Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File:                     EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier:          rNgRkcONmPHn1ebXwkYJfaLgqle2U3d8BElJBykHi9k=
Subject key identifier:   77:3C:38:49:E0:F2:0B:82:46:47:9E:F2:4D:9F:F2:4B:E5:04:A1:56
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer:       /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial:       019369D956AF403037DBDDEC4FF753B635A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number:          07AE
Signing time:             Tue 26 Nov 2024 19:01:11 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:11 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:11 +0000
Files and hashes:         1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: 7J/rYHylOU4CGgJ+3nCUnC2jdnuEix2jdGHkaFsVvwQ=)
                          2: j1QS6vcWnhCOhpSrpgJRhYBelqA.roa (hash: MH6wYsjuM8ktK/rXwhEeggca51nIdEVqKz1Md4+1lFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:56:af:40:30:37:db:dd:ec:4f:f7:53:b6:35:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
        Validity
            Not Before: Nov 26 19:01:11 2024 GMT
            Not After : Nov 27 19:01:11 2024 GMT
        Subject: CN=773c3849e0f20b8246479ef24d9ff24be504a156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:54:b0:67:75:ab:9b:24:f0:3f:fd:63:a9:
                    d5:80:bb:fe:9d:30:e5:3d:48:c4:2f:cb:98:48:11:
                    81:76:af:0e:5b:02:1f:4c:d0:e5:03:6f:65:ab:64:
                    4c:0d:71:13:5e:9d:6a:87:8b:37:a0:c8:de:b3:28:
                    9c:a1:20:96:58:a9:d0:ad:30:d4:e7:68:c5:25:92:
                    79:f7:e8:80:72:f4:6b:f5:8c:1d:0e:2a:18:57:d7:
                    82:29:23:8e:4d:29:e4:7f:27:c2:3e:dd:22:fe:4e:
                    bd:91:63:1f:fd:5f:22:23:e4:9a:3e:bb:40:22:66:
                    78:66:1e:51:3d:2f:fc:a0:4d:73:8c:61:1b:3e:84:
                    74:96:2e:38:e1:cf:17:2e:ba:69:f4:1b:b5:64:16:
                    2e:9f:71:f1:cc:fb:5b:68:b3:b1:c4:37:57:bc:a8:
                    33:1c:00:2f:92:9a:1a:2d:27:11:ed:bf:e7:90:50:
                    63:e1:9b:ac:75:27:d1:d2:25:c9:b6:64:22:a9:17:
                    9a:2a:ba:3e:db:b2:b7:fa:7b:f8:36:41:6b:38:e0:
                    06:3f:5d:5a:e0:56:c8:0d:1b:b0:58:8b:d3:f2:7a:
                    fe:c2:87:15:68:9d:01:4a:2c:24:45:f0:81:ab:62:
                    60:43:b6:d5:4e:91:f6:41:2f:c1:6e:cb:a2:40:20:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3C:38:49:E0:F2:0B:82:46:47:9E:F2:4D:9F:F2:4B:E5:04:A1:56
            X509v3 Authority Key Identifier:
                keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:7f:35:16:02:c0:a3:06:fd:05:51:02:e9:2b:e8:09:de:
         04:47:cd:97:22:34:50:71:72:45:43:80:73:3a:a2:31:73:9d:
         84:3a:70:54:b1:64:2b:20:4a:73:41:f2:97:95:cb:e4:46:ff:
         fc:8e:82:d9:01:b8:bc:3c:b4:ba:6b:af:f6:0b:ab:12:d0:d5:
         c8:38:61:33:47:7e:9d:4d:54:9f:31:c2:41:02:3b:82:50:4d:
         5c:8e:bc:24:ae:b4:9c:1b:db:15:51:57:fa:cc:0c:cd:35:1a:
         90:cf:d1:16:d2:36:cc:eb:fe:31:72:b5:0c:07:db:0b:3c:0c:
         3e:53:25:81:99:32:c3:6e:54:f2:33:d9:81:f2:72:09:4d:2e:
         72:19:25:c5:9a:b0:a0:c4:d9:5f:71:0d:c6:9b:03:8e:60:0e:
         4d:5f:33:d2:2d:c3:58:79:f8:c6:cd:31:c2:27:06:3b:34:b2:
         14:68:24:41:14:e3:ae:2f:76:c6:e7:70:19:6b:af:26:37:d0:
         e8:b9:2c:ba:c4:e1:e0:ca:8d:d9:dc:a0:77:ab:d1:ca:85:92:
         c6:06:89:e9:a4:2f:83:e9:04:7a:d0:b8:89:df:3c:f7:1a:c2:
         05:a3:b0:c8:24:c2:5a:dc:7f:70:e1:9e:be:2c:e4:b3:d4:8e:
         39:c2:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:14 2024 by rpki-client on console-ams.rpki-client.org