Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File:                     Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier:          xoWYQ5HzWR2oPvogCsyE+5dtSFQcIftYIJMbS67soII=
Subject key identifier:   3A:EA:F2:82:BF:58:26:DA:A0:25:26:35:5F:F2:DF:A4:BF:E3:64:BA
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer:       /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial:       01901E589C8FF7D1B28AAD9607B104A3C907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number:          0890
Signing time:             Sun 16 Jun 2024 00:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:42 +0000
Files and hashes:         1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: wjVtcpez3uVUkOxKCc92iXFKxhU0LLPwxnrHEK6E76c=)
                          2: rFl2kXUprEAzPTzJ6546wAFKP-Y.roa (hash: YcP1JWrrEnRwF7OPFb4Q+WQ8kfYhb9VSA4jjeCj5c4E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:9c:8f:f7:d1:b2:8a:ad:96:07:b1:04:a3:c9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
        Validity
            Not Before: Jun 16 00:00:42 2024 GMT
            Not After : Jun 17 00:00:42 2024 GMT
        Subject: CN=3aeaf282bf5826daa02526355ff2dfa4bfe364ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:d4:fa:8b:d9:5e:9f:d6:07:9d:0c:72:38:
                    1e:b1:8c:c0:b8:53:d3:3b:07:bd:21:63:94:60:93:
                    5e:5a:0f:e8:86:09:23:37:2e:8c:81:81:cc:e4:30:
                    bd:9a:17:c7:2e:d9:9b:46:5e:c1:48:10:e9:09:0c:
                    d7:1c:d4:b5:c1:22:4c:c7:b6:72:54:0b:d6:01:94:
                    c1:6a:96:9b:3e:b7:81:b3:01:d4:4a:b7:a1:39:c4:
                    57:06:96:21:82:28:78:22:f3:0a:85:78:d2:3b:5a:
                    a7:8e:c7:63:c5:a8:9d:18:2c:64:a6:67:e7:7c:e0:
                    6d:c6:1e:3c:80:87:4d:2d:3f:37:12:ac:b4:89:21:
                    cf:7f:00:09:33:51:32:98:bc:dc:30:70:72:26:d1:
                    17:b9:22:29:67:45:a8:94:78:1d:e1:a1:db:b3:b2:
                    a4:6b:f3:9a:81:ff:90:c1:58:eb:e2:0b:4d:a5:1b:
                    8e:94:e8:ec:76:ec:84:ec:b1:62:0f:41:13:8d:ea:
                    a5:60:c7:d0:4f:f6:75:bd:e5:52:5f:0b:3c:53:03:
                    7a:62:2d:9f:66:46:97:11:a5:d5:16:6d:c4:37:5f:
                    bf:34:5f:9e:86:61:eb:74:c7:cf:5c:2b:29:5d:2d:
                    57:d4:5f:45:8a:a4:5e:9b:97:a2:b6:ff:d6:d3:ba:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EA:F2:82:BF:58:26:DA:A0:25:26:35:5F:F2:DF:A4:BF:E3:64:BA
            X509v3 Authority Key Identifier:
                keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:54:22:f2:9b:7c:d8:6e:24:c9:37:64:9c:a7:e6:55:ff:
         7b:36:4c:5a:f6:8e:9e:d8:5a:31:85:cf:ee:9b:41:c8:a3:5f:
         46:0a:8c:6b:4d:42:fb:90:76:f3:d1:27:50:01:2a:3f:2a:73:
         98:e9:4f:89:b4:d2:1b:53:8c:7a:9b:7d:a6:1f:d1:8a:bd:89:
         2f:7d:a5:b0:85:b3:93:07:13:12:4f:12:ee:76:e3:b4:fb:80:
         37:ce:5a:d0:6d:05:4b:c9:15:ca:a8:c2:d1:09:c6:1a:5c:a7:
         54:9b:4d:b8:1f:b2:62:4b:d6:10:98:08:67:ae:87:9a:ff:af:
         64:ec:63:cc:d0:f8:16:cc:6a:d4:07:03:c3:44:e7:be:cc:d5:
         3e:13:ab:74:cd:31:91:de:e6:c0:ff:da:a2:97:0d:35:92:04:
         22:0d:15:c2:e1:3e:57:f5:13:2f:07:82:88:fa:a1:db:80:a6:
         e2:b1:02:da:6d:b6:24:43:7d:51:8f:83:1c:50:b3:fd:ec:14:
         24:3b:72:ee:8e:1e:75:5c:23:46:d8:c5:8d:67:34:f4:13:74:
         08:0e:26:7f:6a:d7:75:a6:0c:16:1c:2b:30:17:e6:85:5a:67:
         d0:d1:f0:16:c0:49:50:0b:ed:88:a8:ac:6d:3d:4c:77:01:2a:
         cf:12:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:45:49 2024 by rpki-client on console-fra.rpki-client.org