Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File:                     7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier:          UPpFBgQBvlQujGX8qQfPtdbghqxtGykNcrKFW+ayVIE=
Subject key identifier:   F5:F0:9B:E0:0A:5E:26:E0:FC:E7:18:A2:B2:AA:6F:EF:DE:DD:43:65
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer:       /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial:       0191FB22EEFA1B6F141A30FE98C4AAE2D98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number:          012A
Signing time:             Mon 16 Sep 2024 14:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:56 +0000
Files and hashes:         1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: ax970xMJD4uH/HTIV07KzHHAgO4FEbYntwEBMXTkqUk=)
                          2: AsBehFBPScLzEdH1taUpUuHl87k.roa (hash: ANBF3jYOPtoY/nFEMpNazMt93YHyO4Ds3MiiXOgHpcE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:ee:fa:1b:6f:14:1a:30:fe:98:c4:aa:e2:d9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
        Validity
            Not Before: Sep 16 14:00:56 2024 GMT
            Not After : Sep 17 14:00:56 2024 GMT
        Subject: CN=f5f09be00a5e26e0fce718a2b2aa6fefdedd4365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:f8:76:81:e7:d4:61:79:cd:a4:3e:cd:f9:
                    f8:ca:81:ed:d2:9d:54:ba:66:b3:dc:11:df:02:22:
                    42:27:80:f8:39:24:c7:bd:8c:74:6c:72:77:8f:c9:
                    1b:c9:11:10:3a:84:b5:6a:30:47:c6:b8:b4:97:f2:
                    bf:9b:2e:c8:2b:3b:1e:ad:d0:06:1d:22:2c:5b:55:
                    02:8d:dc:cd:e1:77:20:70:6a:ea:08:91:36:3a:c4:
                    21:ce:e2:83:37:3f:31:25:17:32:32:f0:ef:ac:1d:
                    3b:3c:a2:fd:6e:67:da:78:92:5a:26:2c:a6:36:9d:
                    66:72:4b:bf:05:76:3a:c3:ff:9d:cd:95:70:e5:4b:
                    4e:f8:3e:52:13:a4:c4:a7:22:12:ed:87:a7:26:cc:
                    23:eb:5c:4d:ab:00:39:8c:a2:fb:8a:bf:6b:f8:cc:
                    34:8b:cd:28:54:ce:9c:3a:78:c5:86:e3:ff:c1:cf:
                    c1:1c:c6:76:d8:12:f3:2d:a8:4d:e3:b5:a6:64:da:
                    47:f8:1a:2e:dd:50:61:4a:56:0a:71:fe:f5:7d:26:
                    00:6d:08:03:90:bb:e2:15:0b:c0:6a:8d:50:ce:29:
                    13:7b:3c:d4:01:75:cf:29:a3:27:9e:dd:f7:ed:a8:
                    7a:95:1d:91:b3:53:84:a4:47:82:35:49:ed:25:36:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F0:9B:E0:0A:5E:26:E0:FC:E7:18:A2:B2:AA:6F:EF:DE:DD:43:65
            X509v3 Authority Key Identifier:
                keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:55:33:26:36:4b:2e:e6:ef:65:b8:e1:5f:ef:67:0a:e1:
         17:83:e0:67:d9:d2:95:56:90:d1:e1:60:bc:f8:11:4c:34:5e:
         f1:a5:8f:11:a6:b1:93:b3:0c:04:b1:58:f6:c4:b5:07:b1:e4:
         64:73:ce:a0:69:65:26:68:8d:cf:2d:6d:e2:4e:f3:07:10:94:
         a6:6e:67:96:aa:a8:9c:76:79:74:a8:49:0f:fe:b5:3a:2d:4e:
         74:69:b1:be:55:8a:10:f2:35:30:89:b7:ae:1b:c2:2e:e4:03:
         0f:d8:f4:01:cc:dc:d2:d9:0f:37:e8:b6:7e:57:0a:99:76:23:
         3c:d7:26:3d:a9:b6:cc:c5:bc:56:61:f0:c8:a8:78:7a:16:f0:
         cd:bd:de:a4:3b:7e:a0:76:71:61:3c:83:6c:15:03:63:13:ad:
         3a:5c:46:18:11:5b:2f:69:2c:67:b7:59:46:f6:3f:a6:6d:6a:
         32:32:25:9d:9d:42:01:51:82:f1:5b:5b:ee:88:c7:06:64:20:
         8e:c2:75:17:d5:bc:be:55:71:c6:e2:b5:fa:42:bc:32:1e:d6:
         92:a0:d0:6b:a8:1f:c6:24:d0:f9:ec:f0:8f:b9:81:03:b2:ae:
         9d:9c:ae:93:35:af:76:b5:74:5a:e8:e7:73:d3:36:30:5c:39:
         93:8d:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:36:28 2024 by rpki-client on console-ams.rpki-client.org