Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File:                     irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier:          xR7A+ZWQmFJu8Bg5uWEALQdI/AHUBZLw+JS3DJEq0mU=
Subject key identifier:   7E:3C:7C:A9:A3:40:67:9D:37:DD:73:F5:AF:22:0E:53:BB:70:6F:72
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer:       /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial:       018F961688321028D963707283D415F8A241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number:          1112
Signing time:             Mon 20 May 2024 13:00:10 +0000
Manifest this update:     Mon 20 May 2024 13:00:10 +0000
Manifest next update:     Tue 21 May 2024 13:00:10 +0000
Files and hashes:         1: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: ZTCkJXBNFmylGzkp7yHBp1YUnB4NJmaV6dGuOy4Dask=)
                          2: tyC3aQiPwIi_V4NtCZX7ZivaPFg.roa (hash: Od7Eq3EfpcE84cJD05ZSKoxYzpjlzUxpesvDuyXAbAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:16:88:32:10:28:d9:63:70:72:83:d4:15:f8:a2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
        Validity
            Not Before: May 20 13:00:10 2024 GMT
            Not After : May 21 13:00:10 2024 GMT
        Subject: CN=7e3c7ca9a340679d37dd73f5af220e53bb706f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:ec:0f:14:6f:ff:57:f3:f7:5f:13:47:6a:
                    6f:e5:e3:f0:0b:b8:7d:e8:f4:4d:1d:71:c6:8b:20:
                    e1:d9:e2:12:88:61:4a:b8:08:d1:9b:19:d6:b8:a0:
                    49:ce:99:a4:7d:63:34:34:ad:96:5f:30:b8:d6:15:
                    7a:bb:3f:dc:b2:97:5d:21:82:e3:0e:b2:0a:3b:bb:
                    91:59:e4:c4:3f:88:ab:3e:f6:9e:e8:30:91:62:56:
                    8a:c7:9f:2e:e4:1b:bb:ec:3c:60:7c:1c:72:0c:90:
                    ba:72:14:85:db:4e:3e:f4:b6:c0:8c:d7:6e:e2:7e:
                    07:1a:fb:5b:0e:ce:43:22:25:52:7c:a2:d9:59:9f:
                    61:5f:26:36:e8:32:01:44:f9:ed:71:80:c3:ce:17:
                    8d:90:ad:29:1c:94:af:5a:6f:b8:00:be:bb:6a:62:
                    ff:36:8d:22:09:ae:99:8c:4e:bb:a0:0f:81:79:b3:
                    fe:76:7a:86:d2:20:e7:fc:7f:69:9b:7f:03:7f:42:
                    91:c7:b8:b6:df:e0:a0:55:64:38:5e:34:c3:66:7c:
                    d9:4f:bf:cf:e0:a2:b5:aa:26:29:e1:f4:6a:47:3b:
                    b6:3b:45:74:59:93:68:94:81:63:eb:2c:1f:7c:4f:
                    69:f1:56:02:22:3c:83:02:98:57:e8:2a:06:b8:f7:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3C:7C:A9:A3:40:67:9D:37:DD:73:F5:AF:22:0E:53:BB:70:6F:72
            X509v3 Authority Key Identifier:
                keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:fe:20:d3:de:04:d2:61:fa:79:2a:9e:a8:0b:84:ca:e3:
         a2:87:12:00:61:a5:14:ec:24:3c:0c:6c:a8:27:f3:e7:c8:68:
         3a:fb:b9:07:13:b0:aa:02:c2:eb:80:65:94:db:8b:2d:8f:e3:
         bf:d3:6f:c7:a0:12:40:22:fc:f0:d2:99:4b:e7:c9:d0:70:c9:
         2f:21:6d:df:ec:08:fe:e9:37:19:cb:29:43:ee:04:49:c4:55:
         1f:eb:18:c1:61:e5:83:21:e3:b7:48:df:e3:9f:c3:c3:0e:f3:
         cf:ec:7d:56:b4:d1:24:a8:86:63:b5:f4:5c:6f:a6:86:2f:cf:
         ac:37:f0:c8:a8:4c:fb:0e:5e:22:49:74:ff:e4:da:86:10:97:
         12:6b:74:0e:f4:3b:8c:fe:f6:6c:7c:d9:eb:6f:f5:d2:0d:8d:
         34:d7:dc:3a:b7:f2:d4:a1:36:5b:a2:0a:18:15:c7:9a:f7:24:
         da:36:99:4e:b7:3f:96:91:fe:f1:eb:ca:81:3b:7d:c9:57:5a:
         ac:ca:c8:60:31:12:15:7c:d0:dd:9d:ae:e0:f6:b6:65:0d:a1:
         fa:26:60:99:05:a5:e1:2e:57:d9:89:4f:4a:46:a3:4c:1b:88:
         b6:d1:00:12:d2:0d:d8:9b:28:a9:bd:f7:9e:20:08:23:11:2f:
         cd:ae:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:02:29 2024 by rpki-client on console-ams.rpki-client.org