Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File:                     m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier:          xAlKoEoHXyAOHVDVcstm+R1HGJYY01D6tSjpiKGmqGU=
Subject key identifier:   67:0C:12:30:D6:B5:A2:65:29:7E:ED:8C:9C:DA:A4:20:EB:C5:0F:02
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer:       /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial:       018F874A6C695F129D5B720AC286924E698E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number:          07F8
Signing time:             Fri 17 May 2024 16:02:32 +0000
Manifest this update:     Fri 17 May 2024 16:02:32 +0000
Manifest next update:     Sat 18 May 2024 16:02:32 +0000
Files and hashes:         1: 7GHI4QuVrAkRYG1t18ix54B05QU.roa (hash: 5IK+bpb3qI93xt5wRqboWXMk6O+FnqaxD8zFDhl3mOs=)
                          2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: VqEV65l2uBcbjA5MR0jjNCwTxg0n6nRXfXr486trAkA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:6c:69:5f:12:9d:5b:72:0a:c2:86:92:4e:69:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
        Validity
            Not Before: May 17 16:02:32 2024 GMT
            Not After : May 18 16:02:32 2024 GMT
        Subject: CN=670c1230d6b5a265297eed8c9cdaa420ebc50f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:22:55:65:1d:d5:20:0d:22:0d:bc:85:72:
                    42:60:8a:68:1d:99:39:f7:44:31:b4:73:40:7e:d8:
                    64:96:61:8c:2d:65:31:9b:d4:02:6c:8c:6f:54:7f:
                    cc:51:05:4a:b5:65:72:1e:8c:47:0f:ab:4b:78:26:
                    39:1f:cf:a2:e1:ca:b0:6b:a0:2e:8a:d4:f2:9c:d7:
                    89:34:cd:8e:a1:fb:d5:4a:a9:b6:03:e1:09:3f:2c:
                    f9:26:85:e6:0e:f8:dd:16:61:ab:94:14:8b:bb:56:
                    45:26:08:c0:f9:9e:c1:a7:5b:2a:94:ad:f3:5f:a7:
                    05:75:15:62:cc:b5:82:0c:d5:f4:f5:86:69:8f:db:
                    af:71:51:fd:5b:ae:3f:d3:56:cd:3d:ba:81:1c:cc:
                    02:72:8a:9c:21:8a:a0:c9:54:f8:c8:23:9e:e5:08:
                    63:fd:e0:30:5a:43:ff:12:94:84:3b:68:fa:4b:25:
                    2c:61:63:36:84:9b:2e:e4:e4:aa:41:1e:7b:6b:a1:
                    65:26:aa:3d:61:57:59:86:31:cc:aa:58:3b:c7:fc:
                    22:b9:89:22:d3:08:b2:19:a2:cc:c9:8d:f1:08:88:
                    a5:76:03:8c:7a:95:d4:3e:6e:10:8f:dc:a8:22:23:
                    91:74:00:9d:6f:74:36:2a:30:00:88:c6:58:cc:bc:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:12:30:D6:B5:A2:65:29:7E:ED:8C:9C:DA:A4:20:EB:C5:0F:02
            X509v3 Authority Key Identifier:
                keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:6a:7c:2a:1e:7e:17:69:39:8f:f9:17:00:e7:a4:f7:cd:17:
         dc:3a:38:ce:51:37:98:e9:65:93:41:70:d2:e4:01:20:b7:35:
         d9:db:06:d1:98:77:83:82:3f:7e:11:ac:23:98:c3:41:c6:1e:
         c7:e7:43:e9:2e:2a:bc:f6:aa:90:d8:e7:76:56:ae:c2:e2:46:
         f3:ae:d8:6b:8b:e8:2a:16:b9:67:78:70:35:46:2e:6d:24:d1:
         e9:48:08:51:cc:2f:03:03:62:15:d7:cc:29:5b:a7:80:0f:ab:
         8b:67:d8:eb:e5:5b:c8:26:4a:4c:4b:74:54:2a:51:be:a9:44:
         06:e8:c2:38:64:12:40:69:45:ad:b3:52:36:4e:31:60:7f:1c:
         68:18:8b:da:d0:eb:a9:ed:46:bc:22:de:4f:6c:4e:10:ae:e3:
         06:f3:da:a9:e9:46:fb:6b:7a:3f:ea:7e:80:71:59:ad:23:6e:
         8b:1c:30:54:c7:46:dd:69:08:fc:5e:da:3b:92:95:af:79:4f:
         04:96:ef:ef:19:d1:4d:9d:5e:2c:1e:b6:4e:2b:18:7f:2f:b7:
         a7:f3:be:3e:6b:3d:c1:74:19:7b:90:b2:4c:ff:a6:79:e4:8a:
         73:4d:f3:91:bb:bd:d1:bd:1e:e0:50:a0:3b:3a:bf:83:d8:07:
         eb:64:8a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:41 2024 by rpki-client on console-fra.rpki-client.org