Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File:                     Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier:          Hj+hJvgeGRVLRvNF+62nVSS0iLbW/y05mZFZK7uyWqg=
Subject key identifier:   66:63:21:85:43:7B:3A:04:E4:E8:24:84:87:1D:F0:83:1F:CB:93:EE
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer:       /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial:       018F1E5B80179AE33440937913AA4F1B2AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number:          1141
Signing time:             Sat 27 Apr 2024 07:01:03 +0000
Manifest this update:     Sat 27 Apr 2024 07:01:03 +0000
Manifest next update:     Sun 28 Apr 2024 07:01:03 +0000
Files and hashes:         1: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: SS2XuIR2d0HM6UZcPmILvRLQ2dRnNmlDUe9g5CXzr5M=)
                          2: Z_hoMfAgTHrm3fxpYwpjot9Y7Wg.roa (hash: 2NONMMh5PcF0A6zAbm+NBCqudxJaFaKoK2ZWquvvLGo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:5b:80:17:9a:e3:34:40:93:79:13:aa:4f:1b:2a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
        Validity
            Not Before: Apr 27 07:01:03 2024 GMT
            Not After : Apr 28 07:01:03 2024 GMT
        Subject: CN=66632185437b3a04e4e82484871df0831fcb93ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:3d:d8:3f:15:0c:a8:ac:4b:02:7f:55:67:
                    a4:89:4e:51:28:6e:9d:d5:e1:ea:76:1d:d4:4d:5c:
                    00:67:71:7d:ee:bf:48:14:42:a9:ce:4e:dd:10:26:
                    2b:9e:65:90:f2:a7:68:d2:55:9e:cf:f0:03:ca:9b:
                    bb:44:fd:41:73:c2:0c:c4:53:dd:ad:cb:25:cb:db:
                    b0:4a:21:1b:79:e5:38:ff:f3:17:c3:e4:d0:06:f5:
                    67:ff:bb:b5:8b:8b:02:fc:e6:2f:62:c6:93:c3:37:
                    40:5b:70:95:b6:f4:c2:80:51:3d:a6:c4:d5:4c:77:
                    30:29:11:23:b2:32:25:7b:e0:b7:57:53:24:cc:25:
                    c2:72:0b:71:9b:56:72:5c:bf:c5:0d:de:00:ef:f4:
                    3e:68:22:d0:1f:44:54:58:e5:d9:ff:b1:79:2e:7c:
                    0f:0d:36:86:b7:2f:76:cf:a2:ea:47:25:79:0b:11:
                    b7:d0:3e:f6:af:94:15:de:32:6d:bb:20:70:0c:88:
                    ba:07:8b:2d:53:4b:b6:00:e4:cc:34:12:cd:3b:0d:
                    0f:f9:85:25:1b:5b:84:40:12:6a:60:62:2d:99:26:
                    09:f1:90:23:d4:06:04:b1:06:43:bf:02:b9:fe:0c:
                    69:05:8f:fc:69:24:2a:10:94:b0:32:cb:38:cd:5f:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:63:21:85:43:7B:3A:04:E4:E8:24:84:87:1D:F0:83:1F:CB:93:EE
            X509v3 Authority Key Identifier:
                keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5e:98:32:16:1e:95:e1:b9:77:39:90:00:8e:53:bb:49:ea:
         42:e3:a4:02:7e:d5:c6:cb:46:3d:73:d3:81:ff:4b:a5:23:f7:
         59:28:69:f6:a9:60:dc:38:63:05:ce:0c:d4:ca:49:8d:66:45:
         28:98:c3:3c:38:c2:9c:65:8c:30:a5:81:e2:78:18:59:9f:90:
         02:3e:10:d4:f9:02:6e:c6:89:ea:77:0e:a1:62:0b:dc:69:59:
         03:4a:de:24:53:f4:09:42:06:24:4e:20:2e:47:8c:ef:8c:cc:
         0f:65:86:cb:7e:7d:e7:58:a9:47:44:fc:ae:17:24:a9:e6:5e:
         35:bf:f7:01:d0:4a:1b:22:a1:18:fb:74:c4:aa:82:97:25:3c:
         ad:6a:4b:6e:fb:c3:48:e9:66:c6:ed:de:21:7e:56:56:4c:2d:
         66:f3:52:05:05:17:97:10:90:d1:f8:80:8e:3b:7c:6d:d6:b4:
         54:8c:79:5b:5d:39:90:e9:de:f7:25:d1:d6:a3:fe:80:f4:5e:
         bd:3a:ae:8f:da:ee:46:be:83:f1:42:a2:56:1e:bf:e1:00:f0:
         cd:04:85:3f:85:10:9f:83:1c:c4:f2:5e:2b:b0:86:d9:d8:96:
         87:c5:09:18:b5:c9:19:0d:c9:1d:4e:6e:8f:40:d2:f9:ec:5a:
         c1:b0:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:55:32 2024 by rpki-client on console-ams.rpki-client.org