Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          OXH54TSnvmhKD81j7AqnjHLI/g2eFLIYKErabCC7tHo=
Subject key identifier:   7F:30:E4:3B:9E:F7:D6:D3:EB:52:42:4D:00:FA:E7:D3:62:48:5E:43
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       018F3FD5AC04636159DD654AB270A83916AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          07F4
Signing time:             Fri 03 May 2024 19:01:58 +0000
Manifest this update:     Fri 03 May 2024 19:01:58 +0000
Manifest next update:     Sat 04 May 2024 19:01:58 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: lyQTyeUIHR4SjYjEkfSTVrIFbky+tdMjhLIGgKojyW4=)
                          2: uPHq59KtqdtHqT7Hvw3H-RLwZi8.roa (hash: aa+Z962L0asF3cAFxJxFfqsts/r+TwBRMkSSBjis5IA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d5:ac:04:63:61:59:dd:65:4a:b2:70:a8:39:16:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: May  3 19:01:58 2024 GMT
            Not After : May  4 19:01:58 2024 GMT
        Subject: CN=7f30e43b9ef7d6d3eb52424d00fae7d362485e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:78:09:51:c3:94:5f:88:58:b8:88:fb:73:
                    65:3d:50:90:48:b4:0a:68:1a:b1:14:7b:ff:83:4e:
                    f1:95:90:a7:f4:b7:fc:ee:74:c9:7f:39:08:33:a4:
                    0d:4e:bf:4e:7d:79:d4:bd:91:85:c3:75:53:47:7f:
                    c0:69:a9:48:93:b4:b3:4d:22:4a:55:98:28:89:34:
                    d1:98:48:0b:72:bd:a7:b2:d9:90:47:b3:f6:79:31:
                    97:72:16:48:da:ef:bb:3a:30:e8:0d:93:7a:91:ea:
                    81:da:b9:a2:44:f8:12:86:37:49:bc:10:24:7c:ac:
                    29:c0:6b:17:2a:42:11:18:7e:55:ca:0f:b1:05:f9:
                    e1:96:5a:4c:d8:db:ac:5f:a9:de:d0:9b:56:69:16:
                    98:4f:66:5e:69:a8:72:8a:9c:ee:1c:55:62:98:44:
                    fa:e4:c5:a2:89:fa:9d:28:b7:4b:86:3d:e6:7f:29:
                    5b:a4:fd:d6:46:7b:ed:ab:3a:a9:be:a7:99:9d:6f:
                    3e:28:38:0e:ae:ae:70:60:e5:7e:80:37:60:10:8a:
                    0a:cb:bc:8d:2f:c5:71:9c:52:56:96:19:c5:e9:16:
                    7f:a1:bb:06:aa:f6:2b:d3:87:6a:d9:87:f3:7e:b3:
                    d2:4a:1f:c2:db:e6:88:c6:59:3b:c8:f5:ef:c1:38:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:30:E4:3B:9E:F7:D6:D3:EB:52:42:4D:00:FA:E7:D3:62:48:5E:43
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:20:f2:ec:c6:4a:cd:4d:6d:85:28:18:76:e5:e6:4f:0c:a2:
         7a:df:40:ad:04:db:34:f8:14:3e:8a:13:98:3e:85:d0:71:ba:
         6d:42:a6:0c:7c:1a:3d:c9:b6:92:06:c3:2f:39:52:dd:88:80:
         ff:b7:1b:a7:50:10:e1:aa:34:ce:50:b4:da:c1:2b:b2:14:06:
         bf:2c:5f:03:ef:ea:df:85:3b:c4:97:52:5c:17:1c:aa:37:7f:
         f6:e7:5a:cf:e0:e9:45:12:90:06:72:4f:af:44:5d:eb:ba:4a:
         c0:7c:88:f0:82:34:d8:e1:5e:a2:63:fa:d4:11:d8:28:d9:34:
         7c:d2:00:35:8e:09:34:e9:26:ec:c2:be:19:77:f6:f8:8c:26:
         24:e1:c9:0d:aa:30:8d:91:c4:4d:65:42:cd:3e:7e:94:ca:83:
         3c:bc:7b:99:02:3f:c8:71:e5:29:30:bf:b7:b5:8e:98:fa:bd:
         ed:77:f6:4d:89:ff:d5:2d:4e:70:bb:2b:95:7e:f1:6c:3e:de:
         30:39:06:b9:ca:a5:d0:f1:e9:48:1c:91:f1:77:a9:cb:18:07:
         87:62:39:67:a6:c4:88:19:9d:ca:00:69:07:a5:b3:63:e6:a5:
         98:46:31:13:bc:5a:bf:5e:94:35:92:e3:2c:c0:13:cb:24:a3:
         4f:1d:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:27:33 2024 by rpki-client on console-ams.rpki-client.org