Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File:                     EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier:          VrOO0wFtg3qwOpHVgc0d1/MZ0wBfLr9e+n63OiLgGcE=
Subject key identifier:   3A:23:E8:C2:4E:82:C1:89:5E:9F:E0:B0:72:56:3E:31:54:98:11:55
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer:       /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial:       018F441FBE6CC626B80D905ED7DB3A379D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number:          0B1C
Signing time:             Sat 04 May 2024 15:01:22 +0000
Manifest this update:     Sat 04 May 2024 15:01:22 +0000
Manifest next update:     Sun 05 May 2024 15:01:22 +0000
Files and hashes:         1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: uJh3845gnraVS38F2I/eKgiRVsQA3pqmIKHjd3WUcfo=)
                          2: nDvnMS3XeNV7Qh_jlK4V6bj3OMc.roa (hash: q+0MWhxx1aku7HHQzVt6GJhLjg5kJig8jtqcKUNHGU8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:be:6c:c6:26:b8:0d:90:5e:d7:db:3a:37:9d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
        Validity
            Not Before: May  4 15:01:22 2024 GMT
            Not After : May  5 15:01:22 2024 GMT
        Subject: CN=3a23e8c24e82c1895e9fe0b072563e3154981155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fa:57:41:9c:c5:55:09:d6:3a:93:39:d4:5c:
                    45:8d:43:16:c5:1d:65:68:ca:42:c3:c6:e4:1a:cd:
                    d1:66:ed:79:51:b7:3d:81:09:f7:56:1f:95:4f:a0:
                    46:ee:d8:ac:a1:a7:40:ff:43:a0:28:2f:c4:28:d6:
                    a9:ea:18:62:3f:e5:25:87:01:db:be:65:4a:0f:2d:
                    ff:ca:45:c2:ac:44:a1:77:39:db:e6:a9:42:ef:d4:
                    80:ef:70:ca:0b:81:56:0e:0d:49:95:1f:c4:f8:b9:
                    41:da:0b:88:82:2d:53:d0:4d:10:e2:76:90:da:63:
                    09:bc:64:29:7b:91:bd:0a:96:3f:05:61:9c:1c:2b:
                    34:7b:a3:fb:34:c0:02:bc:c0:38:93:6d:f5:cb:66:
                    af:1b:a7:05:16:3d:c0:2b:7a:65:2a:bb:d2:5a:da:
                    62:9f:ff:4c:8e:c0:7d:03:b6:89:c6:a9:c0:97:7f:
                    ed:52:44:44:3e:5b:f6:f7:de:4f:6e:56:85:a1:8a:
                    77:65:01:8c:00:61:8d:41:90:c0:bf:73:24:13:3d:
                    0e:60:7d:89:60:2f:b6:3b:42:fe:73:dd:40:ab:48:
                    f7:4b:71:8c:4b:2a:cc:b4:ed:15:54:b9:54:b5:fe:
                    31:52:37:a5:a2:42:e8:6d:fa:94:db:67:5a:bd:89:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:E8:C2:4E:82:C1:89:5E:9F:E0:B0:72:56:3E:31:54:98:11:55
            X509v3 Authority Key Identifier:
                keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:55:e6:6e:4a:16:46:44:b5:8a:c0:c1:11:38:0f:9c:da:
         c4:80:44:dc:1c:fe:b5:83:5f:c3:4e:55:84:59:7f:0e:c6:08:
         31:d4:45:2d:3b:99:98:f7:ae:1b:1d:b1:df:16:83:08:91:c3:
         d7:0b:7e:cc:9a:8f:cb:ad:f6:92:d1:1f:54:61:2f:20:45:3c:
         06:b6:01:c6:26:1a:1a:9a:c6:04:7e:42:db:20:27:de:32:ae:
         ea:9b:70:af:de:1d:8a:2c:a4:10:f3:37:5e:5b:b6:dc:72:6c:
         ba:09:81:2b:8d:11:8f:cc:8f:31:e7:ac:3f:80:d2:96:07:7c:
         66:fc:4c:50:32:39:32:04:ff:40:8a:92:69:22:a0:69:11:72:
         ff:e0:ab:a1:b0:d0:d6:f5:b7:00:3d:7c:d6:ab:f5:cf:ca:33:
         32:fb:3b:94:7a:93:ba:5e:26:da:78:33:c2:ce:f1:d8:9f:d2:
         b5:be:a5:81:ee:da:84:2d:1b:98:d7:f5:8d:26:bb:bf:dc:14:
         53:43:24:22:98:b1:ae:f7:4b:a5:9c:89:ad:73:48:9c:5c:44:
         a5:2c:72:f9:19:ff:70:94:fb:54:b2:72:ea:ee:ac:7c:a6:0c:
         82:5c:75:33:d3:37:ac:f7:bb:b9:c3:73:74:0d:d6:e0:ef:27:
         b5:5f:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:58:16 2024 by rpki-client on console-ams.rpki-client.org