Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File:                     58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier:          jgyKKhAb3ProAtt7KDneh0eeaqFZ85h+dNI6goENl58=
Subject key identifier:   70:2F:86:6D:0E:8E:13:C4:1D:2E:DC:6F:F8:F2:61:E9:F1:AA:6D:39
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer:       /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial:       018F5248DBF2DC0B1C1D563BAD02C887A1E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number:          0B57
Signing time:             Tue 07 May 2024 09:00:57 +0000
Manifest this update:     Tue 07 May 2024 09:00:57 +0000
Manifest next update:     Wed 08 May 2024 09:00:57 +0000
Files and hashes:         1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: AWcOeIVrS/wEHJG7NSVNil4SPcFjd1LN+ee3QvopODE=)
                          2: dJuSwKiZbJok10zLVuKCHHLu1UA.roa (hash: xZCS6cqG7yaNArASqZS61QkkKK1qjik9Rfsy182svMg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:48:db:f2:dc:0b:1c:1d:56:3b:ad:02:c8:87:a1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
        Validity
            Not Before: May  7 09:00:57 2024 GMT
            Not After : May  8 09:00:57 2024 GMT
        Subject: CN=702f866d0e8e13c41d2edc6ff8f261e9f1aa6d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:02:d3:9f:e5:c2:51:9c:e7:7f:0a:02:1d:
                    85:bd:6b:e7:03:32:3f:d9:3e:1a:c7:06:17:d0:3f:
                    24:0e:69:3f:d4:1d:51:ba:83:48:4d:a1:8b:3d:4c:
                    33:db:36:c4:72:01:e2:a1:d6:4d:65:ff:d3:1e:7c:
                    3a:88:99:7c:2b:2a:c9:e2:ce:4c:47:ac:db:cc:a8:
                    0e:b0:c0:6f:85:ed:53:2e:14:1e:53:66:d6:a2:7d:
                    03:33:54:33:09:6d:d1:00:f2:6b:1e:cd:92:be:6f:
                    35:af:2a:f2:54:4b:8b:73:41:4b:29:d2:aa:8a:22:
                    0d:a4:48:75:fd:ce:a0:02:6e:89:b8:18:37:d3:c1:
                    4c:f0:5c:bb:2b:0e:28:aa:68:59:68:ad:39:77:ab:
                    0f:5f:37:df:5c:ea:25:6b:cf:2e:bb:04:ff:e5:4b:
                    bf:24:96:1c:60:e0:e5:2c:66:51:18:44:6b:0b:37:
                    18:82:e9:38:32:0a:a3:25:5f:b5:95:60:7a:65:51:
                    99:8d:f6:70:2d:dc:80:f0:ad:f2:0d:4a:98:59:b4:
                    4c:c6:66:50:32:39:4a:69:c5:58:bc:57:31:42:ea:
                    7f:c1:92:bb:8b:87:35:ab:55:68:18:6c:77:be:be:
                    fd:0a:3d:57:b4:9d:11:27:c9:5d:d8:2d:0e:30:61:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2F:86:6D:0E:8E:13:C4:1D:2E:DC:6F:F8:F2:61:E9:F1:AA:6D:39
            X509v3 Authority Key Identifier:
                keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:f7:69:a1:c5:91:43:d0:8e:96:f5:75:2d:f0:f0:54:e8:e8:
         55:3c:e5:70:f6:f2:76:35:a0:48:8a:30:7b:5d:36:09:37:b6:
         1d:98:dc:3a:37:60:e8:b7:1b:d5:fd:23:ec:ca:66:03:59:4f:
         dc:5f:6e:4e:11:7e:40:2a:a9:d7:b1:b7:d3:53:ee:0c:85:ec:
         66:8d:27:26:a9:0f:18:0e:31:79:8d:75:8f:d8:93:85:49:d0:
         97:c2:34:09:41:d0:12:71:cf:1b:7b:94:94:f6:1c:dd:0b:34:
         53:22:84:04:1a:22:fc:18:52:e7:1e:17:7a:7a:a8:1c:c1:13:
         49:7b:6e:49:8c:4b:2d:28:77:c5:ff:d0:d0:8d:46:9c:e1:1a:
         2a:94:ef:96:3a:43:02:82:4d:01:c9:9f:89:8a:5a:95:ec:c2:
         74:d6:9a:cf:86:b5:f1:0d:d1:af:8e:7b:31:fd:c9:d4:ed:dd:
         b7:13:64:42:f1:34:0b:1c:d9:65:94:c4:b8:da:21:a3:0e:ec:
         e5:de:31:70:58:fd:91:a6:fb:3b:cb:b1:9a:b2:1f:6b:a3:a4:
         63:5a:eb:e5:c1:4e:8f:32:38:3a:36:f8:28:89:4e:22:08:f0:
         ab:1a:09:8b:05:93:3c:39:14:f9:56:13:da:82:38:09:3e:89:
         1f:70:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:06:13 2024 by rpki-client on console-fra.rpki-client.org