Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File:                     ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier:          5NPg4wumyDIZ0+clScM1S8q1e3KMqjTOdSim9mZUBso=
Subject key identifier:   19:DE:CD:4D:E3:A5:74:B6:C2:EB:FF:E7:36:8B:27:78:BB:9F:EC:C5
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer:       /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial:       018F874B689327A05E07EDD96DD79632862E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number:          1039
Signing time:             Fri 17 May 2024 16:03:37 +0000
Manifest this update:     Fri 17 May 2024 16:03:37 +0000
Manifest next update:     Sat 18 May 2024 16:03:37 +0000
Files and hashes:         1: ITudsTKzE8Ch01CdscC119vlVSQ.roa (hash: j+fNxXztUqjZvxzntn6KSLSoRnZOFPOjo6b3CVJ6x1c=)
                          2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: uOzGzizeFGACBOY3+4iEQNYtPuHfDQcJMwqFQTKwLMg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:68:93:27:a0:5e:07:ed:d9:6d:d7:96:32:86:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
        Validity
            Not Before: May 17 16:03:37 2024 GMT
            Not After : May 18 16:03:37 2024 GMT
        Subject: CN=19decd4de3a574b6c2ebffe7368b2778bb9fecc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:a9:b7:ba:12:9b:11:8a:29:51:c9:99:45:
                    ea:ef:39:20:00:74:81:31:f1:10:96:68:ed:f8:1b:
                    a3:68:57:c0:ed:bd:f8:67:1b:24:6d:7b:3b:5b:13:
                    c8:a3:b4:66:4e:a2:36:1d:6e:6e:c9:11:fd:41:69:
                    95:ce:90:b0:fb:55:db:78:49:b9:4d:c2:70:cf:5b:
                    91:58:a9:4e:03:11:db:83:48:a7:51:87:07:74:f4:
                    56:3a:ca:1b:97:47:d1:7f:2a:bb:c3:e5:cb:5f:ba:
                    c8:d1:bf:54:5f:41:64:da:35:87:23:f8:80:4e:a5:
                    bb:f8:52:39:f2:40:30:75:a8:21:67:9f:59:f1:85:
                    0b:19:fb:01:85:50:50:ac:75:9f:15:c8:f6:37:5a:
                    51:66:1c:4b:26:6e:db:0e:53:85:16:60:01:ae:3e:
                    c6:8d:df:23:76:15:3f:03:6d:b9:20:f4:ed:d3:6d:
                    95:8e:90:ea:0b:d2:a7:df:2e:1f:d1:fc:9a:4f:37:
                    19:c3:ae:36:4b:b3:30:c5:0b:ea:00:8b:e1:f5:12:
                    aa:14:82:40:6e:26:a2:d8:86:a9:91:d1:6a:45:8e:
                    56:82:af:d5:d1:24:54:9f:39:de:38:61:76:20:5e:
                    c0:79:5b:b6:ee:f3:a8:a9:1a:cd:cd:fe:9d:51:97:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DE:CD:4D:E3:A5:74:B6:C2:EB:FF:E7:36:8B:27:78:BB:9F:EC:C5
            X509v3 Authority Key Identifier:
                keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:cc:09:1c:41:65:24:1d:17:f2:4f:34:5e:d4:65:12:d0:
         59:f8:4a:02:a0:47:17:7f:5f:ee:79:c7:cd:a7:e9:70:04:6a:
         f8:a7:81:14:38:b4:8c:0c:48:8d:1c:8c:4f:c4:9e:90:dd:50:
         c3:de:3d:7a:94:8f:c8:ed:d2:ae:78:4f:9f:37:98:01:89:0c:
         87:87:48:46:46:c6:7d:2d:4b:1d:ed:53:3b:ed:66:1a:d6:4b:
         c9:14:fe:cd:d4:c8:8f:79:ce:cd:35:3c:de:80:d0:6c:d9:a6:
         c1:33:db:be:40:00:7d:f2:9d:7a:6c:ec:41:3b:9a:7a:22:5b:
         2b:06:27:28:7e:c2:9a:3b:84:86:80:82:03:9d:f9:05:2b:3b:
         9c:a4:06:98:42:57:c1:3b:29:17:5a:0c:5d:bf:5c:98:ec:4b:
         53:00:fd:86:66:05:80:4e:6e:8c:21:e8:71:ef:ea:3d:ae:9c:
         2d:b8:3a:64:2c:32:19:d5:10:75:02:94:30:96:4e:2c:66:6c:
         6d:09:e0:de:56:38:92:40:65:a6:c5:96:32:d2:2c:3e:c3:9d:
         d5:49:57:37:5e:8b:bf:32:b9:f5:2d:68:bb:44:ca:a5:fa:7f:
         be:1a:4a:48:01:f2:50:40:27:be:ce:bb:fb:e1:7a:b7:1a:c4:
         d8:bd:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:50 2024 by rpki-client on console-fra.rpki-client.org