Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File:                     EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier:          d9iyo26umPMkqgajpzIIdvGsTSFTPWhsWtTCEZ3Rv3Y=
Subject key identifier:   3A:74:BF:24:27:81:7E:76:64:EC:A6:F2:D8:0A:FA:4B:44:AE:BC:61
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       018F57DD4A48CA3B6131348E2FB85547B421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number:          1162
Signing time:             Wed 08 May 2024 11:01:10 +0000
Manifest this update:     Wed 08 May 2024 11:01:10 +0000
Manifest next update:     Thu 09 May 2024 11:01:10 +0000
Files and hashes:         1: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: gMlVtFBvTcpxNnBuI94Sz8wWXBczHXYmbRHO72V+qMQ=)
                          2: KB-H6kNjn9ODBgLfDCq7p8C7u9w.roa (hash: fFKqfP7P9bDj4mcCmWSojqeMf9qhvDl5AGn/glMorOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:dd:4a:48:ca:3b:61:31:34:8e:2f:b8:55:47:b4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: May  8 11:01:10 2024 GMT
            Not After : May  9 11:01:10 2024 GMT
        Subject: CN=3a74bf2427817e7664eca6f2d80afa4b44aebc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:4f:21:28:04:02:93:7f:63:47:90:44:07:
                    ae:04:fc:77:23:24:62:c7:29:ee:9a:aa:01:60:58:
                    07:e2:73:19:87:c1:56:4e:50:d3:fd:bb:31:19:f4:
                    32:3e:54:da:30:e7:b2:07:ba:5f:02:ab:45:a7:96:
                    10:41:ea:5e:dc:4a:32:55:c5:15:53:52:93:e9:2b:
                    6f:c6:cf:75:13:ff:1c:33:77:5b:a5:07:0a:a3:72:
                    52:10:27:85:42:64:85:b9:ad:f0:06:13:a7:dc:47:
                    17:61:44:0a:86:83:8a:9c:e4:a8:f6:6a:74:47:23:
                    23:5e:93:9c:7d:cb:86:e4:ba:24:35:31:6d:4c:f5:
                    b8:bc:3f:c3:f5:24:bb:a6:3e:d8:cc:9e:3a:46:9a:
                    07:93:d0:28:d9:15:32:bb:a3:92:bf:c6:ce:a1:3b:
                    b4:30:90:1d:f7:32:e4:fd:f3:09:a6:a2:66:3d:2d:
                    72:5e:49:5c:ec:0b:8d:96:17:5a:cd:1b:14:3c:ee:
                    91:ba:9d:25:41:64:27:3f:e4:e4:3f:6a:72:cf:83:
                    36:e5:bc:00:27:ed:d4:49:39:5d:ea:c9:38:5a:01:
                    53:d0:a0:4a:23:78:7a:2f:d1:ab:90:2d:eb:d5:d0:
                    d5:4c:87:2f:f6:96:7a:aa:63:8b:95:94:0e:d4:0e:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:74:BF:24:27:81:7E:76:64:EC:A6:F2:D8:0A:FA:4B:44:AE:BC:61
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:91:a6:26:d4:66:c0:15:70:2f:9c:03:ba:f1:ef:4c:73:45:
         ff:64:bf:76:e0:df:3a:db:b1:02:06:d6:13:60:c4:92:fa:9d:
         6b:55:44:99:e2:5b:52:9f:6a:fd:ca:b7:07:f6:07:81:57:dd:
         8e:63:2d:94:1f:53:33:3f:9d:1d:af:27:0f:b6:ee:b4:12:c7:
         45:33:df:4b:85:2f:0b:2b:60:8c:cc:ca:d9:3c:ee:e6:a6:6d:
         43:3a:9f:a6:78:11:6a:c4:8e:7c:89:6f:97:23:89:3c:b8:a4:
         bc:ac:ff:0f:78:46:17:b9:d2:ae:de:cc:f3:b6:0d:3d:08:40:
         3d:77:7f:7f:41:ea:88:54:b5:6a:82:b6:de:c8:00:70:4b:fc:
         49:82:15:dc:0f:0d:84:df:0c:cb:ca:10:9c:a2:c8:7b:0a:35:
         a4:92:e8:c8:bd:f1:68:40:90:6c:37:89:d0:f8:04:22:37:d7:
         70:01:98:5d:8a:11:62:96:ca:c6:d3:02:33:b6:4c:69:d2:75:
         d6:c8:12:a5:d1:4f:94:00:59:01:e6:a3:4d:d5:2e:e2:fe:e4:
         45:d7:87:75:0f:b2:9f:f2:c6:ae:af:86:00:9a:74:04:ac:67:
         17:9c:f0:16:a2:f8:54:05:87:12:ff:79:99:b6:06:09:3b:69:
         a1:7c:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:06:37 2024 by rpki-client on console-fra.rpki-client.org