Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File:                     CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier:          m6bIplZH+H3bpmwdQ7O0q/UghVryXMAHFMeNffiRlxM=
Subject key identifier:   7A:32:0B:F6:9A:01:B7:B3:9C:EB:DA:10:BD:22:D7:CF:69:E8:40:32
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer:       /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial:       018F5392883B33D79DF769AFAB20249730E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number:          0E86
Signing time:             Tue 07 May 2024 15:01:02 +0000
Manifest this update:     Tue 07 May 2024 15:01:02 +0000
Manifest next update:     Wed 08 May 2024 15:01:02 +0000
Files and hashes:         1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: SWe7bPKa8mIHAdsZNBd9c291dYgBkJEmbd6bbGz7G+U=)
                          2: Yn6dSZQ8Zouvxwjl_dCufmvVWpY.roa (hash: 9ozLp5nWMw+TjKqB1ttswlRDo14n6u/So7JgPK4+YK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:92:88:3b:33:d7:9d:f7:69:af:ab:20:24:97:30:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
        Validity
            Not Before: May  7 15:01:02 2024 GMT
            Not After : May  8 15:01:02 2024 GMT
        Subject: CN=7a320bf69a01b7b39cebda10bd22d7cf69e84032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:8f:9b:8e:8e:a6:81:4c:69:13:2d:5f:d1:
                    d1:06:ff:39:96:22:4c:76:d1:39:cd:14:24:21:78:
                    c4:d6:00:fe:b1:7d:29:40:99:d5:6b:4c:6f:92:b2:
                    3a:d6:c8:5a:4b:7e:53:57:c5:12:40:c1:91:3c:3d:
                    1e:8b:99:3b:73:0c:9b:fc:81:81:28:54:5e:67:40:
                    d5:29:19:25:55:0d:64:c9:54:72:dd:ec:e5:7b:fc:
                    f7:42:31:72:22:75:b9:a2:ef:9c:ff:a9:70:dd:9a:
                    92:26:7c:66:23:64:35:30:ae:c1:6d:80:55:b2:43:
                    db:6a:1d:17:ab:c8:3f:4c:10:74:96:af:3f:1a:d4:
                    12:db:7b:27:b5:8f:84:1c:ac:2f:5d:0b:5f:cc:62:
                    9e:17:f1:5b:a9:27:66:cf:5b:6f:5e:ef:57:b4:16:
                    7c:f6:26:5d:0a:21:f2:3f:d5:40:a5:5a:29:b9:cf:
                    dc:1c:16:4d:57:6b:dd:e4:a7:40:fb:d6:2b:d0:35:
                    e9:99:d4:12:71:2c:86:26:c4:21:f2:22:69:5f:e4:
                    f0:17:64:ae:05:36:7c:51:3f:af:5f:93:ee:50:c2:
                    60:a9:2f:fe:1f:37:d9:a0:05:30:77:74:20:26:e7:
                    ad:29:15:7b:08:59:ac:f2:f5:d5:a8:3d:fe:11:0d:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:32:0B:F6:9A:01:B7:B3:9C:EB:DA:10:BD:22:D7:CF:69:E8:40:32
            X509v3 Authority Key Identifier:
                keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:29:8b:50:0e:c5:b4:96:2a:8d:e1:e5:61:47:3c:13:39:e9:
         47:fd:76:49:8e:81:da:07:8f:cd:01:e1:77:ff:08:8a:56:bf:
         c2:e4:2c:ef:8c:4c:47:55:10:ee:6c:ec:88:b0:e9:06:4b:a6:
         69:9f:c7:9c:56:cf:8e:ca:6f:50:db:db:46:42:07:d0:77:6a:
         3e:8e:ea:15:56:a8:50:af:02:dc:ce:a8:b5:b3:a4:47:d5:36:
         81:26:34:bf:f6:a2:99:10:a0:3e:43:2f:55:1a:f9:57:fa:52:
         5b:73:d0:7a:19:c2:b3:d8:48:3c:1b:be:61:79:a2:55:e2:5c:
         19:43:f9:a6:d8:04:03:87:7b:80:af:d3:d2:e0:b0:51:ca:78:
         6a:62:2b:9b:6e:79:b3:71:e1:8a:6a:87:54:54:d5:28:75:cf:
         b4:ef:08:df:98:e8:31:4b:2d:bd:54:63:a7:d4:6e:75:39:63:
         59:e2:d1:ff:d2:a5:06:fe:c4:f0:72:ac:2c:32:15:83:a3:a3:
         40:a4:b7:4d:b7:1b:f7:4d:d3:0c:7c:b4:26:cf:b2:b4:6b:d7:
         c0:a7:4a:b3:7d:f9:d7:ae:a0:b3:bc:c8:05:53:12:1d:38:ee:
         16:d4:ba:4f:a0:1a:15:c1:ae:30:fd:0c:25:1a:9e:9c:99:f0:
         a9:e6:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:05:16 2024 by rpki-client on console-ams.rpki-client.org