Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File:                     0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier:          puENQYJHRY/bFV8oxm/q7bDyrBSlTvw3lBoypayoQdo=
Subject key identifier:   AA:98:53:3C:B9:54:3C:25:A9:FB:49:6E:DF:A6:79:26:F2:A4:CE:C9
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer:       /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial:       018F532621FFC0E64498D348B8201A106C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number:          0A0E
Signing time:             Tue 07 May 2024 13:02:38 +0000
Manifest this update:     Tue 07 May 2024 13:02:38 +0000
Manifest next update:     Wed 08 May 2024 13:02:38 +0000
Files and hashes:         1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: 1zsRNTm2mo9GTpjFxyHO4oZU9GeDRtCz0ctUTApebOQ=)
                          2: 5-ww4QhAnpWMLFKDS113aJ7tDts.roa (hash: naMxMM0wK1HwWVarJ+KbUfx3fa8ZHUpjvaPyqHxS6e8=)
                          3: JFgH0uAFTbVrpQz5zQ_8pwJ0V1Y.roa (hash: P8V1toZtFGQpMdjFvEkRs4/DCGy5DcZx1g0+dmDSKzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:21:ff:c0:e6:44:98:d3:48:b8:20:1a:10:6c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
        Validity
            Not Before: May  7 13:02:38 2024 GMT
            Not After : May  8 13:02:38 2024 GMT
        Subject: CN=aa98533cb9543c25a9fb496edfa67926f2a4cec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:36:d0:cf:c1:95:10:8f:f7:54:3a:82:71:
                    fe:96:53:ac:a0:bd:9e:c7:79:48:0e:2b:fc:2b:f8:
                    74:62:d7:df:26:6f:9e:a8:84:54:d1:9a:49:10:2c:
                    dd:6a:7f:75:a6:a5:5b:e7:b2:0f:10:be:d5:2c:a8:
                    3d:71:60:32:eb:b0:99:ba:02:5a:a3:05:55:bc:20:
                    c9:47:80:8b:b6:66:98:89:75:67:f8:22:24:fa:07:
                    6d:4c:88:28:d9:4f:20:7a:ca:74:e6:b3:fa:bd:14:
                    8d:50:a9:cd:65:c8:93:4d:a8:a0:89:fd:dd:c1:ba:
                    0d:2c:ca:99:24:93:58:c1:13:a1:18:a7:16:81:5a:
                    20:8d:d8:59:a0:68:dc:b3:a4:db:c5:67:bc:92:06:
                    a1:ef:df:39:df:2e:65:6b:4b:a3:f1:44:e7:61:df:
                    1b:48:06:3c:37:72:a3:a6:fa:c7:36:d0:4c:fa:e2:
                    c2:08:a1:4a:9f:33:e6:c9:03:28:b7:c0:c0:13:7f:
                    7d:f3:3f:6c:f1:50:f7:b8:0b:54:29:41:aa:05:03:
                    cb:ee:21:00:de:15:d2:2d:e2:7d:aa:09:57:a0:45:
                    5c:0b:0f:c4:37:b8:ed:49:f4:fc:0c:de:b6:b9:bb:
                    08:82:ed:dc:14:d9:09:56:38:94:51:78:fb:b9:ae:
                    27:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:98:53:3C:B9:54:3C:25:A9:FB:49:6E:DF:A6:79:26:F2:A4:CE:C9
            X509v3 Authority Key Identifier:
                keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:73:bd:50:61:c2:38:e7:0a:27:54:2f:c8:f0:5f:84:a5:67:
         2e:aa:85:1b:1d:97:69:ce:aa:d6:32:4f:46:d0:98:ac:2f:07:
         10:ec:ad:16:1b:34:c5:52:96:ea:3e:6e:c5:dd:6c:4a:d6:17:
         1c:4d:49:0e:12:54:f0:78:7d:27:9c:66:a1:ba:92:88:fb:24:
         2a:3e:3b:32:68:a6:b0:7e:80:85:61:32:6a:79:70:3b:87:c5:
         8f:0e:cc:54:29:f7:d8:45:5f:ab:72:7f:e1:b5:e7:09:3a:f1:
         d5:6e:30:c7:f5:70:f4:3d:55:91:d6:1b:87:22:d5:56:4d:3c:
         0f:34:2d:67:b4:60:bd:72:8e:78:91:b0:0a:2a:34:1a:c1:56:
         dc:9c:d8:b0:74:90:86:96:dc:1b:70:22:d3:c4:16:74:95:88:
         22:b0:e4:b6:09:6a:d9:dc:5e:30:c7:31:0e:ab:90:eb:45:b1:
         56:18:26:61:4a:6e:51:45:cd:e4:03:f9:3f:f5:4a:42:ee:f7:
         94:22:b1:5c:b5:ec:d4:a4:72:30:c7:48:b6:0d:e4:54:d8:ef:
         29:45:71:cf:c8:f6:db:ba:77:32:2c:d4:dd:85:6c:cd:f6:d7:
         4e:7c:7a:9c:f7:cb:f8:68:6f:c0:c6:d9:06:27:6e:10:bc:83:
         cb:60:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:36:52 2024 by rpki-client on console-ams.rpki-client.org