Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File:                     EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier:          pXQekrs073f0YcE+KUFajidFAVGMEYKPMMZcqXZ3ALs=
Subject key identifier:   90:E7:C7:46:5F:00:DA:63:C8:3A:E6:6C:9F:C6:1C:D4:B4:53:92:3C
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       018F8FDE28DAF922120FDD4D04851939C426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number:          1207
Signing time:             Sun 19 May 2024 08:00:52 +0000
Manifest this update:     Sun 19 May 2024 08:00:52 +0000
Manifest next update:     Mon 20 May 2024 08:00:52 +0000
Files and hashes:         1: 0gJKYf93VPJGNSnnyVLxfMGEhww.roa (hash: RX7KP5Ht+eEdB0Nc6KBbLCRV0hvdl3MKshRhfjPt7mI=)
                          2: 5_Ej464Vs3zO8DcMYmjt_vNkkTg.roa (hash: 44uzAwkgWFg7UNaX2yrMf3C674V1G5dP55vhnF6anrs=)
                          3: 7LXKwsafhv6pxu7DheBQQzyR1fQ.roa (hash: iR7wDhor6h7SPaoX9JsDmDM4fs5NTH8Qm5ujb1T2oJM=)
                          4: 93kabwqQ9zbFLdwN9dtXb0NiXo4.roa (hash: NQV92hweSMfzDtgTcgv2vSKYT+J6XTYPO0CbvgiCWZE=)
                          5: Dxq9NOgPjIqrJaH_RcWOf9pfnxs.roa (hash: jqym2Yl879hB8UsEC5yhqUV8lcMzdM0htgva3eDLxqY=)
                          6: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: QNLfVz/VfmeT1bnomwDzhFiM5g0ghtzz5i/tfsr1gbA=)
                          7: O5i2oJj8ScwhCg_2jFQT8IOL5lU.roa (hash: vpt79Lqh/6pZbHFAfqYayd6pG1CI726G+fWVXdqgOso=)
                          8: atx3whVlDC-3o8heNsqwUARDJbM.roa (hash: 8snqX/XkaTOESZ80Z0LeJOLNu/rST5RuSl7IOQUoLxE=)
                          9: fbeWzzXDUcMuL-oX7KQbeJ9_Q3E.roa (hash: s5D3tRVSaHV2OQ4TvqsU8OUQLJ9PVKYBG1dWQFZRKfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:de:28:da:f9:22:12:0f:dd:4d:04:85:19:39:c4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: May 19 08:00:52 2024 GMT
            Not After : May 20 08:00:52 2024 GMT
        Subject: CN=90e7c7465f00da63c83ae66c9fc61cd4b453923c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:f3:74:21:5f:81:01:fd:fc:93:62:32:4c:
                    4b:ce:79:dd:22:a9:bb:50:fc:b1:6b:c6:07:e7:6f:
                    a9:63:e9:86:eb:01:a4:74:1f:8e:31:39:d7:0f:6d:
                    b2:ee:8b:93:81:17:f1:54:b1:ba:7e:eb:30:c0:29:
                    53:d5:fa:72:ad:0f:84:9c:1d:6b:fd:38:f9:59:90:
                    a9:ae:e7:fc:f3:5a:d1:70:65:7f:10:60:2a:11:a1:
                    55:f0:17:ea:a3:63:6c:e0:f1:49:21:22:ca:78:ae:
                    79:68:35:25:59:0d:18:b0:c6:4d:9f:08:a9:4a:40:
                    0b:39:2d:aa:be:1c:a1:8a:f5:aa:65:bb:14:fd:88:
                    81:ba:62:58:a4:5d:70:da:28:82:82:46:84:41:13:
                    47:8c:a6:1f:86:86:c5:c2:1c:24:4c:af:de:53:d0:
                    e3:9e:bb:a1:b9:cb:15:24:2d:a1:51:63:d9:89:bb:
                    31:f1:c6:4d:52:f6:ce:6e:6f:a6:2d:16:68:a3:b4:
                    ee:03:5d:6e:6a:00:04:97:f6:11:63:c1:53:a6:bc:
                    17:a9:eb:a8:c4:26:91:fa:84:0c:36:3f:ff:a9:2f:
                    aa:54:78:ff:7b:ff:42:c2:6c:fe:6b:97:a1:4a:d3:
                    82:75:05:7e:b0:db:77:97:0a:87:3b:3d:18:25:8a:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E7:C7:46:5F:00:DA:63:C8:3A:E6:6C:9F:C6:1C:D4:B4:53:92:3C
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:23:b7:ab:6f:f7:af:61:30:38:1f:49:c7:3e:7b:1b:4e:ed:
         09:db:31:1c:78:0c:e5:c6:ca:9f:04:b1:79:08:cc:ee:24:7a:
         02:55:13:b3:20:ca:5e:11:3b:71:78:4f:4c:b5:9f:66:05:30:
         e3:46:98:fc:25:e7:1a:8f:f6:14:c2:ce:40:1b:ab:99:b4:1c:
         b3:44:db:62:d3:9a:b3:f0:cf:bb:a3:55:c0:82:09:02:e2:1b:
         68:09:5a:65:b8:7f:6e:12:35:97:6d:45:d0:1d:09:2f:d9:f8:
         a2:89:40:4a:8a:e9:7c:23:f5:c3:59:be:0f:70:4c:63:18:cc:
         1c:ec:a3:ca:5d:80:4f:0a:a6:aa:7f:04:16:c6:c0:9b:bc:7e:
         7d:14:64:dc:de:e5:69:6f:7c:bd:fe:c6:11:5d:84:90:b8:e0:
         dc:cc:55:e7:94:53:33:15:6f:db:66:05:33:f0:97:e7:c6:31:
         8f:4e:5a:fc:a1:9d:42:50:8d:e7:17:ad:78:d6:2a:9e:11:af:
         86:80:76:1d:c7:03:1d:03:eb:12:06:ce:b2:22:00:34:cc:a3:
         bb:c8:49:88:98:88:a2:4f:41:c5:d7:d1:23:bd:fd:91:5a:d1:
         d8:29:72:ec:21:84:5b:67:44:af:ac:f3:21:a7:0c:fb:4d:50:
         4f:b2:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:17:27 2024 by rpki-client on console-fra.rpki-client.org