Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
File:                     EVNfj6S19RUz1yTq-Q26mXFfxvw.mft (raw, json)
Hash identifier:          MSKvgQ4h+PDjQqBqhvBZYljMSSCm7fcpCtQFbQLSS3g=
Subject key identifier:   9C:BA:37:4E:8E:14:7F:40:F7:46:5A:74:89:32:17:21:D8:63:1F:05
Authority key identifier: 11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
Certificate issuer:       /CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
Certificate serial:       018F3A0B572C52A1C2FCD830CD75E905C592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 16:02:52 +0000
Manifest this update:     Thu 02 May 2024 16:02:52 +0000
Manifest next update:     Fri 03 May 2024 16:02:52 +0000
Files and hashes:         1: 0_kxPk8kXx-R7NRk0Iqxosv18mM.roa (hash: qIOBpCZSUI9weCZJaTIhFJro+AkRx0Es8wR0BwtpioA=)
                          2: EVNfj6S19RUz1yTq-Q26mXFfxvw.crl (hash: wYUONrSe6ns7GNeagNubqNrzuzBxiTHBPR+F+24AMlE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:57:2c:52:a1:c2:fc:d8:30:cd:75:e9:05:c5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
        Validity
            Not Before: May  2 16:02:52 2024 GMT
            Not After : May  3 16:02:52 2024 GMT
        Subject: CN=9cba374e8e147f40f7465a7489321721d8631f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:3e:ae:8d:2d:dd:cf:b8:39:8a:5b:28:b6:
                    f3:2b:94:3f:98:e8:b1:b0:c6:9f:33:3e:b5:d9:bc:
                    72:d7:c5:7f:ed:62:0f:52:ab:a2:c1:4d:80:dc:11:
                    33:38:39:91:38:9d:88:2c:eb:c1:b9:6c:c1:b4:69:
                    13:75:ac:56:b1:62:09:9e:05:e4:90:0a:5b:53:95:
                    23:55:3c:ec:45:a7:ad:32:2a:8c:37:4e:8b:58:c4:
                    34:ce:7d:d8:f3:72:91:25:27:f9:70:df:f7:a9:89:
                    99:97:54:67:7e:ee:c1:8c:ed:c6:03:45:51:17:fc:
                    ab:04:36:c5:81:96:d4:67:3c:35:b7:eb:ca:c2:c5:
                    bc:44:c3:73:06:39:fc:19:bd:ca:4e:b0:7b:d7:56:
                    d0:bf:e4:43:f2:6a:28:88:cd:7e:72:b0:91:8c:2d:
                    11:78:7b:eb:a7:57:13:40:7d:4e:5d:a2:fe:9d:7c:
                    3b:e4:53:50:7e:85:a3:d0:ff:b3:f8:f2:37:a2:55:
                    ee:2f:66:1b:15:bf:f8:1d:8b:50:0b:3e:fd:59:6b:
                    05:5f:d7:5b:d3:c3:0c:8b:86:c9:6d:2f:3c:9c:18:
                    ac:44:4b:71:20:55:03:ff:d7:57:ec:c5:57:3e:27:
                    78:53:56:8d:fa:8f:ba:9e:50:44:a7:80:1d:0d:c8:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BA:37:4E:8E:14:7F:40:F7:46:5A:74:89:32:17:21:D8:63:1F:05
            X509v3 Authority Key Identifier:
                keyid:11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:08:02:f4:41:e3:9e:16:48:3f:09:72:bf:03:2e:84:e6:
         a1:b8:d7:42:ba:9b:fc:c4:f3:f5:b3:dc:07:bf:a3:d8:09:e0:
         b6:67:a2:a8:15:e8:cd:bc:77:7e:ee:a9:27:46:03:d3:80:e9:
         c9:e8:37:cd:ea:d9:52:3e:51:b5:1d:02:09:df:56:5f:74:fc:
         17:5a:61:b8:0d:6d:d5:e8:4a:0c:56:96:b8:ec:88:1c:0a:de:
         88:f6:b3:92:6f:14:c1:66:33:9f:29:36:38:9d:2a:51:1c:26:
         1a:64:2e:28:09:66:0a:79:2d:30:49:4f:1f:0f:ba:ef:01:bf:
         ef:4d:d7:e9:24:1d:ab:16:3e:95:d8:e1:19:f7:be:96:d5:4d:
         1d:9a:f5:48:05:b3:76:5b:a9:c6:ee:56:d0:2e:e9:31:d5:49:
         5c:22:fc:0e:16:3a:da:09:40:db:d5:c6:dc:fa:91:9e:c4:7a:
         85:24:3f:84:b9:be:43:a3:f4:74:c4:fe:6c:2f:55:78:ae:d7:
         9b:a7:fd:f9:98:fc:09:b9:9f:2e:1d:46:6e:b8:4d:8a:cf:89:
         d2:1d:d3:f0:17:92:58:b9:73:33:72:18:ca:66:e0:ad:85:37:
         0e:82:97:75:01:2d:fd:54:2f:fb:4c:d5:b1:43:38:7e:f7:d6:
         65:04:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:31:52 2024 by rpki-client on console-fra.rpki-client.org