Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File:                     e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier:          5w9JdO+joOP/3kjknCNDzvtuSqYcdgLDIKB4/6JEzp4=
Subject key identifier:   0A:26:45:F0:D4:B8:99:AE:A1:24:DF:8F:59:78:82:BE:29:AB:32:26
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer:       /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial:       018F8748B49377E34A6DD70C35365D3F503C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:00:39 +0000
Manifest this update:     Fri 17 May 2024 16:00:39 +0000
Manifest next update:     Sat 18 May 2024 16:00:39 +0000
Files and hashes:         1: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: a/pZ8SiRs4xY34SKW6jSpZ7qrKZ1nW7ePtrbX+1EUHA=)
                          2: kze9CQHfzyuEdnS6x6qJfxs0f6I.roa (hash: KqCGfxuYVOcp7TRC3mLJ/E5Sq2KuWPjHE3lj6pnJDJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:b4:93:77:e3:4a:6d:d7:0c:35:36:5d:3f:50:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
        Validity
            Not Before: May 17 16:00:39 2024 GMT
            Not After : May 18 16:00:39 2024 GMT
        Subject: CN=0a2645f0d4b899aea124df8f597882be29ab3226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:83:53:ea:71:07:03:32:ec:c6:d8:8c:99:
                    83:be:12:d4:93:d5:00:8d:b2:f3:dc:bf:d9:9b:65:
                    04:e1:b3:7f:15:e0:90:83:8e:ae:16:ea:9b:23:ba:
                    40:f9:b7:70:12:cd:36:63:8e:df:54:c6:a4:46:41:
                    9b:b0:0b:b9:d0:43:6d:32:07:1c:6a:ff:51:d9:74:
                    d1:29:d3:85:46:54:1d:22:40:a9:38:12:db:c8:8e:
                    21:24:0a:49:be:ad:8a:f8:0e:12:97:1b:eb:9a:8f:
                    d0:e2:4d:c0:77:1f:d5:67:bd:0c:6e:6a:40:79:ca:
                    a8:2d:09:a0:66:52:e8:a8:e7:c1:f0:73:2c:c0:2b:
                    3b:ca:ea:02:f3:5e:e6:ea:ea:01:86:c2:08:69:0e:
                    6d:2b:41:21:22:f7:ef:42:41:e4:31:99:e8:18:58:
                    1e:93:94:36:be:b0:60:92:6a:fc:fc:21:66:e8:a8:
                    4a:fd:2f:98:79:5e:22:b0:ae:89:98:0f:ef:45:28:
                    a1:66:bc:89:26:be:b4:ae:26:21:4f:a1:b9:97:c2:
                    37:18:4c:07:6d:99:8f:1d:29:5c:4e:cc:e0:1e:63:
                    d2:82:1c:20:47:54:93:df:1f:fb:18:5b:ba:b9:a1:
                    61:83:24:48:cb:f0:31:5f:ec:93:05:44:26:ff:41:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:26:45:F0:D4:B8:99:AE:A1:24:DF:8F:59:78:82:BE:29:AB:32:26
            X509v3 Authority Key Identifier:
                keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:58:61:11:3b:be:47:8c:a8:9b:a2:b5:26:08:f4:1d:30:
         bf:7d:a0:bd:51:f3:94:21:ab:d8:bf:d1:ad:74:d1:ad:5a:d9:
         55:e5:3a:35:8a:a8:09:11:47:88:f0:cb:98:5b:cc:38:ca:ab:
         d2:b4:82:e7:5d:73:a5:54:ac:79:a3:72:b0:19:c2:86:79:34:
         d8:ea:8d:d2:95:b0:8a:6f:34:7d:12:e5:fb:31:a2:96:da:07:
         81:b5:e1:7e:86:c2:fa:6c:ff:2e:06:8e:7e:48:55:75:39:e7:
         d7:1b:ec:04:02:34:c5:72:66:11:2b:ae:93:75:a1:37:f9:e8:
         e8:88:fe:b9:91:d8:ce:a4:91:7e:7c:a2:23:c1:ba:ee:21:7a:
         17:f1:a8:7d:d4:06:00:dd:5d:60:ac:0b:0b:ea:55:26:f0:16:
         4a:8b:8e:11:5b:c4:54:b6:59:c6:09:97:6d:1f:b3:fd:0c:3a:
         4c:61:55:05:70:15:d9:03:fb:0b:ec:d1:24:12:a7:bc:2f:d1:
         12:70:06:e0:d0:58:e5:8f:fa:c6:7e:12:32:c2:02:51:bc:4e:
         f5:1b:01:7f:9a:8b:9d:e0:44:a0:0c:ec:ad:12:a1:99:54:13:
         95:95:ed:e7:eb:94:e5:12:08:2a:9e:7f:78:25:0e:61:17:ba:
         96:e3:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:23 2024 by rpki-client on console-fra.rpki-client.org