Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          zXKRLtTRsuEvwlY50Dtr02zTgAMv7MlHnjwSC7ao1H0=
Subject key identifier:   03:39:8F:2B:1A:7A:4E:82:9E:DF:AD:07:91:D9:0E:29:97:B6:D3:94
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       018F8748F53812B53CAB13F4488A8A496944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:56 +0000
Manifest this update:     Fri 17 May 2024 16:00:56 +0000
Manifest next update:     Sat 18 May 2024 16:00:56 +0000
Files and hashes:         1: anNQqr40QHoYkg5WmhRHRNe5NOo.roa (hash: 1hs2l4fydLBStWBHLrPYx9dTsggsncXfQKuJdcapoqQ=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: YxKNaGESxmPEeD/T9jQ8o3647tEsNJCEhJc8yShWL8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f5:38:12:b5:3c:ab:13:f4:48:8a:8a:49:69:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: May 17 16:00:56 2024 GMT
            Not After : May 18 16:00:56 2024 GMT
        Subject: CN=03398f2b1a7a4e829edfad0791d90e2997b6d394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:a3:92:e7:e0:48:78:f0:95:56:95:02:99:
                    d9:74:2d:f2:73:75:cd:80:0b:b6:dc:d1:93:66:70:
                    56:c2:53:c5:57:ed:55:db:74:4a:e7:d8:d3:27:ce:
                    f4:2f:29:ce:40:c7:10:85:c5:cb:c3:ab:4d:29:0f:
                    c2:84:21:84:e0:7e:4e:b3:f0:e8:17:42:fb:8f:0f:
                    bb:c9:b5:21:9c:6b:b9:6e:33:52:96:d3:1b:a6:b6:
                    a1:ed:bd:f8:4a:e5:64:d2:b7:f0:e1:2e:07:b7:3a:
                    96:48:5d:e4:26:74:84:8c:c4:11:f6:4b:a9:9e:9c:
                    24:68:e5:ae:0a:98:60:0d:40:e5:df:40:61:7a:97:
                    d4:85:e9:b3:4b:81:2b:1d:5f:b7:d8:95:34:55:88:
                    e2:17:eb:1e:6c:e7:99:cd:d3:97:06:c8:57:94:cc:
                    58:79:3f:76:58:60:1b:b0:ad:d7:e4:14:24:81:ef:
                    4f:27:4f:96:5e:c1:59:e5:4d:50:28:18:3b:f3:fe:
                    cb:6a:c5:6c:e0:2b:fb:69:04:23:c5:e2:c7:ca:74:
                    e9:8b:a1:27:20:eb:f0:08:47:7f:a1:21:30:03:6c:
                    ab:fb:21:1a:62:ec:41:ea:75:10:37:81:c7:7e:e9:
                    93:f3:13:48:db:75:65:83:4c:8b:53:12:fc:33:60:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:8F:2B:1A:7A:4E:82:9E:DF:AD:07:91:D9:0E:29:97:B6:D3:94
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:d3:52:76:32:1d:56:a7:af:1d:b8:ea:6c:46:9b:af:4e:
         69:7e:3a:a8:63:e5:8f:81:51:da:c3:7d:5c:63:7c:0b:65:a8:
         1e:2e:76:40:2a:20:2d:9a:a1:4b:e5:1e:86:3e:2e:2f:4f:2b:
         ae:5d:ef:0d:ce:46:32:9e:f1:c1:25:5c:44:06:31:fe:64:e4:
         1a:f7:c6:0a:c4:54:e3:64:4a:d4:29:82:92:8b:45:d9:9e:4c:
         e7:6a:b1:08:67:a0:40:d4:ab:cd:32:07:8a:74:12:71:c9:6e:
         69:26:96:21:17:ac:fb:be:30:fc:f8:d3:40:3d:82:5e:bd:9e:
         2e:21:fb:59:b7:c1:44:c0:43:57:ba:be:37:40:6a:6a:92:a2:
         33:64:33:ac:38:d9:5f:d5:3b:07:1a:f8:3c:3a:8b:85:6e:28:
         64:2c:fc:7e:9e:75:84:28:54:a3:ce:78:b6:ea:8f:fc:61:42:
         82:50:74:b7:fb:47:c6:cf:43:02:4e:14:17:e4:34:c5:73:6b:
         52:62:b0:55:fd:3e:c2:34:19:c6:98:72:b1:5e:07:cb:8e:5c:
         7f:97:f5:04:07:23:14:b8:88:ac:37:55:dc:28:53:9f:80:89:
         06:98:95:10:0e:ff:a0:4f:f7:e0:53:3a:dc:68:75:fd:1a:30:
         2b:4f:7d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:02 2024 by rpki-client on console-ams.rpki-client.org