Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File:                     EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier:          hC8svuxGIVM3OQGMQFWpLce+XYWiUvFnJNOZUNEUiT8=
Subject key identifier:   FA:00:C4:11:DF:15:46:6D:7F:DF:D0:D9:8B:59:26:34:4C:89:8C:06
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer:       /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial:       01901E90250BFD3397717D082D978C4FDE30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number:          0B2B
Signing time:             Sun 16 Jun 2024 01:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:21 +0000
Files and hashes:         1: DaQa9vXgPUCcf-UShgKzEytlwo8.roa (hash: SjpgCU1d8WEZsmFQ3kOh5ASWP+5viK3yZIESqS6e0Mc=)
                          2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: YnpCs/BEu0j7h7EufF83IK43LTXaCKGKzaQIdMpLp2g=)
                          3: c6ia2iFL7Zt6oVmiYJQ9U4qB8cQ.roa (hash: 8q2b6ZA1IVhLzu27q2etWFpye27ilB7/sw6WEw6ddoA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:25:0b:fd:33:97:71:7d:08:2d:97:8c:4f:de:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
        Validity
            Not Before: Jun 16 01:01:21 2024 GMT
            Not After : Jun 17 01:01:21 2024 GMT
        Subject: CN=fa00c411df15466d7fdfd0d98b5926344c898c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:63:00:37:9a:12:5b:d7:18:0b:cc:54:c2:
                    eb:98:58:1e:98:bb:bc:0a:96:5f:02:66:98:50:d1:
                    c3:cb:37:78:c5:8a:b9:44:4c:0f:7d:21:2f:24:f7:
                    9b:c4:5e:e0:1d:a6:dc:b9:05:02:85:c9:e0:5d:3d:
                    bd:ba:73:57:b7:e8:95:05:2d:b2:b0:78:ae:b9:4e:
                    7f:94:14:34:a7:6b:27:55:bb:24:98:4f:8a:73:1f:
                    e7:01:1b:ec:dd:b1:a2:6d:8f:9f:e4:52:44:a5:59:
                    52:5e:52:61:ac:c2:11:a7:5e:61:a1:69:14:b0:eb:
                    3d:0e:90:d0:c2:93:b5:eb:09:e3:ea:08:f3:2d:6f:
                    d6:9a:6d:dd:5f:49:05:70:8c:ad:04:99:5c:5c:ae:
                    c7:cb:76:d2:71:91:15:c9:0b:fb:46:7d:8b:af:ad:
                    1b:75:67:1e:cc:b3:cc:e2:ad:e6:82:2e:2a:50:7d:
                    13:43:4c:27:ed:ae:f4:3e:eb:67:82:95:c0:e0:df:
                    58:8b:14:42:86:a5:d9:43:25:a9:c5:00:76:b0:8d:
                    3c:22:bd:ac:bf:32:a6:7d:ad:5a:ec:1f:f3:4a:ea:
                    dd:0e:c6:11:03:91:71:a4:bc:ce:df:89:17:0c:66:
                    80:25:4d:24:a1:dc:07:62:7b:d5:23:e4:12:53:bf:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:C4:11:DF:15:46:6D:7F:DF:D0:D9:8B:59:26:34:4C:89:8C:06
            X509v3 Authority Key Identifier:
                keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:64:3b:2b:2c:b2:d3:18:df:bf:66:32:d7:7d:f2:5d:5a:
         37:63:89:b2:c8:8c:85:6b:f1:07:12:e5:ca:1f:14:2b:b7:67:
         05:2a:69:ef:e5:14:a1:be:52:25:5d:86:a9:2a:0d:01:63:9a:
         e3:57:ee:ca:a8:90:cf:14:3c:b4:99:0b:c3:cc:e2:be:af:48:
         f0:2d:62:b9:2a:0e:11:46:89:6a:4a:0d:1a:26:ba:4f:bd:07:
         bd:93:ac:54:f0:fa:53:ad:89:d7:45:fe:b9:e9:3e:3b:e0:c1:
         32:c5:ac:3d:10:27:bf:5d:39:76:43:a8:77:88:70:59:c2:8f:
         5f:78:c0:4f:28:03:d0:2a:85:b6:7f:c2:8b:b9:97:19:d2:d1:
         8c:79:cb:08:8a:cc:5b:2f:37:ef:39:38:54:06:ed:03:ac:7d:
         24:c2:0c:34:6e:dd:25:ac:5f:7e:8a:14:5f:2f:6a:5e:70:aa:
         ed:e7:5d:80:65:65:27:3b:e4:c5:4a:06:bf:47:6f:94:75:bd:
         f4:ae:b8:f9:74:3f:85:59:f3:9f:02:57:8e:dd:50:f9:1a:50:
         b7:28:d1:64:99:91:77:ac:e5:65:b3:31:05:4f:d7:f0:61:61:
         82:41:83:52:45:f2:36:43:39:43:b5:6d:ce:36:b6:d6:59:ba:
         aa:78:5e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:09 2024 by rpki-client on console-fra.rpki-client.org