Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File:                     ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier:          QHFIxy1IgmzVnLUgCddNS7eJ64WujUHnTltew9Qu3uY=
Subject key identifier:   EF:65:0E:E9:01:5C:6E:04:A4:E4:44:B5:06:18:4F:F6:DE:29:31:8A
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer:       /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial:       018F87ED3A0D13566C4DA3B58C7A32E49275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number:          01DE
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: mR79T3cXoMkOSbGUaUvSY3DO4jzGNNuGSBhovS7hQQg=)
                          2: jq3H6Nj50eI7BCR5M9Bqt_9JJrA.roa (hash: M/GNJhSr3qWVEXUz2kiZh3WkiuNzb8m00wr8zIGpJkY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3a:0d:13:56:6c:4d:a3:b5:8c:7a:32:e4:92:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=ef650ee9015c6e04a4e444b506184ff6de29318a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:6a:0b:84:2c:f7:2c:a7:47:b1:8d:c4:60:
                    1a:06:d2:17:b4:99:47:b7:3b:e7:01:08:9b:33:59:
                    b2:65:ea:d4:e4:47:92:08:e3:d7:71:9a:38:2a:39:
                    3c:2e:b0:46:83:92:62:e8:46:4b:43:fc:69:29:9f:
                    65:e3:2d:fa:f9:0d:61:3b:42:cd:f2:84:8b:87:cc:
                    76:2c:f4:f8:60:cf:98:95:92:d6:d8:3b:1a:26:68:
                    c0:6d:c7:ab:ce:60:46:7b:d8:fe:f6:2d:ed:fc:80:
                    17:d1:8b:05:78:7b:fc:f9:cd:78:9d:62:9b:c2:d2:
                    94:fc:e0:b4:ff:73:39:26:a6:1c:7e:9e:29:79:a5:
                    88:bd:e0:74:5d:1d:27:3f:21:e5:3f:5f:e9:9b:24:
                    3b:3b:17:1a:10:38:ed:ec:89:e0:d2:39:cf:28:bd:
                    d6:e0:44:0e:2d:0b:40:1e:58:4b:e8:a8:2d:73:9b:
                    05:d1:ad:b0:ea:1d:76:16:f0:fe:81:4f:21:f7:45:
                    2e:bc:00:c0:d7:7d:90:ab:57:1e:bb:c0:75:a0:1b:
                    dc:0a:02:1c:ab:4e:fd:d8:7f:75:73:2a:76:d1:7f:
                    2b:ac:50:ae:65:16:8a:f3:d8:9d:16:c3:dd:05:76:
                    e8:38:14:4c:87:5b:db:63:d4:01:b7:86:1b:58:60:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:65:0E:E9:01:5C:6E:04:A4:E4:44:B5:06:18:4F:F6:DE:29:31:8A
            X509v3 Authority Key Identifier:
                keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:bc:9b:80:77:cf:9e:cf:c2:df:ff:98:a9:d0:54:ac:1e:de:
         7e:c9:75:6f:14:09:e4:bb:ac:7d:8c:f3:c8:72:f5:3d:2d:ae:
         59:be:d4:af:07:0a:ec:91:fc:67:c8:84:6d:07:37:83:98:79:
         aa:ca:06:75:fb:e6:db:79:63:0c:ca:d6:44:20:59:2e:c2:19:
         b3:84:3c:b2:8f:27:97:c9:d8:a8:ca:56:64:7f:e8:a5:59:e6:
         d7:8f:94:c9:30:46:27:93:c4:a6:82:5b:57:d4:ea:7a:d2:e4:
         eb:17:92:03:3b:bf:70:33:b7:f7:5c:94:c6:d9:1b:d0:75:9f:
         f0:da:86:4f:f3:f6:ca:90:c0:01:78:4f:62:25:18:21:53:bf:
         7b:b1:43:7b:60:85:c2:82:9d:a7:67:ed:95:2a:9b:68:63:9e:
         e0:53:64:52:62:2a:4a:84:38:7d:e5:91:96:a2:5f:27:30:9e:
         cc:b7:73:0f:7c:ef:8a:24:a9:35:17:03:b3:a5:07:73:97:8d:
         53:3d:70:34:b5:ce:15:af:45:9b:99:71:ed:a6:6b:1a:d3:f2:
         09:82:a2:11:c6:fe:1c:f9:e5:63:cf:5a:c0:91:c2:9f:f4:e0:
         67:c5:e0:0c:47:8f:14:2d:7d:70:30:93:ab:72:af:4a:04:43:
         51:93:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:38 2024 by rpki-client on console-ams.rpki-client.org