Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File:                     2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier:          KOlcAEcivKtcSxg3LPn3ys4zpjrGZRdsl4z3lCWCJIc=
Subject key identifier:   EE:CB:95:01:99:94:F4:78:D9:C8:B8:1E:84:74:FD:74:B7:29:5B:DC
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer:       /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial:       018F3C6649577FA8684BC3A58A407AB8DFE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number:          0E17
Signing time:             Fri 03 May 2024 03:01:27 +0000
Manifest this update:     Fri 03 May 2024 03:01:27 +0000
Manifest next update:     Sat 04 May 2024 03:01:27 +0000
Files and hashes:         1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: TMsxaWkASCg2D0YEsDX/to9XHdzKqsr2G9Z4x7/AgAE=)
                          2: iXv9aX4-SXfK8KZNxV9mqheynlI.roa (hash: 4KCwHg40v0EiCvvjQ4P8gt7ga6sxekNWDA7RYhNFxO8=)
                          3: yne18kzMVuVyf2O7sG2xvO0CxQE.roa (hash: ME940Se7lyrxNHwcpEaKfeDyn+e2xzrLFIqqWFwGFKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:49:57:7f:a8:68:4b:c3:a5:8a:40:7a:b8:df:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
        Validity
            Not Before: May  3 03:01:27 2024 GMT
            Not After : May  4 03:01:27 2024 GMT
        Subject: CN=eecb95019994f478d9c8b81e8474fd74b7295bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:e2:59:bf:14:38:c9:64:30:7e:a0:cf:c8:
                    7d:71:c9:17:6e:33:62:64:76:e5:d8:a6:36:b5:03:
                    58:a4:f5:08:fa:c6:97:81:06:bf:53:07:91:00:f0:
                    21:4f:61:68:f0:02:17:c8:25:3c:97:f8:52:0c:c2:
                    ce:73:14:d3:d7:6c:e5:dc:36:c9:65:d7:06:03:79:
                    df:bb:b9:42:64:1c:c0:48:61:af:f3:87:f5:a8:0d:
                    83:ae:bf:66:3f:30:7a:0f:a8:e4:fc:3f:62:39:e2:
                    23:39:3c:80:6f:40:ed:58:d6:5b:c7:23:e5:29:e3:
                    ae:9f:5a:77:3e:68:89:0e:35:a8:08:8a:87:85:32:
                    a2:ab:a5:ec:b4:64:06:20:57:96:5f:b0:88:a0:ee:
                    47:21:13:c6:16:fa:75:fb:fe:01:62:56:5f:78:d6:
                    0e:71:6a:f6:e4:df:40:0f:6e:24:c1:bb:21:2b:6e:
                    38:a6:d9:80:bf:b8:f4:11:73:e4:8e:08:f9:cd:b1:
                    ed:0b:bb:a1:6d:3b:2d:ca:94:3b:07:91:d2:15:eb:
                    18:ed:d1:f4:e3:ca:89:f4:bf:6e:ce:fa:68:b2:5b:
                    85:e7:01:06:d1:45:56:58:2e:85:8b:85:f3:94:8a:
                    05:2e:47:d3:0c:4b:7d:27:f6:68:af:a0:ce:45:47:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CB:95:01:99:94:F4:78:D9:C8:B8:1E:84:74:FD:74:B7:29:5B:DC
            X509v3 Authority Key Identifier:
                keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:78:34:74:ef:9d:49:92:c5:18:e8:b2:b1:2b:30:2e:ee:
         dc:da:b9:b5:51:df:69:34:9d:07:bd:d1:38:16:61:65:3c:14:
         86:79:17:8a:0b:c3:45:b4:c3:bd:75:84:aa:58:49:10:5d:b8:
         3f:db:75:f6:99:0e:4d:96:a5:b3:13:91:3b:14:aa:e7:48:08:
         be:a3:f5:bb:ff:9c:bf:bd:b2:7e:83:f8:4c:53:cc:f7:33:0e:
         0c:48:73:e5:95:a3:84:72:45:f0:18:c2:cc:21:ca:52:92:f1:
         d4:31:a4:3b:13:f0:a8:59:df:90:97:f0:18:4d:1b:0b:4d:7e:
         37:a7:82:94:e2:83:f9:23:dc:b2:89:b9:3b:b9:ab:1f:13:a3:
         96:7e:ed:4d:e7:1f:4e:60:55:12:16:a5:13:01:e6:3e:e8:a6:
         92:b5:87:ab:58:92:58:09:23:6b:e3:9e:3e:ef:87:fa:6b:5b:
         9b:f4:b2:f9:12:53:19:7e:54:14:ef:9d:71:c9:e3:eb:ef:d1:
         fa:30:f0:1a:48:2c:57:1a:6f:7a:60:61:76:8a:33:00:8d:12:
         9b:60:ce:d1:e8:be:f3:4d:b7:59:1e:a5:0c:4a:e0:51:13:6e:
         71:9c:dd:3e:59:9b:88:59:fe:de:43:1c:ea:9c:04:2e:ec:a8:
         d0:63:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:27:05 2024 by rpki-client on console-ams.rpki-client.org