86:45:48:2f:cd:55:
         6e:5b:85:6e:c0:c8:6a:c9:f2:42:83:0f:fb:4b:2b:4f:e2:5d:
         ea:78:f6:77:8e:a8:7f:2f:01:3a:b4:02:61:21:3f:28:0f:61:
         e2:1d:0b:84:5c:f5:eb:12:fe:08:6e:e5:1f:28:fc:6f:cf:54:
         16:46:ff:0a:e4:6e:0b:6c:e8:e0:7e:f3:72:bf:59:13:75:7f:
         f1:55:b6:64:a2:8b:92:7c:10:77:1f:23:55:f8:55:47:5f:56:
         da:20:f3:86:bf:fc:66:0b:f2:4f:57:49:7a:55:2d:cb:2e:ed:
         53:00:6b:b1:b4:66:95:d2:5b:62:79:30:34:85:b0:fd:b3:24:
         5b:75:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:34:31 2024 by rpki-client on console-fra.rpki-client.org