Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File:                     EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier:          zhRizCbtABexJEJ2NqK+fRyaco3eSlDYX7TcLBf7dhE=
Subject key identifier:   2C:2F:B0:7F:0B:44:1D:9F:2C:80:7D:47:55:76:85:FA:D3:85:7C:44
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer:       /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial:       018FB8A33DA2082BE4766B246D9BF1BFA312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number:          073E
Signing time:             Mon 27 May 2024 06:00:56 +0000
Manifest this update:     Mon 27 May 2024 06:00:56 +0000
Manifest next update:     Tue 28 May 2024 06:00:56 +0000
Files and hashes:         1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: jQUZzzTv0fGIwvZNcHTiEGhDpEF7cIc6Eqg4m9h7qdA=)
                          2: ZfVJh616KlVb-k1zEovYVZ4_NNM.roa (hash: 6udRXfrnSy9qQCZvxJEhykHnqFl/J035ZJFeYDyJZcA=)
                          3: yCJOTIB5kNiECcJ6GfqzQOMKlnM.roa (hash: cq/yYmr3mpDtIVaMpeZ6JnYxRKFNW2xeMzABJr0Zx1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b8:a3:3d:a2:08:2b:e4:76:6b:24:6d:9b:f1:bf:a3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
        Validity
            Not Before: May 27 06:00:56 2024 GMT
            Not After : May 28 06:00:56 2024 GMT
        Subject: CN=2c2fb07f0b441d9f2c807d47557685fad3857c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:25:0d:36:6d:be:e0:52:35:47:ee:7f:35:
                    17:79:c3:82:b6:68:76:ff:76:60:91:a6:03:d3:b9:
                    96:4b:46:4b:62:58:3f:dd:7f:37:18:90:01:9e:e3:
                    c8:1a:55:28:51:c6:8f:ca:31:5f:8b:7a:ba:e3:89:
                    ff:57:61:7a:28:28:24:74:53:36:63:81:2e:63:61:
                    b3:f1:b6:46:da:a7:86:9a:67:65:54:bd:87:e6:ac:
                    0e:c4:94:a0:77:60:48:ed:af:50:96:8c:49:5a:9d:
                    de:8f:c7:bd:ef:d5:0a:d4:ae:02:6d:55:c7:97:00:
                    89:cd:6d:69:f0:c5:fb:18:59:86:54:73:24:5b:35:
                    58:6b:5c:74:1f:06:35:1a:bd:f8:85:69:3a:c0:73:
                    1e:c4:87:15:5b:f8:b0:96:63:0c:dd:64:c0:05:d0:
                    76:94:8a:f0:f1:13:3d:53:d9:39:aa:ec:df:8b:03:
                    34:71:9a:60:8e:91:dd:86:ed:11:24:05:4b:83:24:
                    8b:08:23:55:1d:9c:c3:84:18:3d:96:90:e2:e0:09:
                    b6:85:81:5f:81:d6:50:96:a7:fd:47:72:69:44:c0:
                    ae:e4:41:ca:56:09:d3:39:1f:4b:3e:41:d7:df:76:
                    7d:11:a1:68:28:c7:6c:d1:4c:61:e3:19:c2:8c:8e:
                    54:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2F:B0:7F:0B:44:1D:9F:2C:80:7D:47:55:76:85:FA:D3:85:7C:44
            X509v3 Authority Key Identifier:
                keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5d:e7:1e:ea:16:ff:9c:67:74:ee:b8:04:f2:4d:da:97:0e:
         75:57:b9:15:90:90:c6:79:6c:04:79:cb:d1:a4:64:0c:1f:8a:
         b0:b4:a5:b9:46:d1:a3:8e:d1:f1:8f:19:4e:d3:88:8a:e4:4b:
         4d:7f:4e:4f:57:03:89:2c:65:15:c8:9b:fc:fa:fe:47:ee:8e:
         bc:0b:8b:71:07:eb:cd:32:7e:67:ff:d2:b6:1f:8d:ff:ab:6e:
         09:17:10:9c:53:64:0f:1d:84:54:98:d1:3c:78:55:a5:52:e4:
         3c:f2:fc:f5:ae:da:90:8d:d3:8a:20:00:37:81:da:65:be:5b:
         55:72:3e:a2:41:ec:32:23:60:16:5f:68:87:3d:5b:4d:5b:30:
         33:55:05:b2:5a:86:67:47:59:49:27:55:bb:7d:03:c4:ff:65:
         3d:c6:13:93:a2:38:06:03:fa:d5:e5:1e:2d:3f:4b:61:46:12:
         8e:71:5b:be:7d:4d:8b:20:41:57:4c:40:4c:ee:06:0a:73:c2:
         67:1c:15:f4:7c:14:6a:45:ca:45:18:40:91:01:3f:b6:49:f1:
         5c:89:e5:8f:d7:6b:13:28:60:c7:4a:e0:9c:e3:58:ca:45:2f:
         9e:5e:f1:ec:92:d2:cb:86:1c:42:a0:98:41:9b:42:a6:36:8e:
         ac:14:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 09:51:51 2024 by rpki-client on console-ams.rpki-client.org