Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File:                     70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier:          zW2YhLyY0+xmQkkPgLbQXb02LcH3NKiBgb7YMqbqDaU=
Subject key identifier:   E2:5B:9C:B2:AB:7B:B7:D3:29:B1:37:A1:5F:91:11:63:15:44:43:BF
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer:       /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial:       018F49B3B5B9001C9FE2CF73503A71719E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number:          08C1
Signing time:             Sun 05 May 2024 17:01:04 +0000
Manifest this update:     Sun 05 May 2024 17:01:04 +0000
Manifest next update:     Mon 06 May 2024 17:01:04 +0000
Files and hashes:         1: 1-SW2tS-6NZ-gd665x8dt9974dT8.roa (hash: 9yfnqo4O5r3TQSkjozLStch7Lmxp/qVTMLVy2RDwXOo=)
                          2: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: UiE0/5H0te5BPqJAf0y7hdqpfWdLd8Yvi4EIPvRw9Ac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:b3:b5:b9:00:1c:9f:e2:cf:73:50:3a:71:71:9e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
        Validity
            Not Before: May  5 17:01:04 2024 GMT
            Not After : May  6 17:01:04 2024 GMT
        Subject: CN=e25b9cb2ab7bb7d329b137a15f911163154443bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:e2:cb:71:df:ff:5a:57:98:5f:1d:b8:d5:
                    12:02:27:7c:a4:2a:f6:1e:fc:74:c0:21:83:f5:d9:
                    66:2e:49:9e:63:41:86:1a:07:78:dc:ed:b3:04:23:
                    23:f6:36:af:85:05:81:c4:07:45:9c:6e:aa:76:7d:
                    37:ce:5a:6f:b8:ec:d7:f9:35:4f:ac:dd:52:11:dc:
                    a8:99:15:f7:b2:ba:1d:19:8e:f5:9d:12:8e:e0:01:
                    31:4a:81:95:7b:68:37:d4:d8:01:5c:9f:b5:70:91:
                    a5:f8:af:73:45:02:76:f3:e0:b3:a5:8e:7d:9e:1a:
                    a1:82:54:e8:4d:55:b3:04:5f:ed:42:16:84:35:6a:
                    9e:cf:5d:04:37:59:a8:10:d6:1e:ce:c3:fe:03:6a:
                    20:95:90:a8:02:a0:f8:75:31:a5:8b:e5:95:2e:a8:
                    41:5c:1d:8b:47:01:41:53:4c:6b:33:8e:f4:15:61:
                    7b:76:df:57:42:66:53:8a:2e:09:39:14:46:9d:15:
                    19:3d:9f:5b:31:bc:5d:c2:c0:10:5d:59:f8:47:e0:
                    68:78:fe:83:28:e8:7c:70:7c:fc:f5:ab:4b:2a:12:
                    8a:2a:45:f9:24:7f:42:3b:d7:45:d7:09:07:cc:a3:
                    68:34:24:9a:c8:c3:9c:c6:5c:a9:ef:1e:8e:1a:d4:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5B:9C:B2:AB:7B:B7:D3:29:B1:37:A1:5F:91:11:63:15:44:43:BF
            X509v3 Authority Key Identifier:
                keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:c8:4f:ec:82:6f:75:fd:bc:0e:41:45:1c:4f:ae:39:b4:
         b5:b4:ec:e6:87:b6:c8:07:61:4f:fc:20:73:59:0f:ea:03:22:
         43:52:9a:67:56:37:20:d0:83:0b:a0:a0:03:74:2c:fa:7c:ed:
         a5:f0:8a:4c:6a:5c:4e:07:42:ba:5a:c0:f6:d7:b5:f4:a9:43:
         db:38:4e:06:33:e9:3d:64:9a:f9:05:fa:6a:0d:9e:d5:4a:3b:
         b3:11:69:cc:bd:b6:6b:ce:75:a8:51:a1:58:b4:19:95:b3:87:
         a9:fd:47:da:94:3e:24:bc:9a:8b:61:35:26:20:0b:42:90:29:
         5d:67:ca:79:90:f5:31:67:02:e4:a7:1f:b6:19:00:68:96:08:
         26:19:41:98:4c:85:d4:88:d8:37:78:26:11:72:95:2c:a6:9a:
         8b:16:f8:df:ca:ff:b9:39:c7:78:83:e4:ee:47:c5:e2:42:c4:
         09:7b:f2:84:ba:66:5b:e3:f3:68:fc:29:35:41:a9:e1:00:b7:
         24:95:b2:84:19:7c:ed:1a:fc:a2:27:00:bc:d6:2e:d8:1b:46:
         e4:7a:d2:01:ce:34:71:e9:0f:b7:4d:40:de:54:e7:c1:60:45:
         70:0a:30:a8:14:b8:1a:d6:a4:7d:d8:e9:bc:33:a0:c5:1d:9e:
         d8:10:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:21:29 2024 by rpki-client on console-ams.rpki-client.org