Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          2zLpvT7/KHgY/NzcGN1D8R/1g7IPh0RCxKvmBFTUu40=
Subject key identifier:   3A:C7:08:36:AF:7B:2B:01:93:07:F2:0E:A6:B0:03:BF:DE:3B:BA:C7
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       018F8D164894C7ED528A3201146FF016895C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          0BD7
Signing time:             Sat 18 May 2024 19:03:18 +0000
Manifest this update:     Sat 18 May 2024 19:03:18 +0000
Manifest next update:     Sun 19 May 2024 19:03:18 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: nI/XsfHNiVGiIfIgufMSqKPF9rWQgWlJhc+AWIBL9iU=)
                          2: VJ9uLgdzCh-ZiSlUgXgInuCyqZU.roa (hash: bBqXPzNwoLntgc34ad2/ByE0jGPiq3fUdCzXgTv7DJc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:16:48:94:c7:ed:52:8a:32:01:14:6f:f0:16:89:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: May 18 19:03:18 2024 GMT
            Not After : May 19 19:03:18 2024 GMT
        Subject: CN=3ac70836af7b2b019307f20ea6b003bfde3bbac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:93:38:a2:ef:38:2b:41:c3:4f:94:eb:2c:
                    fe:3d:b3:e1:d2:f6:9e:8d:ae:fa:6a:98:7e:04:f9:
                    70:43:be:96:de:de:5f:f2:89:a1:37:33:4c:44:72:
                    ce:5f:fe:38:45:f3:d7:02:e3:d3:29:f5:d5:73:07:
                    5d:05:f7:64:88:43:ef:55:91:d2:21:77:46:f9:8f:
                    0c:1f:9a:92:f9:3f:af:0f:a5:e6:ac:42:ec:ec:b8:
                    53:f2:8c:74:f0:17:cd:a4:ff:31:57:5f:3a:45:85:
                    2f:00:53:8c:ab:7c:7c:71:2b:38:f5:ef:5d:e2:6c:
                    be:92:e9:7d:44:fb:63:63:8e:13:17:5f:93:18:57:
                    ec:a4:c0:a5:bf:eb:41:3b:0f:48:a3:61:55:ce:3d:
                    32:68:8e:5b:38:71:1f:f6:c0:fd:34:95:72:4a:55:
                    e3:16:81:a7:40:86:e9:3a:df:48:13:12:21:15:d8:
                    37:4b:dc:f9:f6:6c:9a:c4:2a:42:6c:63:19:62:ed:
                    1f:1a:00:20:84:ac:fa:25:c1:ee:d5:ac:9b:c7:17:
                    7d:4b:f4:47:4d:1c:dc:af:b4:99:3e:eb:56:09:24:
                    2a:ad:b6:49:a9:ed:80:9c:1d:cc:a9:b3:b0:58:d9:
                    6f:49:95:af:cb:ea:5e:fe:8b:2e:eb:21:71:78:ea:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C7:08:36:AF:7B:2B:01:93:07:F2:0E:A6:B0:03:BF:DE:3B:BA:C7
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:65:c0:e2:f3:eb:b9:95:38:2a:b5:12:40:85:e0:d7:47:f4:
         b2:fc:d1:0f:9a:3d:22:5e:0a:e1:d4:bc:5b:26:65:fa:98:38:
         43:3c:e0:96:26:d2:ba:00:c6:9d:57:c6:8e:1f:3f:ae:67:b7:
         73:92:8a:7d:5d:29:9b:55:05:a1:2d:9a:14:43:17:87:36:e3:
         02:1f:33:9f:0b:cc:6c:dc:06:18:9b:39:00:21:4d:93:8e:e3:
         58:73:dd:ac:f4:1b:2d:5f:d1:6b:22:0c:c8:b2:79:eb:ff:ed:
         42:5b:d8:46:9e:d0:f7:f7:5e:a9:73:4a:45:13:38:3b:93:a3:
         ba:89:ed:43:50:60:fb:c2:c1:d0:a5:63:2f:cf:43:d2:60:1f:
         ee:b5:69:45:6f:ed:9f:ef:48:d5:4c:3c:66:67:77:aa:c9:7c:
         a7:d7:3a:f7:fb:44:34:bb:86:f4:1c:88:8f:71:b7:e4:e7:bf:
         95:88:c0:cc:af:7d:3d:c6:ff:d1:dc:dc:17:0f:c4:ee:0f:00:
         12:0e:49:f6:56:e7:c8:71:3c:26:ca:23:f1:f2:4e:f8:3d:b7:
         38:92:98:81:a2:d9:ab:59:5a:97:60:d8:b3:01:fa:15:cb:14:
         ab:fc:dc:14:69:7b:a8:ca:c8:c9:dd:c1:75:cd:36:75:52:08:
         3a:67:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:16:49 2024 by rpki-client on console-fra.rpki-client.org