Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          2BkKr6DSz61fOZ8Sl4y3ILMKBKZjxpHwLIA8qJuQ8MA=
Subject key identifier:   4C:C2:97:DB:79:F3:34:75:BA:61:16:BA:2A:71:07:E3:D6:9E:9D:84
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       018F611791A3551E45DC9971D81BF28F67C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          1165
Signing time:             Fri 10 May 2024 06:01:25 +0000
Manifest this update:     Fri 10 May 2024 06:01:25 +0000
Manifest next update:     Sat 11 May 2024 06:01:25 +0000
Files and hashes:         1: 2joWpTYz2yglFJvvMDXAh8boHEI.roa (hash: podyg7PSuwqULq01nYRz9Vx//UVoUyqMHR6KEs4MoEk=)
                          2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: GVW1lUA2PfrKr0tEAFubqS8klSeXKIw1E9MWVXunTug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:61:17:91:a3:55:1e:45:dc:99:71:d8:1b:f2:8f:67:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: May 10 06:01:25 2024 GMT
            Not After : May 11 06:01:25 2024 GMT
        Subject: CN=4cc297db79f33475ba6116ba2a7107e3d69e9d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:e6:09:6f:c5:ba:87:ed:ff:9e:1d:6d:a6:
                    b5:2b:dd:4e:25:15:94:bd:ce:71:92:95:bf:51:35:
                    2b:a8:33:9a:37:d5:01:da:f2:a6:b0:74:e9:ee:32:
                    74:9f:54:58:95:a1:a8:6d:f1:67:b5:45:9d:f5:15:
                    3b:fd:e0:30:23:1a:57:2b:2d:eb:bc:04:5e:a3:41:
                    4e:47:ce:fc:75:b9:58:39:23:da:66:eb:5c:19:9c:
                    c1:af:ee:23:9d:65:a6:9f:5b:7e:2d:8d:41:28:33:
                    ed:94:ed:b8:07:3f:53:03:82:06:e6:96:82:46:81:
                    68:4e:78:f4:f7:b8:1a:86:68:51:59:3f:fa:b2:06:
                    fb:91:26:c4:75:02:27:4b:3f:50:3e:7e:35:69:1a:
                    9e:a6:49:5e:78:81:2e:3c:cd:1f:90:21:e8:b8:74:
                    c3:e9:7e:5e:d3:6c:46:04:d8:9a:c0:c6:72:fb:bf:
                    00:42:de:a6:bc:68:23:3a:88:dc:b1:a8:e4:7a:fe:
                    cc:92:46:c6:9c:cf:90:1d:44:5d:fc:f5:4f:dd:2c:
                    c3:19:83:b8:92:0b:90:e9:7e:15:24:2e:ec:f9:cb:
                    0b:17:49:20:73:f2:00:ff:04:fe:c9:66:fd:b6:c6:
                    7c:43:8a:56:1b:20:e0:6f:6c:49:1e:4c:18:81:5d:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C2:97:DB:79:F3:34:75:BA:61:16:BA:2A:71:07:E3:D6:9E:9D:84
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:84:10:6f:46:f0:17:2f:04:41:6b:90:84:c6:7b:c7:f8:f7:
         ca:91:09:05:c7:5b:b3:76:01:83:1b:2b:dd:81:3a:21:42:62:
         06:e2:da:e8:e7:d1:c7:b8:08:96:12:a6:4b:e0:96:6d:0b:b6:
         9e:84:07:c9:d4:1a:49:42:a0:aa:37:ae:b7:31:b5:98:d2:22:
         9b:88:6d:67:1c:0a:9d:e9:af:bc:dc:45:08:c6:c8:8c:1b:38:
         7e:a4:79:f2:79:3c:86:c1:95:36:ff:4d:ff:f4:31:58:0f:b1:
         9a:fa:a4:09:2b:b8:7d:d5:b3:49:34:42:6e:83:bd:63:91:4b:
         c3:aa:cb:88:aa:2f:a6:e6:42:76:b4:ea:b1:71:ef:6d:60:e8:
         02:bf:28:34:16:1a:ef:6e:5e:f9:97:0f:9d:9f:c3:f7:77:6b:
         61:8a:a0:e1:a5:25:03:7a:c9:e8:34:67:99:93:d1:f0:e3:a0:
         82:7e:72:16:06:98:31:0c:97:b8:57:fc:36:ae:16:0b:3a:e1:
         e3:eb:6d:e4:34:36:c2:95:e8:dd:f2:96:10:2b:af:43:17:04:
         0d:f6:99:15:55:fc:73:a4:85:63:20:7b:52:94:d7:c5:1c:b1:
         85:2b:91:77:bf:4c:65:31:57:db:52:04:9b:a7:bf:87:7f:b3:
         5a:86:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:05:16 2024 by rpki-client on console-fra.rpki-client.org