Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
File:                     EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft (raw, json)
Hash identifier:          xK5MdjnKNLagR40ZTamujtM9c5jwmb2d4JeW/wYoblo=
Subject key identifier:   72:7C:65:07:B0:A9:50:04:5B:49:8F:A0:10:C2:39:E4:D3:96:1B:65
Authority key identifier: 12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6
Certificate issuer:       /CN=12e70457ebdee594b07144204454706ceaaf6bf6
Certificate serial:       018F96BDE97E067E5DE8BF063FCBC0C0119A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
Manifest number:          028B
Signing time:             Mon 20 May 2024 16:02:59 +0000
Manifest this update:     Mon 20 May 2024 16:02:59 +0000
Manifest next update:     Tue 21 May 2024 16:02:59 +0000
Files and hashes:         1: EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl (hash: pbmzjEsRi5sugcQiCbjR32pVI6HlEsVO1u0GMhqG6+M=)
                          2: _L28wUlSr3MxgFq4SsKFKDzPCUI.roa (hash: EGePfWPdZYm+N2IZtPKCKD6tulpCxgSvZYd6iAXkTIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:e9:7e:06:7e:5d:e8:bf:06:3f:cb:c0:c0:11:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e70457ebdee594b07144204454706ceaaf6bf6
        Validity
            Not Before: May 20 16:02:59 2024 GMT
            Not After : May 21 16:02:59 2024 GMT
        Subject: CN=727c6507b0a950045b498fa010c239e4d3961b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:33:79:07:59:f9:08:b8:63:fc:6f:9d:40:
                    60:44:2b:74:84:ea:a9:b8:f2:9a:4c:8a:04:44:ab:
                    a7:6b:d3:49:76:ee:11:88:a7:36:03:af:59:52:03:
                    8e:16:03:9d:80:55:bd:f7:e3:62:43:80:c5:b4:52:
                    f0:70:87:c6:9f:34:11:4d:6c:77:d3:7a:bd:e8:0c:
                    e9:1d:c9:7e:29:c6:d8:f2:a3:aa:d7:bd:fc:5c:d1:
                    0c:0c:8b:54:45:cb:cb:1f:28:d3:db:f6:c2:b3:c6:
                    42:33:45:57:3d:8d:08:1c:b6:07:2a:bc:3e:78:2b:
                    37:36:e4:d5:97:48:ce:38:b2:e3:be:a5:56:88:6c:
                    81:38:3b:1f:8a:f9:31:76:01:d7:a9:ff:f1:cd:20:
                    5d:b4:12:bf:f2:63:48:2f:92:7c:0a:72:8c:22:5f:
                    e4:90:4a:a6:21:33:ba:6e:f8:08:98:07:fe:df:d0:
                    e3:8c:d2:80:52:c8:0f:c5:4d:e9:04:dd:9b:1f:98:
                    ce:f5:9f:fd:4f:3b:8a:f0:aa:52:90:4b:be:da:82:
                    7a:7c:a0:4b:75:ec:fe:93:d2:d2:87:a9:f6:0a:7e:
                    2d:d9:15:1a:4f:47:06:57:94:c7:a7:00:a3:a3:a9:
                    d2:3e:e9:ce:dc:29:b2:46:7e:03:75:36:7d:ce:c9:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7C:65:07:B0:A9:50:04:5B:49:8F:A0:10:C2:39:E4:D3:96:1B:65
            X509v3 Authority Key Identifier:
                keyid:12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:10:21:f0:ea:36:48:8b:eb:b6:37:c5:e9:c5:6b:d2:ad:45:
         67:ff:d1:9e:92:a6:04:68:04:96:8d:ef:e2:46:35:25:64:81:
         56:b5:b0:90:4b:04:57:04:a4:14:5a:84:3f:3a:79:9e:94:31:
         1d:a6:19:ad:67:a3:58:d8:f4:79:f9:30:dd:59:6c:fa:28:af:
         8c:3a:75:8f:46:1c:56:a1:96:29:44:93:21:e9:93:0b:d8:28:
         1a:cd:02:eb:3e:8d:82:86:3b:f2:d4:68:ac:f7:52:79:ae:89:
         c6:54:9a:ae:31:af:78:d3:08:a5:52:2f:ed:06:9c:f0:5f:c3:
         b7:39:d0:6d:c8:f3:ad:2d:08:c9:7c:71:9f:10:b7:88:0a:35:
         23:91:68:81:73:a2:af:c0:97:69:8f:f1:76:35:af:10:0c:a2:
         b2:d3:34:a2:f8:8c:f9:40:66:b2:95:f1:bd:0a:4c:61:ff:0b:
         b8:e2:33:79:dc:e9:1d:d1:dc:24:cc:46:11:77:29:73:8a:61:
         a6:75:9d:ad:7b:33:ae:ba:f7:d8:50:af:3b:2a:b7:85:15:e3:
         b7:ec:90:e9:5d:c7:75:cb:e3:5e:cf:3b:c9:84:66:a4:00:fb:
         a9:79:c4:d8:74:52:47:98:6c:c5:fc:eb:74:c3:0c:b8:04:5a:
         6c:ca:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:37 2024 by rpki-client on console-ams.rpki-client.org