Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File:                     EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier:          qqRmDIGyOeGL9c/W3ot7pP7p8DWYd06X1d/RgFNVypU=
Subject key identifier:   E4:1D:53:90:9D:80:E8:42:DE:E3:9B:FA:07:FF:45:51:FC:1D:A6:59
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer:       /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial:       018FB3B4AD0F568B0123ED3F4AB929B4BCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number:          1193
Signing time:             Sun 26 May 2024 07:01:53 +0000
Manifest this update:     Sun 26 May 2024 07:01:53 +0000
Manifest next update:     Mon 27 May 2024 07:01:53 +0000
Files and hashes:         1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: 3DtPbmrZMgrjTGgJL9jnX8t1VgqiJs41W5kIGo3d9kM=)
                          2: MS5iIWq5h4SxBHuDK4hjP0Mf8V8.roa (hash: aSDEOqf0ZxLZ+SoZtD7LpXiy85gwPlGGNRu5QZUiEg0=)
                          3: Uwsi8j1cBtlrJFTcUQjO7ESINJ8.roa (hash: IzE2au2TDAHEoz7Ce1rnYlHbcAM1Wqv4TE6G2BXPqyc=)
                          4: o6vmPgXTbregULZHFX8KnDS9QW4.roa (hash: pqx5TvJ2he0nk3d3XSgRViqmG2Z4y79dmINwdiP1GaA=)
                          5: pah_5xSv1VGM2Njqc0nehwtz5xE.roa (hash: 1VqNOYd8gsUEsMkjcF9TMAT4XIX0B/vY7N7W879HHKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b4:ad:0f:56:8b:01:23:ed:3f:4a:b9:29:b4:bc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
        Validity
            Not Before: May 26 07:01:53 2024 GMT
            Not After : May 27 07:01:53 2024 GMT
        Subject: CN=e41d53909d80e842dee39bfa07ff4551fc1da659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:24:0f:e8:24:1e:86:c0:f2:df:40:d1:75:
                    af:43:66:22:18:f5:2c:94:f4:c8:97:02:ca:49:1e:
                    0a:79:6d:2f:22:fc:6e:b6:a2:fe:84:88:30:82:71:
                    2d:1e:c7:75:41:e1:9f:a5:38:94:53:11:7e:09:dc:
                    79:e1:c3:0d:a1:62:63:52:a7:c4:ca:8e:4f:67:80:
                    09:46:78:3a:57:9e:01:3a:29:72:ba:d0:fb:a8:77:
                    6f:81:90:83:06:3d:bf:a7:68:04:59:0c:e7:cd:fd:
                    de:2b:f2:60:fd:7f:56:46:9c:b4:51:ed:74:10:e3:
                    2d:7f:80:d0:ce:c3:ff:85:aa:81:f7:d1:93:d7:a0:
                    8b:cc:67:ed:cf:a9:cf:d8:d9:c1:87:60:30:69:aa:
                    94:06:40:55:98:13:f2:8d:03:8c:ff:95:56:10:97:
                    ef:fd:d1:68:7e:34:89:ee:d5:71:5d:e6:a5:42:85:
                    87:61:a5:57:d5:7f:b7:41:89:ac:90:10:d5:a7:37:
                    b9:5b:65:1e:fe:5d:f9:8e:2c:45:b8:11:3f:19:d9:
                    e3:f8:b5:ed:a0:f5:b8:93:76:37:48:dc:8e:2a:f2:
                    18:6c:39:49:1d:2e:7b:0a:c4:9a:e9:c9:11:06:d6:
                    5b:58:9f:8f:10:31:9d:2a:d8:04:e5:0b:77:40:9b:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1D:53:90:9D:80:E8:42:DE:E3:9B:FA:07:FF:45:51:FC:1D:A6:59
            X509v3 Authority Key Identifier:
                keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:87:42:01:54:57:47:40:dc:8f:2e:d4:54:35:67:10:ad:
         2d:0e:86:6a:c5:8c:56:fc:eb:41:12:df:97:db:74:df:78:ea:
         7d:93:06:20:45:94:c7:0e:66:d1:ac:e0:31:33:49:8a:0c:9c:
         23:cd:ac:8f:2a:eb:08:99:80:6a:39:fa:47:3e:ca:3d:6c:43:
         57:39:c5:b2:1c:4c:7a:41:ee:d9:02:d9:4d:a7:10:e3:e7:02:
         3a:b8:c7:88:76:56:d3:fa:3d:ad:d9:b4:82:79:83:68:b8:2f:
         76:a0:81:d4:cb:25:2d:30:4e:f2:f5:56:53:64:c3:cc:58:b4:
         98:26:30:a1:cc:b4:38:6d:d5:3f:60:a4:71:33:f5:89:c3:34:
         0d:ee:17:4a:69:46:9c:62:3e:59:8a:ec:cf:22:ae:07:aa:36:
         c4:71:9c:1c:5c:ce:1a:bf:bb:85:77:e5:15:da:1a:db:86:75:
         56:ff:ad:82:a0:7b:61:83:d0:bf:93:71:1f:e6:90:a3:78:0e:
         87:85:21:1c:97:e5:0d:a6:46:83:02:0b:35:83:a6:f5:70:ab:
         26:ae:1f:a2:9a:da:e2:4c:36:ee:ac:56:b9:8b:2c:04:08:e2:
         6f:5c:b4:96:62:ca:e0:cd:d9:76:39:ad:f9:58:45:bd:b2:30:
         c0:d5:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:19:25 2024 by rpki-client on console-fra.rpki-client.org