Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File:                     l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier:          psEz0j0lGgzd+06fxyVIg2aylLhmOCbPnBIf7abvIxw=
Subject key identifier:   9A:4E:7E:FD:A5:42:D6:9B:59:88:76:E6:51:55:0A:A4:23:50:E5:DF
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer:       /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial:       018F882457DB525868D3A3723D7CD4163B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:34 +0000
Manifest this update:     Fri 17 May 2024 20:00:34 +0000
Manifest next update:     Sat 18 May 2024 20:00:34 +0000
Files and hashes:         1: GOtGG8MI3wI2tqr9Qs6V3TiKJ_A.roa (hash: wSgpFTsC2Wn6auwndvrxVh77/O9CW8dimjIB2kxZkt8=)
                          2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: OezS9LUOv3MjgS4WesIc0pQJlbgd5tk/xSz4D0iQtzE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:57:db:52:58:68:d3:a3:72:3d:7c:d4:16:3b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
        Validity
            Not Before: May 17 20:00:34 2024 GMT
            Not After : May 18 20:00:34 2024 GMT
        Subject: CN=9a4e7efda542d69b598876e651550aa42350e5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:84:ed:e3:9b:51:f2:05:47:65:f1:92:77:
                    13:e3:7b:d9:6e:54:64:9f:3d:58:5a:88:d5:7a:7c:
                    90:32:fa:95:34:ec:de:52:53:ee:fd:66:84:eb:28:
                    ec:4d:5d:9e:f1:a4:21:92:a1:76:0c:1b:43:8f:42:
                    c7:af:b2:60:f2:c7:b4:26:31:8c:b0:b0:f7:7f:8d:
                    b6:d9:43:34:3f:0f:5e:aa:13:65:c8:a2:9d:a1:d9:
                    e0:07:e1:8f:d7:60:8a:6e:f3:13:82:69:a8:9f:06:
                    e0:0f:56:be:05:f3:26:c1:7c:b0:2d:d1:e8:c6:af:
                    95:83:83:06:c2:de:98:d6:fa:1e:08:45:45:30:0a:
                    f3:83:12:f9:ed:b4:da:10:f5:d2:61:10:45:a8:be:
                    70:63:ed:79:74:8e:6c:d3:0f:78:77:41:9c:5a:33:
                    d2:f2:73:58:c1:84:ee:d1:b4:49:99:34:5a:95:c6:
                    bc:97:d7:57:38:de:98:90:df:b5:41:f5:c5:27:27:
                    22:d4:2e:86:8a:bc:05:93:3b:11:23:4c:42:c6:ba:
                    24:e7:3c:d9:02:12:ff:fa:86:d8:4b:60:2c:97:e9:
                    48:28:73:b8:a5:59:ca:d4:b4:a1:b0:79:77:82:2a:
                    8b:0f:87:8b:d2:7c:e8:32:ff:14:7e:f2:e4:a0:7e:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:7E:FD:A5:42:D6:9B:59:88:76:E6:51:55:0A:A4:23:50:E5:DF
            X509v3 Authority Key Identifier:
                keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:be:40:bc:66:8c:ba:ee:f5:3e:f7:01:08:a1:31:13:ca:b5:
         2b:9f:e0:05:03:81:77:1e:c3:5a:e0:5c:32:d3:70:40:ed:43:
         33:56:5b:12:d6:a1:5f:9a:f6:48:6a:db:5d:3e:1b:4e:68:4c:
         27:f8:16:ad:7e:7a:21:8f:cc:d6:35:23:ef:23:43:c5:f6:47:
         90:dc:05:07:8e:80:bf:38:2f:ba:4f:a6:16:1e:b4:35:5d:9b:
         4a:f5:41:e2:ba:8f:19:db:15:49:c3:88:7f:d7:ce:23:b0:a7:
         df:69:8b:d1:33:70:73:4b:8e:19:60:28:5a:42:0c:66:47:6d:
         e1:06:cd:a9:8c:3e:9f:34:bd:e6:b5:63:b0:99:bf:cd:79:aa:
         3d:d7:28:e4:53:d4:d6:3c:69:6d:08:98:79:7c:39:8c:0c:ce:
         44:ff:f7:cd:0d:45:2a:e3:fa:ce:b0:94:a2:a3:bc:71:d4:bc:
         de:63:11:29:d9:4a:86:03:a9:b9:34:a2:34:9e:c6:88:2a:73:
         64:af:ed:10:8c:49:95:cb:cf:df:df:3e:c0:73:d2:07:0f:e6:
         2a:1c:4c:ce:19:3c:b5:26:1f:29:a6:99:52:54:e5:6d:5c:df:
         c6:9e:4a:12:6a:6d:66:bf:c4:1e:b2:eb:c2:cf:20:f6:af:df:
         51:d2:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:24 2024 by rpki-client on console-fra.rpki-client.org