Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
File:                     EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json)
Hash identifier:          30B71dKPEZeu4ZelRyEaw/pb91+wlGRcCg0UqCzcLAA=
Subject key identifier:   49:84:93:F2:42:5E:0D:91:C9:1F:3F:35:57:CD:F0:AE:EA:D2:44:17
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Certificate issuer:       /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial:       019351D051078CBAD583C2D6D212A55FB9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
Manifest number:          10B8
Signing time:             Fri 22 Nov 2024 03:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:26 +0000
Files and hashes:         1: 0oq3SxKNI1mqJi8vbTad-UVSIZE.roa (hash: bg7Wr9zQ3K0uC3ABfKmuWD1OvqXX5KgRZDzFsFwKgVQ=)
                          2: 9_UKX4lOo-CXfA2JgW3vgVl0gZY.roa (hash: 99ZWVdSAipT0LYxf8vQfgmBLJY4it7/vmtXMJ0G7N+A=)
                          3: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: i8+e1Ne7ccFf4p3Y1voI/ngywPlt2xSBGPxwcBBeELo=)
                          4: SSDNSjN3IW9MQcUVRFDFXK0gklk.roa (hash: pr9oWa4tIzTujkFNvG5gEv9A3+QP2NKCxDz/GhwOVbk=)
                          5: ah0f0m-kSEYTUPVJYljuuUURKSY.roa (hash: HsA0Sr/R5dawlKyUnh/WYDg8xlljyvkdnuMAjyeLXrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:51:07:8c:ba:d5:83:c2:d6:d2:12:a5:5f:b9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
        Validity
            Not Before: Nov 22 03:00:26 2024 GMT
            Not After : Nov 23 03:00:26 2024 GMT
        Subject: CN=498493f2425e0d91c91f3f3557cdf0aeead24417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:38:16:cf:8b:20:c6:a4:a4:44:27:15:a2:
                    69:ee:ee:0e:16:78:86:6e:e2:88:db:bc:77:83:8a:
                    25:e2:09:9b:b1:1f:5d:0b:9a:a7:5b:c1:c7:31:87:
                    ab:9e:be:15:e0:54:9a:81:70:97:a0:52:ff:27:4c:
                    78:79:57:f1:5e:61:03:17:6a:f2:a4:d8:c2:f7:f0:
                    8a:25:bf:9d:07:f4:9b:0c:d6:68:c5:1d:11:06:85:
                    81:94:20:47:de:e7:c9:b5:5a:98:22:6f:14:55:c8:
                    03:bb:9d:c5:31:b6:ef:ff:0d:c3:6f:19:1a:88:47:
                    51:a3:0b:70:e2:e9:80:75:f3:0d:d2:89:2b:71:3e:
                    a2:96:f1:26:bd:eb:c6:3e:96:e3:83:85:33:9d:55:
                    68:29:b9:4f:47:7a:78:0a:0e:01:50:9e:fc:eb:b9:
                    cb:d3:c9:f3:71:d9:b9:57:68:bd:8e:a4:f3:61:bf:
                    f4:dd:16:47:36:87:67:39:19:b8:9c:5b:6c:04:a1:
                    d8:ab:16:81:2b:4c:f8:bd:fa:c6:91:8d:2e:f6:70:
                    97:81:bf:01:db:05:12:23:b4:11:ee:82:d4:d4:b8:
                    51:5e:93:64:09:08:c8:80:76:e7:76:f0:7d:ae:d3:
                    df:6b:31:b5:a5:99:c7:99:91:61:8e:51:de:0c:60:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:84:93:F2:42:5E:0D:91:C9:1F:3F:35:57:CD:F0:AE:EA:D2:44:17
            X509v3 Authority Key Identifier:
                keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:ea:cf:3c:19:d4:15:14:93:73:0b:95:25:e4:75:1a:9f:
         63:68:01:9e:39:b4:72:7a:6d:37:6b:e0:b2:7a:4d:ca:16:19:
         28:f8:8e:28:25:f9:1f:b8:5a:4b:6a:d9:3c:d6:9a:a7:fc:4b:
         8d:b7:cf:17:71:a7:76:e7:1f:a6:33:dc:4c:e0:0f:03:4e:d1:
         d7:0d:91:35:7c:ad:7e:db:a6:c7:e8:14:e9:92:d6:2c:0f:0e:
         38:79:8e:ea:5d:df:06:20:9f:d6:77:6d:3c:a6:60:ea:90:0a:
         b7:ec:25:cf:f6:3e:ca:1f:8e:b7:e0:01:fd:2d:f7:1e:b4:6d:
         4e:56:4a:86:30:bd:74:93:87:61:90:61:01:a4:f1:6d:c3:7e:
         a4:94:ab:0f:13:17:f5:94:b0:d5:f4:c4:6d:33:98:1a:27:8b:
         ec:54:a6:f6:23:7f:76:e2:c1:38:d4:38:bc:0e:47:21:f7:55:
         3c:cd:37:4f:46:14:bb:9c:ba:28:e8:2d:d8:46:9d:3c:f4:e3:
         f9:95:d4:a1:bc:95:35:67:7f:8f:35:c3:8a:93:0b:60:e2:2c:
         c2:65:c6:5d:e7:f1:b3:19:28:15:ff:c8:c5:c4:62:37:78:76:
         6f:64:c8:b7:14:0f:e4:0b:86:dd:a4:ce:40:3c:4b:b4:03:fb:
         25:f6:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:52 2024 by rpki-client on console-fra.rpki-client.org