Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File:                     94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier:          M4GZ5Bn2vILkco24K8oHb95IgWFd01t/z42an6e2X6M=
Subject key identifier:   7E:D3:73:57:E0:21:7E:6A:3E:00:EC:4F:4D:A6:01:8B:10:A5:B5:9D
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer:       /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial:       018F4A592946E57280BB78066E5CCB013409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number:          10EA
Signing time:             Sun 05 May 2024 20:01:48 +0000
Manifest this update:     Sun 05 May 2024 20:01:48 +0000
Manifest next update:     Mon 06 May 2024 20:01:48 +0000
Files and hashes:         1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: ZCwj8uRPn2Jf2ur8i4N8OUXrhalsAQRLjLd6HdOzr3s=)
                          2: XNOnrNwCbkK-fWlgVFmlh4qqJHo.roa (hash: 3QWYSInu38r/5/KTKjAC8sguJHur37e5F5m4udIiWR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:59:29:46:e5:72:80:bb:78:06:6e:5c:cb:01:34:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
        Validity
            Not Before: May  5 20:01:48 2024 GMT
            Not After : May  6 20:01:48 2024 GMT
        Subject: CN=7ed37357e0217e6a3e00ec4f4da6018b10a5b59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:a3:ea:9b:cb:41:f0:c8:1a:50:a8:74:2b:
                    cb:58:e4:d9:51:b6:a7:ec:64:d1:d8:a0:ce:d7:62:
                    85:eb:02:c8:5d:46:3c:66:cd:6c:a6:73:e8:b0:22:
                    81:08:c1:f7:0a:49:ca:1d:04:fb:96:11:9d:cc:d4:
                    3a:6c:25:7f:86:cc:84:33:19:be:44:c6:eb:93:4c:
                    1d:81:49:31:43:62:29:3f:9e:61:2a:17:08:44:78:
                    1a:96:f8:bf:e1:6c:62:8e:da:63:28:a3:e1:ac:dd:
                    20:cb:fc:6d:dc:51:e2:90:1c:df:d4:ef:91:85:cf:
                    2c:13:4c:3e:c6:6b:a7:d8:62:d1:a5:fb:7f:c8:76:
                    b6:77:67:49:5c:6d:6b:92:cb:7a:72:f9:a2:35:9e:
                    e9:f0:ff:64:09:87:7a:5c:92:8c:a8:6c:36:72:55:
                    c4:3e:4c:e3:0c:03:24:ff:eb:5c:91:d3:d4:02:9d:
                    ac:e7:ca:32:7e:77:89:e3:18:e4:1c:2f:7c:34:b1:
                    c9:75:73:82:ca:42:3d:c5:64:99:ca:7c:2f:e3:ba:
                    a8:7f:cc:d9:cc:48:58:08:00:76:1b:18:51:08:22:
                    04:1d:91:6a:7e:8e:76:80:da:9b:fc:0c:91:af:29:
                    9d:7d:a9:16:00:d4:95:4c:7a:18:e0:93:cc:07:92:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D3:73:57:E0:21:7E:6A:3E:00:EC:4F:4D:A6:01:8B:10:A5:B5:9D
            X509v3 Authority Key Identifier:
                keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5b:b3:86:8b:5d:1d:eb:7b:cc:de:e3:d4:db:df:4a:8a:f5:
         d8:e2:8e:2b:79:ec:d8:11:42:ef:2f:48:ae:5f:08:56:51:a9:
         7e:c5:b4:b4:7c:0d:0d:f6:66:c5:99:aa:99:52:d4:5a:8e:79:
         10:07:75:a5:5b:01:ca:33:c1:46:b2:4c:22:54:39:31:6a:6a:
         3f:51:04:e6:f7:15:5d:41:58:91:67:22:51:7e:77:20:06:f0:
         81:7d:fa:35:66:61:a4:c2:4d:90:e3:03:67:1e:37:db:e4:04:
         e6:f9:3e:a3:51:65:c2:65:ef:ec:0b:24:1f:d5:07:24:90:fb:
         b8:1a:e4:bc:d7:a5:6e:65:a9:60:7a:2c:4e:9f:6d:76:5b:b2:
         fd:09:09:3d:3d:83:41:b4:78:fa:0e:9a:92:54:4e:dc:ef:cb:
         12:61:b8:97:9a:2d:06:1a:0d:aa:17:2b:97:2e:eb:bc:18:7d:
         57:30:44:b9:e1:43:95:8f:f8:a6:35:6a:d7:4d:57:80:dd:3a:
         4c:3f:9f:6f:08:30:50:9a:bf:4f:5b:2b:f8:cc:f7:9d:cc:e2:
         86:77:4f:ee:67:71:eb:85:a2:23:5d:d9:e5:ac:50:8f:77:a6:
         e7:2b:35:95:83:b1:d1:49:53:86:b8:87:d8:1c:13:0d:61:1e:
         24:6c:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:24:44 2024 by rpki-client on console-fra.rpki-client.org