Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          xm86J68RVQoH/Kz3Xv8ajvX6/Ri6Nd6qEDwe2gkFj74=
Subject key identifier:   1D:E5:A1:07:E1:39:DB:E4:E7:02:4C:E1:0C:9E:3B:59:76:68:52:1F
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       018F8748FAF1688C2F160CEC1BB74FD5BBCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          02EA
Signing time:             Fri 17 May 2024 16:00:57 +0000
Manifest this update:     Fri 17 May 2024 16:00:57 +0000
Manifest next update:     Sat 18 May 2024 16:00:57 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: AkLLS6yTK3Me59dFvwWqkKeREUoK3tfUmGyX+TkmkjU=)
                          2: wBS_McyvU63apKo-g3Eo_AUpl_U.roa (hash: qDXKLrXcsgEyBo3lXg8dWkZp2Qaz5cq4YLqWZHgBNHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fa:f1:68:8c:2f:16:0c:ec:1b:b7:4f:d5:bb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: May 17 16:00:57 2024 GMT
            Not After : May 18 16:00:57 2024 GMT
        Subject: CN=1de5a107e139dbe4e7024ce10c9e3b597668521f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ea:e3:e7:f7:ca:1d:40:7e:79:9c:f8:79:03:
                    b2:0f:25:6e:16:d7:2d:c8:fa:50:3a:35:5b:9b:ed:
                    05:cb:bb:cd:7c:33:16:b1:24:d0:7c:79:86:6d:cf:
                    0e:af:88:fd:a3:36:99:63:8d:1d:24:e4:74:ed:38:
                    97:26:f6:c5:c3:63:f0:5f:74:ab:67:29:77:e1:6f:
                    bf:3b:1e:12:06:52:4b:27:e9:d1:70:0f:67:54:1d:
                    ff:03:c3:86:81:9c:4f:7a:4b:38:b0:27:74:be:04:
                    a0:6e:f7:fe:3a:e4:0a:1f:40:7e:44:72:32:4b:d9:
                    3c:cd:f7:89:0b:2e:aa:58:ec:14:65:68:5b:1f:b0:
                    ff:e1:a0:47:63:ab:4d:99:77:36:d1:49:9f:a3:06:
                    4c:a4:3b:7b:ca:e7:fe:ae:01:29:1b:ca:d7:b1:d0:
                    d8:98:2b:96:0c:47:17:7b:86:be:38:37:6d:01:16:
                    7a:38:ae:e8:41:d2:4b:bc:66:3a:0d:31:58:f5:28:
                    dc:f5:48:13:2b:d2:86:11:4f:ce:1a:5b:b9:f9:f6:
                    88:e2:35:3d:68:ce:03:ce:24:72:25:07:ff:66:85:
                    de:19:04:c3:18:1e:cd:c8:3c:b0:fa:6f:fe:4d:20:
                    fe:ae:59:46:27:06:de:d8:2e:7d:73:7e:ec:9d:e0:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:A1:07:E1:39:DB:E4:E7:02:4C:E1:0C:9E:3B:59:76:68:52:1F
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:80:be:12:94:23:94:0a:2d:4a:f9:45:db:84:ca:25:3b:84:
         8f:57:82:0c:41:38:4e:20:4d:bf:a1:78:28:2c:93:b9:bf:bd:
         69:9a:0e:72:f2:2f:fb:5b:a5:63:6c:36:34:96:b2:94:2b:05:
         61:45:32:21:f2:cb:33:15:c2:d9:d4:85:25:ce:9b:90:76:e1:
         8d:6b:13:7d:63:a4:3b:7f:87:58:c3:0c:96:56:ec:c5:34:87:
         45:38:89:cc:f0:cd:91:2a:1b:61:ac:dd:da:e8:21:bb:6e:e3:
         3c:81:4c:c5:78:79:ab:b3:c8:e1:ed:37:7f:a6:a8:9d:c4:98:
         58:f7:8c:05:10:d3:9e:e8:d5:11:d7:34:33:0f:f4:20:07:0b:
         af:0d:e5:98:23:03:a6:d2:47:6f:27:27:73:5d:43:35:b8:23:
         9d:48:09:5f:ff:63:5a:3c:c8:dc:ae:51:c9:6f:65:e0:2e:a9:
         3b:73:bd:eb:37:dc:04:c7:78:e9:fd:47:f6:2b:15:54:5a:81:
         29:37:d7:69:52:70:a3:92:16:00:be:f1:b5:2a:5c:f8:57:a9:
         a7:43:49:d2:eb:16:b4:78:e0:cb:fa:e7:e8:6b:f5:16:9a:11:
         03:83:94:23:8c:92:8a:8d:6f:e5:33:d1:bb:6b:9f:d8:2b:ac:
         44:bb:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:51 2024 by rpki-client on console-fra.rpki-client.org