Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
File:                     Ee7NccGT5Kww7QPQufBdoQHGA9I.mft (raw, json)
Hash identifier:          RWTTWvVAYPccSWpcAm27WzEEo/kPnq1UkNmWwjN8Lxw=
Subject key identifier:   CE:80:C0:09:7F:7F:B8:12:B2:2E:FE:60:96:3E:3E:80:C9:F1:E2:65
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Certificate issuer:       /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial:       018F467C2355A3B53EB1D16979A8251C77B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
Manifest number:          0D37
Signing time:             Sun 05 May 2024 02:01:31 +0000
Manifest this update:     Sun 05 May 2024 02:01:31 +0000
Manifest next update:     Mon 06 May 2024 02:01:31 +0000
Files and hashes:         1: 71pKUD58AydOaExs5YStKg5RgYA.roa (hash: 1S/+b+7aBmbBVYSTGcnBdXeC+Nd9OCjLHIlFzBCaweg=)
                          2: Ee7NccGT5Kww7QPQufBdoQHGA9I.crl (hash: CtHUExG5uUPIukT0D+B47sJHXzRi04+kU0xrxeWiVVg=)
                          3: NENTcyirxpS18KWMaJ4ppkv3kkU.roa (hash: aXE49s2ylPFFgLFqGZRGP9jML1Wlh1OaMcSBkwgg5tQ=)
                          4: YGTQFN0IbNuChwGm1BTZVqce7f0.roa (hash: lqRQAVfD8ph7SMfYcv4SfNPbE8/0fynThAZ+U/f55OI=)
                          5: ZBvwiMSSmKdYwMBlolI8rm7h7Uc.roa (hash: ZVrUShls4ZbYpfb6JomHd0hStXLED8WG0rzmBS3BYf8=)
                          6: ePRHgcRts2kLWhc9jJnowDOe2Rw.roa (hash: 57AeA9tDBXLpDPHA2vfFanfdsbOeMA3fYU2XrhbNWPw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:23:55:a3:b5:3e:b1:d1:69:79:a8:25:1c:77:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
        Validity
            Not Before: May  5 02:01:31 2024 GMT
            Not After : May  6 02:01:31 2024 GMT
        Subject: CN=ce80c0097f7fb812b22efe60963e3e80c9f1e265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:80:8b:08:e1:27:6d:17:a1:ca:9f:aa:6a:
                    76:61:00:5e:f9:ff:78:a8:53:42:f8:26:ad:ab:ce:
                    33:df:3c:8e:65:9c:87:b5:55:ab:58:ff:43:01:69:
                    0a:8b:e2:89:9a:ce:13:49:45:83:18:42:24:e2:b0:
                    48:f6:2c:d6:c2:6d:e2:e4:fa:c4:a0:15:3c:97:47:
                    e1:8e:a4:28:94:91:61:16:86:e0:67:b8:32:ff:ad:
                    f8:11:5e:0f:9a:b8:fb:2c:88:d1:77:86:3f:91:16:
                    b3:aa:76:ef:72:6e:68:33:97:ca:60:1f:9a:69:2d:
                    6a:d5:f5:96:86:8c:60:06:ea:e8:26:24:84:95:a2:
                    63:72:11:1d:44:b4:c1:61:aa:05:27:62:0c:dc:82:
                    e9:f5:f0:90:ad:10:5f:e2:fa:12:dc:45:f4:03:f6:
                    85:73:73:80:b0:8b:5e:b8:03:30:45:43:fc:83:55:
                    0f:23:e8:27:36:05:fa:ed:cf:1c:ac:7f:d2:e0:3e:
                    12:4f:72:48:6e:e4:31:70:a8:90:ce:9c:11:03:14:
                    cf:11:8c:8f:7f:29:1f:6d:d4:aa:66:52:26:ee:f3:
                    29:23:e0:69:79:30:c7:6c:44:09:ba:e9:ea:f6:84:
                    89:87:33:cd:9d:f9:e0:5f:ac:c2:78:a1:b2:59:22:
                    2b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:80:C0:09:7F:7F:B8:12:B2:2E:FE:60:96:3E:3E:80:C9:F1:E2:65
            X509v3 Authority Key Identifier:
                keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:0a:6a:e8:9f:85:e8:f1:f2:b4:61:44:b1:3a:61:5f:a5:
         d7:9a:97:86:17:6c:ff:d9:53:84:ce:c7:e6:ed:9a:66:4d:c8:
         4d:09:c7:eb:68:62:f0:79:3e:85:e3:94:e7:45:6e:b1:1a:d8:
         ec:b8:ee:d5:e3:ad:80:9f:8f:cb:aa:51:f2:be:01:0e:f2:84:
         5e:ae:a0:88:96:7d:6d:26:7b:70:5e:b4:a6:b6:32:40:e4:90:
         3f:a4:e5:04:02:1c:ce:ef:cb:07:8e:28:47:71:0d:c1:0b:2c:
         92:81:e8:b7:b2:44:c7:95:85:de:49:dd:62:6a:b9:91:b4:10:
         3e:f6:78:cb:8b:a3:60:c8:8b:d9:b0:c4:d3:ac:61:3d:bf:d5:
         c8:f0:7c:d6:26:78:ea:e2:16:cf:3a:e5:8e:bc:05:36:d4:8b:
         3d:4a:09:72:35:7c:c9:a9:22:82:c2:21:a3:44:42:85:44:54:
         f0:7d:9c:db:6c:42:97:d6:bc:db:f9:5e:51:84:0d:41:1c:b5:
         ea:2d:84:f2:db:0f:28:9b:b3:c2:49:9e:20:3c:76:8c:58:a7:
         16:f6:f1:5e:ef:af:81:23:7d:2d:0c:6e:e1:32:2d:38:99:b6:
         7f:56:72:ad:bb:90:e2:f6:25:4e:91:04:5a:94:6f:f7:95:52:
         f2:3a:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:36:52 2024 by rpki-client on console-fra.rpki-client.org