Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          KG7rKHWEeqD3gzPGw6Cqv3Zwz7is20gI9fW80ak3SQI=
Subject key identifier:   AE:B3:DA:5D:22:1C:ED:6D:BB:81:CC:F5:EC:8B:CA:6D:5E:1B:A6:2F
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       018F8938D41087296BDA3AC87124101CAFC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          0D87
Signing time:             Sat 18 May 2024 01:02:33 +0000
Manifest this update:     Sat 18 May 2024 01:02:33 +0000
Manifest next update:     Sun 19 May 2024 01:02:33 +0000
Files and hashes:         1: GsG6DeYoZXA4jM_DGYJqzcqVH8I.roa (hash: EaE6jecNsmTw30wJhHsSoTc4G/jbx8tQRxPazwvDcpo=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: FOmseM9YuFk0xgQr4DuZJ5fYHNFSEw4ZUdmgfck66o8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:d4:10:87:29:6b:da:3a:c8:71:24:10:1c:af:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: May 18 01:02:33 2024 GMT
            Not After : May 19 01:02:33 2024 GMT
        Subject: CN=aeb3da5d221ced6dbb81ccf5ec8bca6d5e1ba62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:3d:8d:ab:3a:99:e6:70:d9:0b:d7:b9:ef:
                    53:15:0d:92:a5:f7:d5:d8:31:66:1d:80:0c:56:c5:
                    38:9a:2c:5a:5c:2c:19:d9:23:a1:4b:c1:0b:70:5a:
                    26:21:ee:76:d8:3d:19:e2:bc:52:24:2f:7b:3c:c6:
                    8a:75:3b:f8:30:bf:0e:8c:cf:06:b4:a3:53:ad:be:
                    0e:44:f4:00:b1:58:65:f9:92:82:65:2b:06:a9:ae:
                    8e:12:af:16:ce:f7:4a:6a:ff:61:36:b8:d8:74:65:
                    c0:3e:02:c0:c7:e4:20:90:d7:d8:5c:29:7e:c0:99:
                    dd:87:fd:bb:a4:24:ac:2e:92:0e:30:09:d1:7a:c0:
                    5c:51:17:56:5a:f6:a2:8d:b1:28:ea:ed:4c:8e:be:
                    56:8f:e2:3b:9b:9d:28:a7:01:ee:6a:f5:22:b0:4b:
                    d5:27:61:fd:c4:b7:b4:d4:02:fb:eb:8f:e1:bf:13:
                    61:50:b6:f3:de:7e:bb:5c:78:ec:f4:83:af:49:a5:
                    41:9a:1e:60:2f:37:33:aa:b8:c9:22:00:2c:bb:75:
                    4b:d8:ad:f7:d0:c8:00:6f:ea:59:dc:83:0a:7d:56:
                    a6:d4:18:52:26:76:7c:2b:30:02:f5:7c:9e:e7:ae:
                    39:ee:40:da:51:85:1c:8a:39:f4:f9:44:db:c8:dc:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B3:DA:5D:22:1C:ED:6D:BB:81:CC:F5:EC:8B:CA:6D:5E:1B:A6:2F
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:3e:05:72:c5:f9:28:d8:4c:8a:fe:ba:eb:f9:47:7b:15:
         58:83:fb:d9:ef:01:40:77:92:21:86:a0:c3:67:bf:54:7c:12:
         5e:ec:dc:2b:a9:64:50:8a:6f:c3:93:6b:f8:80:09:19:28:8f:
         d7:45:4c:56:7e:c2:46:85:0a:21:44:4a:37:32:e5:10:c9:85:
         ad:49:9a:81:69:a1:8c:69:34:8f:33:41:fe:3c:eb:d5:9f:4f:
         ed:ff:d6:03:9c:45:ae:ff:e2:fe:46:39:b7:a3:51:30:43:3b:
         f6:2d:9c:0b:4c:ad:cd:85:05:74:9b:65:0b:14:3b:19:26:47:
         59:cc:93:a8:ce:e1:e4:8c:ed:52:a6:71:7f:86:f6:ad:9b:1f:
         3b:ae:91:51:6c:64:a3:42:11:d7:5c:15:65:59:b6:cc:c0:65:
         c9:b2:ee:3d:d2:6e:8d:80:70:5f:a8:22:4f:49:be:b4:0f:2c:
         6d:e2:5a:fb:a5:df:fb:06:a5:32:7a:69:0e:e3:4c:41:1c:73:
         08:a2:8e:1e:47:d5:23:a7:68:aa:31:c0:46:d2:f5:0d:a6:49:
         f9:da:85:22:7d:2d:98:ab:b3:74:12:e0:6f:f3:6e:02:ef:0a:
         5c:43:ed:7d:6a:f2:ae:5c:76:96:72:fd:b6:c0:3b:0d:56:fa:
         ae:bb:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:01:46 2024 by rpki-client on console-ams.rpki-client.org