Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File:                     7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier:          1LZByUI93kZ4AgV8oa2gJcae1v0aqQlcXCIgxoVSZCk=
Subject key identifier:   59:9D:60:22:C2:F9:B9:6A:46:1F:BF:5F:F6:B9:F8:8C:A0:B6:E5:F4
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer:       /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial:       018FA441568AC3094B9E111B0A5A7439F350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number:          1186
Signing time:             Thu 23 May 2024 07:01:36 +0000
Manifest this update:     Thu 23 May 2024 07:01:36 +0000
Manifest next update:     Fri 24 May 2024 07:01:36 +0000
Files and hashes:         1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: fcj1vIL4g5KF2F4mFNBBlV387EkLAkcj9pNkB2rIrg0=)
                          2: nJ8nX92KD7tMIT9vc1xg_Q4L7Ak.roa (hash: PDcnfd6ylBEVTr20UAehex+Bjeh/URx3LCaxfLFBs70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a4:41:56:8a:c3:09:4b:9e:11:1b:0a:5a:74:39:f3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
        Validity
            Not Before: May 23 07:01:36 2024 GMT
            Not After : May 24 07:01:36 2024 GMT
        Subject: CN=599d6022c2f9b96a461fbf5ff6b9f88ca0b6e5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:7d:32:6a:88:c8:69:02:b9:a9:61:12:6c:
                    cd:12:ac:de:00:18:4a:94:f9:c1:ee:dd:ec:0a:04:
                    09:6f:ee:5e:49:df:aa:1c:20:d5:86:75:f8:4d:34:
                    0b:f7:a5:ca:e5:1f:b9:c9:43:05:92:d0:17:ec:a3:
                    a6:1b:51:7f:13:13:10:13:03:cf:76:ee:ba:d2:14:
                    6c:1c:39:2b:08:6d:8c:3e:c0:57:48:5b:27:7f:e4:
                    aa:11:93:f2:bc:f0:1f:1b:2c:7b:44:be:70:0a:6c:
                    35:55:a0:a3:f1:95:c1:f1:73:f4:fd:59:7f:6e:a8:
                    5f:89:1d:2b:5a:97:37:0b:49:b0:b5:18:ce:6e:aa:
                    ab:f7:e2:d4:95:bc:27:c2:f5:b0:e8:93:a9:76:81:
                    b1:da:5d:25:39:ea:74:c4:af:fa:38:a4:45:94:73:
                    ac:bf:69:e8:2a:18:f3:9e:37:a3:5f:ae:2d:78:10:
                    fc:ba:13:d1:fd:c7:06:a9:bc:dd:09:6a:3b:e0:33:
                    4d:dd:da:cf:60:d2:8a:10:45:21:4b:31:8e:f0:ab:
                    0d:2f:28:88:17:c2:07:55:f6:bf:90:77:c0:2a:40:
                    aa:46:43:9c:c9:c9:d7:31:ee:d1:e5:13:de:a0:72:
                    69:c5:dd:5c:3e:91:57:7c:a0:0f:77:2e:4e:b1:55:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9D:60:22:C2:F9:B9:6A:46:1F:BF:5F:F6:B9:F8:8C:A0:B6:E5:F4
            X509v3 Authority Key Identifier:
                keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:68:ad:80:6a:21:b6:fd:a9:30:25:9a:6a:27:90:0d:98:
         b9:da:ba:a1:84:15:29:a7:d1:97:a0:8a:68:00:6c:10:82:c7:
         6b:77:76:fe:b0:47:98:9a:1a:7b:f1:85:0a:49:cc:3e:5e:00:
         be:43:64:9b:e4:c5:e1:4e:ec:a8:68:9b:2b:24:ba:26:c9:31:
         6c:92:f2:8d:cd:8d:5d:68:70:78:aa:72:69:f3:2d:11:dc:2e:
         c2:4a:6d:9b:f1:51:72:fd:f3:17:1c:ae:e9:0e:03:70:4b:fa:
         ca:57:94:51:fe:83:9b:0a:ec:fa:12:22:0f:38:44:29:82:1d:
         ff:95:4e:9c:54:91:79:e1:19:92:fa:e7:72:f7:24:5b:5a:c7:
         f2:76:e9:6d:4e:06:eb:44:78:c1:ab:54:ac:9b:1e:ca:aa:0d:
         57:c3:a8:f2:d5:c5:61:52:27:c5:b8:a7:ff:b9:23:ac:83:38:
         ed:b9:5e:54:db:75:16:c8:2c:a2:5e:59:6a:9f:96:09:0e:fc:
         3b:b1:af:67:c1:3c:7f:b7:54:de:16:b2:ff:11:22:56:95:9f:
         80:3b:23:36:b2:73:42:9c:bf:1c:38:d8:e0:e1:b7:b0:60:af:
         b9:20:f7:58:ed:37:e4:01:03:55:0f:6e:a2:21:39:e5:82:a1:
         5f:ad:76:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 14:53:36 2024 by rpki-client on console-fra.rpki-client.org