Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File:                     EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier:          xhu43GdhIeSnGt4grUdUPJDViEzxiWFiMeqKDQAZNtw=
Subject key identifier:   41:59:3F:EC:93:F7:6A:2A:14:15:2E:AA:85:0D:9D:52:01:88:15:CF
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer:       /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial:       018F43B1F939A944649006EBF0DFE7906B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number:          0E5D
Signing time:             Sat 04 May 2024 13:01:28 +0000
Manifest this update:     Sat 04 May 2024 13:01:28 +0000
Manifest next update:     Sun 05 May 2024 13:01:28 +0000
Files and hashes:         1: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: jjOTmH6N8SQfDqh5Lx594IsxfmXbIeyplyQ4Y7HEC/s=)
                          2: RDdPAE07WdcrSns_-J66eYHSZ0U.roa (hash: TKaG2JXIG6puXG/ArO9hAv1JM6yQa19dxxl5IgN0bTI=)
                          3: tewSBIQpLY0KRNiS28N5QUVhO0M.roa (hash: NWIiv8H3fMJy8mwd4oOj+09ra2WyMSOrPqCTuV25JqQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:f9:39:a9:44:64:90:06:eb:f0:df:e7:90:6b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
        Validity
            Not Before: May  4 13:01:28 2024 GMT
            Not After : May  5 13:01:28 2024 GMT
        Subject: CN=41593fec93f76a2a14152eaa850d9d52018815cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:e1:ce:ef:c5:a7:e1:2a:bb:b3:c5:4a:50:
                    91:99:38:09:2e:57:ae:2d:b1:a6:71:6a:be:71:28:
                    c7:0f:ff:f0:66:76:0d:2a:0f:6a:fb:98:64:5e:2b:
                    ea:86:a5:05:f0:49:6e:c1:23:cf:a9:60:50:45:b0:
                    48:e4:bd:b4:02:de:da:3c:aa:54:78:90:18:02:43:
                    35:30:a8:a5:10:ee:d7:49:1d:d5:3e:aa:72:de:5f:
                    47:fb:38:92:8c:51:5c:7b:e8:c2:0d:f5:a5:0b:aa:
                    a9:f0:32:33:71:1b:79:61:81:74:91:c4:b4:9e:4f:
                    5e:32:63:21:13:54:a1:c8:b9:fd:20:53:ca:51:d8:
                    3b:69:0b:76:5d:0d:f7:07:80:b1:3c:cf:76:03:94:
                    8a:78:63:51:c9:24:e7:8f:d5:47:5b:5b:f0:f5:c3:
                    ee:61:7d:14:04:54:5b:32:b3:5e:3c:58:8f:21:d1:
                    52:bb:32:5a:d8:6d:85:21:fe:fe:c0:04:13:3d:e1:
                    92:b1:51:cd:48:b8:be:fc:0c:21:97:4b:72:28:f0:
                    94:fa:11:3d:39:fe:91:45:d1:07:7c:2b:89:ba:19:
                    b9:04:0e:5a:5b:8f:af:8d:78:50:c6:98:8d:80:de:
                    6f:7f:13:d4:a3:7e:68:58:32:55:97:aa:4f:63:23:
                    24:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:59:3F:EC:93:F7:6A:2A:14:15:2E:AA:85:0D:9D:52:01:88:15:CF
            X509v3 Authority Key Identifier:
                keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:d5:54:02:e6:a0:53:09:26:e8:b4:b5:fc:cf:c0:8e:ca:
         cd:98:c1:dd:a7:e4:7a:62:4f:77:67:89:06:41:05:80:96:d0:
         7c:7d:c3:af:e1:93:13:7c:53:64:d5:46:40:f1:be:3f:67:e5:
         06:63:1d:86:2c:b2:ef:45:8e:7b:fe:c0:86:7a:5a:0d:52:6a:
         7c:5a:62:c7:b8:a4:73:89:5f:d7:72:c4:65:30:07:72:33:83:
         e5:01:40:1b:ac:e0:09:c1:46:0a:77:30:0d:bf:2b:b2:61:f7:
         f8:0e:b0:93:9f:ac:36:ba:1e:b4:89:49:23:2d:70:8d:7f:41:
         11:2d:3a:1c:b9:5f:07:83:6d:79:80:b3:6d:eb:e1:8f:21:51:
         8d:38:35:b3:5b:26:56:0e:e1:2d:b8:16:b7:95:93:41:73:5b:
         ff:ec:4f:81:5d:1b:a4:cc:3f:c9:4d:46:93:4f:d8:75:cc:02:
         d9:bb:e4:2c:99:c9:28:7b:01:c8:61:5e:99:ee:4e:b2:c7:db:
         31:77:aa:2d:7a:b8:aa:31:f3:23:2a:aa:16:07:b8:9c:d4:d0:
         cf:5b:a5:99:52:a5:b0:08:d4:d6:33:38:97:57:b6:cd:49:a3:
         f9:72:8a:14:1f:2c:66:22:3d:4a:50:e5:bb:d6:e8:26:ad:c7:
         33:6e:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:43:46 2024 by rpki-client on console-fra.rpki-client.org