Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File:                     EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier:          JXJoX/LgIpYXJGwwwWg88mz8PTvpPD+WmFAK7s2Ldcg=
Subject key identifier:   DE:B3:25:6B:1A:54:7B:6D:45:1E:54:2E:43:7F:B4:15:FA:91:00:B9
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer:       /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial:       01901CA1CA15727F5B76511DC182652992AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number:          046C
Signing time:             Sat 15 Jun 2024 16:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:23 +0000
Files and hashes:         1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: Sdzu+MxChyIn3smmQGDvV23KxkL5LXuCP7OFG2ldKgE=)
                          2: FgL-KOXBLD6aOYzcIdmMq2z0K8o.roa (hash: pew/7t1Fwmit4cZe74ofh61E0oGoIHH6+Iiv7xgFJa8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:ca:15:72:7f:5b:76:51:1d:c1:82:65:29:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
        Validity
            Not Before: Jun 15 16:01:23 2024 GMT
            Not After : Jun 16 16:01:23 2024 GMT
        Subject: CN=deb3256b1a547b6d451e542e437fb415fa9100b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:56:e5:f1:e2:7c:74:1a:ce:00:fe:f7:14:
                    e0:04:c4:d7:b0:4a:d0:a5:50:79:80:20:9a:5d:7c:
                    45:65:9a:a0:0a:e1:39:29:d9:a9:68:08:cc:6f:eb:
                    34:ea:34:e3:17:10:33:e4:d0:a0:83:87:4d:57:9e:
                    bc:e0:45:cf:24:f7:4e:0d:eb:9d:6a:d7:72:62:35:
                    07:10:ec:79:d7:c7:12:62:68:44:7e:e4:57:c8:df:
                    52:73:ff:26:02:fe:4c:31:e0:27:a5:c4:70:c9:bb:
                    0e:3d:6a:d5:31:e8:48:ee:e6:da:8f:db:55:29:d2:
                    84:a7:e7:2b:8a:89:92:c7:a2:58:5c:53:39:0b:e8:
                    a4:ed:7a:fa:09:55:66:7f:6f:23:0f:bf:59:76:d4:
                    43:83:fb:08:50:e3:b1:4c:dd:d2:9c:fc:18:05:17:
                    cd:e2:fd:25:3a:68:b2:51:be:6c:3b:e4:6d:1d:79:
                    01:81:05:02:01:d8:02:c5:24:b2:c7:19:8c:11:ee:
                    7e:02:9b:60:7e:d5:34:be:85:4f:3b:63:f8:d0:59:
                    5e:4b:88:da:bc:09:c3:35:bc:3d:8a:2a:94:9f:49:
                    20:c7:6e:63:f9:d8:83:47:b2:ba:99:61:5a:64:7d:
                    ab:00:3d:41:45:b8:a2:8f:da:00:50:93:7a:f6:45:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B3:25:6B:1A:54:7B:6D:45:1E:54:2E:43:7F:B4:15:FA:91:00:B9
            X509v3 Authority Key Identifier:
                keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f2:76:21:32:bf:a5:b6:e2:84:8e:e0:e9:a9:8b:91:54:02:
         59:81:59:c2:c0:06:a2:4e:5e:22:20:ba:89:5b:80:1b:b6:99:
         4f:6a:28:bd:f0:e9:ec:a1:37:24:4f:7d:f6:5f:0f:d4:48:4e:
         01:02:7c:3c:4a:79:0a:fe:ce:10:29:73:2e:cc:30:82:76:45:
         d3:14:60:7d:88:c0:d0:8b:de:71:56:4e:57:7d:21:66:2a:33:
         53:b2:a7:ad:e3:9a:b1:1a:5e:71:06:02:da:be:a1:20:75:79:
         b3:be:95:b2:5e:46:59:3a:00:bb:fe:c0:40:e5:8e:32:d2:a5:
         ba:cb:da:6b:1a:cf:87:1f:dc:8d:1a:b4:bc:ef:1b:12:f2:78:
         12:f6:ad:0e:ed:e3:5e:2d:71:3c:74:43:49:f9:43:d2:24:6b:
         37:b3:e2:64:db:a4:67:00:13:7e:c1:ac:53:d3:39:58:29:c9:
         75:36:1d:c6:6a:24:88:82:31:44:e6:be:d1:f7:7d:8f:ee:4d:
         0b:b6:b9:de:a6:63:49:53:9c:87:2d:d9:76:c5:79:af:0a:de:
         88:6e:bd:2e:67:be:1c:62:94:82:41:93:bb:3d:19:54:95:20:
         c7:96:31:72:7e:b1:8d:10:80:9a:e7:99:6f:34:7b:5b:bb:23:
         bf:a7:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:58:02 2024 by rpki-client on console-ams.rpki-client.org