Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier:          J9vVaYf1uPdU0dBmhMtgYTxxlWRx4TrGULDYRmnOtEY=
Subject key identifier:   96:FA:17:57:0A:30:29:1C:BB:7A:07:40:39:39:77:16:42:86:F9:A4
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer:       /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial:       018F4A8F976A5CBC44F8914588350D5C6628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number:          0CEE
Signing time:             Sun 05 May 2024 21:01:15 +0000
Manifest this update:     Sun 05 May 2024 21:01:15 +0000
Manifest next update:     Mon 06 May 2024 21:01:15 +0000
Files and hashes:         1: 0q2D2HrXwTqQRdy5Vh03KzJltas.roa (hash: a1pS8B8IHd8tfgUYpzJHAhGkRYG0CmuAXNkuCvQyrj4=)
                          2: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: Dxuk/9aQYGGqoLOwReJSGhtqbgwvWCY/2LvjE9aAVB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:8f:97:6a:5c:bc:44:f8:91:45:88:35:0d:5c:66:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Validity
            Not Before: May  5 21:01:15 2024 GMT
            Not After : May  6 21:01:15 2024 GMT
        Subject: CN=96fa17570a30291cbb7a0740393977164286f9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:a9:0b:2a:86:86:75:03:b5:a6:5e:89:a1:
                    58:36:4b:af:f5:bd:7e:55:29:6b:e0:63:e2:74:fb:
                    db:d2:b2:05:9e:13:b8:a3:cb:15:7b:e4:c3:5f:c0:
                    b6:11:11:75:37:c3:25:a7:83:8e:43:28:fe:e0:77:
                    5a:2c:48:3a:ab:a3:8b:37:e1:d8:d9:e9:30:99:8b:
                    11:5f:6c:1b:27:a7:0a:85:7f:5e:88:a6:c4:b2:cd:
                    e7:12:a3:d3:65:9d:b9:a2:8d:07:7f:c7:c7:87:fb:
                    23:80:5a:a1:58:1c:b8:c5:d8:82:69:47:fa:a3:f6:
                    4f:c2:fc:4f:18:6a:22:26:c5:71:f4:53:e4:3c:15:
                    24:52:04:34:d7:88:59:e7:0e:7b:13:21:d7:9b:03:
                    40:d7:f1:28:37:c7:59:0d:25:94:19:9a:09:92:83:
                    b4:2d:2b:b9:73:b8:09:4d:89:0c:1a:23:63:46:9f:
                    8c:dd:19:49:87:04:7d:18:7f:7e:41:92:66:d2:19:
                    7f:f6:a4:37:77:cb:93:61:ba:39:31:fd:f1:75:e2:
                    c1:a7:a0:4a:4c:10:f0:d1:78:95:46:c6:1a:72:c6:
                    63:ed:9b:6b:20:86:5e:1e:c4:46:37:4b:55:ca:11:
                    dd:14:83:ad:75:38:2e:33:c5:ba:72:1c:49:67:88:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:17:57:0A:30:29:1C:BB:7A:07:40:39:39:77:16:42:86:F9:A4
            X509v3 Authority Key Identifier:
                keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:12:d6:76:3e:3e:54:47:a1:8d:53:25:1e:53:42:a0:81:38:
         ed:9e:ff:4e:4f:a6:bb:8c:37:2b:6a:b7:ca:fc:7d:72:8e:ca:
         01:53:01:e3:a1:d6:cc:25:ba:dd:87:27:10:8f:9e:95:ba:34:
         08:e7:f4:5c:10:05:8a:c0:62:2f:dc:df:11:8c:71:1a:53:ba:
         0b:ab:e2:32:74:75:d0:b2:28:ed:b6:aa:dd:e4:ef:42:69:51:
         0d:aa:2f:b6:46:13:23:96:91:10:84:70:d9:a7:c9:8a:26:97:
         be:d9:2b:69:a4:af:b6:e1:26:be:da:90:82:80:c6:9a:75:23:
         4a:27:1b:a5:9f:97:10:2c:a2:e2:80:41:bd:26:b0:e3:5a:c7:
         f2:e1:23:0b:10:26:c1:7f:6a:93:44:d9:ca:f3:8e:9f:2d:c9:
         28:0a:a2:de:b1:f7:70:a8:2a:c4:9f:9f:37:49:21:d2:75:c7:
         e3:90:c8:f1:a4:3d:55:b9:68:13:1c:c7:9a:f6:eb:a3:b4:a6:
         3d:b1:e8:6f:5f:e4:1b:3b:3a:6f:65:b2:95:40:22:8c:57:88:
         88:a6:41:c1:7f:3f:39:68:c2:bf:60:76:27:a8:c8:56:eb:b7:
         44:45:e1:f8:46:a0:61:fc:1f:04:79:8b:d5:98:a6:ab:2c:df:
         8a:35:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:49:51 2024 by rpki-client on console-ams.rpki-client.org