Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
File:                     2EPxqgSY2E95UyPB_2uuOvQCBtE.mft (raw, json)
Hash identifier:          T6rAa8qTvJKgo+QM2nE352eBfoLy1BU79PWP/wX3ej4=
Subject key identifier:   AB:C5:EC:F1:4C:60:2F:B5:CF:40:64:99:87:8A:97:DC:08:2D:32:82
Authority key identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
Certificate issuer:       /CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Certificate serial:       018F4A21D6C3700C4599F080495D175BCBF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 19:01:22 +0000
Manifest this update:     Sun 05 May 2024 19:01:22 +0000
Manifest next update:     Mon 06 May 2024 19:01:22 +0000
Files and hashes:         1: 2EPxqgSY2E95UyPB_2uuOvQCBtE.crl (hash: mV+cXVdy/vo7Zs4zzaZEe1lAlBaqSHn+vIuqdasUhYo=)
                          2: xfklWPccq07hGEXg7TlS-PEm7TY.roa (hash: dkyLEMb8YMytuJxEOC8Tvk+ZVoYaGttDD7a4tKtP3XU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:21:d6:c3:70:0c:45:99:f0:80:49:5d:17:5b:cb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
        Validity
            Not Before: May  5 19:01:22 2024 GMT
            Not After : May  6 19:01:22 2024 GMT
        Subject: CN=abc5ecf14c602fb5cf406499878a97dc082d3282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:25:28:13:88:2d:ee:1a:cd:a8:af:43:da:
                    2d:e7:94:dc:8b:ce:62:55:a8:42:73:f8:54:7d:55:
                    fa:b6:d8:45:3b:e5:1b:51:aa:48:30:32:9c:ba:2b:
                    52:46:42:07:17:25:e4:24:19:31:36:aa:41:8e:12:
                    47:4b:70:98:bb:15:5a:f0:77:fd:64:77:fb:04:a4:
                    bd:12:69:d6:a5:33:11:4e:2f:99:4b:b0:c0:79:9a:
                    97:39:95:e9:d6:fd:b9:4d:be:39:95:57:a4:e9:27:
                    1c:49:ab:b2:cf:27:bf:06:ef:80:0f:a2:5e:21:a3:
                    23:0e:0a:26:17:67:93:cc:8a:b7:70:e4:bb:ec:57:
                    3b:4f:c5:c5:2e:f2:3d:5c:e9:72:9a:81:fd:2c:69:
                    57:e9:35:d0:15:e1:e3:d5:41:98:70:4c:d7:9b:f6:
                    24:b7:83:ef:35:b8:e7:37:a7:f5:47:9d:76:0c:64:
                    5f:04:cf:5e:62:e7:ca:72:3a:b1:6f:ed:8a:2a:99:
                    68:b4:9d:26:e4:f9:da:62:05:a5:17:80:ca:8f:98:
                    2f:6c:24:16:02:78:13:3e:8a:6d:02:50:7a:55:b6:
                    ec:32:bf:8f:9f:29:29:b2:12:bd:71:1d:71:2a:6f:
                    ba:17:77:d9:40:86:e3:f3:97:28:98:30:dc:7e:05:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C5:EC:F1:4C:60:2F:B5:CF:40:64:99:87:8A:97:DC:08:2D:32:82
            X509v3 Authority Key Identifier:
                keyid:D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:85:cf:de:1c:50:59:d6:55:ec:62:12:a4:97:9e:b6:d1:cb:
         4e:e0:bc:e7:8d:31:5b:46:b2:18:0d:4d:5e:cd:fa:84:a8:70:
         5d:16:55:9b:c7:f7:95:7c:5e:c4:7f:4b:9e:de:21:b3:78:47:
         c5:02:3f:36:22:e0:4a:6f:c8:b3:5d:ea:a9:3e:78:2f:10:4d:
         8e:ba:86:1b:ea:6b:70:7f:c2:ad:6f:99:10:41:19:62:29:97:
         6b:e0:05:b0:33:28:71:e4:4c:6f:9d:08:13:00:c3:87:41:14:
         89:c8:86:81:6b:43:08:28:6d:43:5c:81:32:64:45:ef:ed:52:
         19:27:56:0f:f1:34:a8:c3:5e:6b:11:ca:f0:21:b2:4a:5a:2a:
         d1:aa:a3:e0:d1:e8:61:07:e1:9e:53:3d:9c:db:7d:f3:1f:93:
         d6:68:35:90:a2:2a:41:2a:8b:ef:6d:2b:c3:41:b8:5e:5a:8e:
         dd:19:58:44:76:ac:fd:31:28:4f:4c:71:1e:6d:15:78:14:e2:
         8b:0f:73:a4:3a:f1:03:b4:d4:9d:a2:da:88:5d:35:0f:22:de:
         44:c1:fa:41:30:2d:ae:e6:b0:32:a2:1d:00:0a:19:d4:68:7c:
         69:bd:44:42:bc:3a:92:68:c1:be:ac:a2:2f:32:23:5d:4a:21:
         82:3d:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:53:21 2024 by rpki-client on console-ams.rpki-client.org