Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File:                     EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier:          sb9h3JSLeoON3UWXDWxlP7EgD13QI+s0bOKb02At+HI=
Subject key identifier:   B2:48:FF:61:B7:93:F2:76:F6:50:11:3C:3E:AE:B3:6D:36:13:2C:A2
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer:       /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial:       018F3B1C7AD3A3681CC616D92382BCC6CA0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number:          10E2
Signing time:             Thu 02 May 2024 21:01:13 +0000
Manifest this update:     Thu 02 May 2024 21:01:13 +0000
Manifest next update:     Fri 03 May 2024 21:01:13 +0000
Files and hashes:         1: E0T1YER4XZmlMg6KzoWjPGGs-5U.roa (hash: Y4442q1kqePthZgMHh3t2cd9DquW+hdbjFwwwkoxShc=)
                          2: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: IptbWzrw1r3EYTzJF0J0u/Uah8VGhLaLENcSSIQty6M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:1c:7a:d3:a3:68:1c:c6:16:d9:23:82:bc:c6:ca:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
        Validity
            Not Before: May  2 21:01:13 2024 GMT
            Not After : May  3 21:01:13 2024 GMT
        Subject: CN=b248ff61b793f276f650113c3eaeb36d36132ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:41:2b:d0:33:79:9e:66:fa:dc:f8:6a:39:
                    77:97:29:1d:bb:99:d6:c3:c4:32:f1:b4:b6:17:4c:
                    08:5a:83:31:09:69:ee:15:21:6c:25:80:5f:4d:e4:
                    f8:f9:4e:70:df:24:7c:99:a2:b5:7c:13:a2:66:2b:
                    76:a2:cf:3f:00:a8:29:4b:ff:7d:6f:d8:ad:53:ad:
                    f1:89:1c:d4:1d:92:70:c9:30:28:5e:b8:8b:5a:38:
                    7c:fc:3e:a9:97:40:5b:8e:87:cb:db:07:66:63:6e:
                    6f:71:9c:68:12:aa:38:8f:46:64:b1:b9:dd:83:88:
                    32:a8:e0:af:98:3f:2c:da:cb:4c:f1:4d:2e:d3:9a:
                    45:0d:65:a3:64:8b:2b:77:68:59:e6:70:29:6b:8c:
                    ee:1f:7b:45:19:2b:ae:2a:36:ff:55:43:32:11:b3:
                    8f:57:46:16:9f:be:e6:74:2a:a5:73:c4:b1:3a:1a:
                    4c:73:d1:cd:c8:bb:4c:1b:c2:67:d4:8b:0e:da:65:
                    fe:a4:ec:a1:45:bf:27:4a:a3:a6:08:99:df:79:08:
                    42:0a:d8:ba:fa:82:05:65:55:ef:ed:c7:4f:8b:85:
                    d0:78:8f:3e:2d:41:2f:20:68:39:cf:ec:bd:89:86:
                    b1:c8:a8:2c:1d:7e:84:16:a4:8f:16:4b:46:88:f4:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:48:FF:61:B7:93:F2:76:F6:50:11:3C:3E:AE:B3:6D:36:13:2C:A2
            X509v3 Authority Key Identifier:
                keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:a8:9a:be:d6:fa:b2:7b:e9:c0:64:e1:0f:45:af:90:d8:
         03:7d:63:6d:a2:6d:6b:9c:8e:42:79:74:0c:ab:26:5c:9f:63:
         04:65:ed:69:9a:cd:98:b3:3e:93:9c:db:36:da:bc:a4:ba:e7:
         77:01:44:ed:58:54:ec:c6:b6:42:69:99:80:0c:cb:2e:30:b3:
         17:7e:24:92:52:b5:01:e6:ba:fe:24:e3:9b:fc:64:bd:6d:c0:
         b5:53:93:09:9c:bd:38:2f:aa:f2:57:97:9c:c8:f4:97:78:91:
         0f:86:16:a3:38:0a:a7:52:63:75:0b:d5:40:01:89:70:db:c4:
         d3:26:49:71:09:9e:c6:ce:ac:36:6d:f5:c1:3f:cf:be:7d:e9:
         26:f5:1f:aa:d2:38:0d:86:75:0e:b8:f2:e8:a5:24:4b:81:16:
         99:13:48:0f:7c:d3:9f:68:b8:5f:ed:b7:e0:01:cd:64:68:30:
         9f:03:96:a1:6d:f9:96:23:c1:09:1e:a1:72:84:6f:df:34:92:
         9e:8e:d0:37:ac:36:a9:ed:73:fa:ca:c2:87:83:00:f6:d0:9f:
         94:13:a6:36:ba:99:ca:ce:71:9e:16:6c:22:6e:41:bd:13:29:
         54:4e:60:bb:8f:f2:cd:6a:ba:6e:39:12:65:73:fa:69:82:3a:
         7c:ea:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:33:41 2024 by rpki-client on console-ams.rpki-client.org