Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
File:                     EADA16WawvWYBOfDUV8UzS_VDZc.mft (raw, json)
Hash identifier:          ULu9o75Hz5cLE05yN+2yofWy6mTAYB15gXCiobw0h7k=
Subject key identifier:   ED:E8:E1:40:DD:15:1E:44:36:45:0A:79:E7:14:58:E2:A1:F0:C0:5A
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Certificate issuer:       /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial:       018F306234B4C89D2164D33532843F3275F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
Manifest number:          114B
Signing time:             Tue 30 Apr 2024 19:01:33 +0000
Manifest this update:     Tue 30 Apr 2024 19:01:33 +0000
Manifest next update:     Wed 01 May 2024 19:01:33 +0000
Files and hashes:         1: EADA16WawvWYBOfDUV8UzS_VDZc.crl (hash: ctVWoDp/vwvpYV5G2gGvA5Mm34g8Z2cZJNavaIhPKyw=)
                          2: x9oVQsgEoZLAIsEEASIddhz_utg.roa (hash: LPLw2MwZApK6XtW2Xm+m1EnRruFG0IMkSVBSNVCYP9U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:30:62:34:b4:c8:9d:21:64:d3:35:32:84:3f:32:75:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
        Validity
            Not Before: Apr 30 19:01:33 2024 GMT
            Not After : May  1 19:01:33 2024 GMT
        Subject: CN=ede8e140dd151e4436450a79e71458e2a1f0c05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:49:97:71:e1:8c:28:c0:55:66:f8:05:28:
                    72:5c:86:7c:fa:a5:87:a2:09:d2:ab:26:5f:62:42:
                    f4:d6:54:8a:a4:58:86:82:52:6f:38:ab:53:b6:92:
                    a0:bd:a8:43:0b:13:6f:ef:06:16:16:44:c5:cf:a1:
                    97:4e:fb:db:e8:5a:62:8f:85:ac:1a:0f:4f:98:6e:
                    a2:62:b6:1d:ac:85:19:d7:bd:ad:b7:d0:69:df:02:
                    52:bb:5b:6d:60:b3:34:d4:51:d1:2f:13:ce:c3:d5:
                    6e:9c:78:de:f8:52:d1:a5:47:8a:2f:3b:e5:58:5d:
                    25:0c:e9:bb:ad:49:11:26:02:81:b9:7c:ec:bf:b3:
                    e9:67:b3:9a:06:ce:a8:45:9f:74:f1:59:67:20:9d:
                    c9:d6:50:47:f6:60:fc:09:72:e7:25:1b:0f:ea:cf:
                    49:9b:bd:61:e1:f0:88:5f:79:e6:3d:1d:51:c8:27:
                    ab:1d:cc:3d:f1:b9:c5:ae:6a:48:11:f5:8c:09:8e:
                    e2:03:91:29:e3:f2:57:3a:2c:88:a0:06:6d:fb:25:
                    2c:8f:e4:51:43:c3:6e:98:88:8e:e6:ae:e4:36:aa:
                    b9:dc:87:1b:e8:bb:2e:df:b6:76:69:c3:86:9b:c8:
                    e6:67:52:52:95:29:b7:6f:65:fc:56:48:ea:f1:6e:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:E1:40:DD:15:1E:44:36:45:0A:79:E7:14:58:E2:A1:F0:C0:5A
            X509v3 Authority Key Identifier:
                keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:4c:f0:0e:79:7a:1a:bb:c9:c4:af:88:71:a4:6f:7c:6c:
         02:90:db:26:42:8f:0f:35:8f:6f:25:ce:78:7f:76:fa:20:fb:
         42:92:8a:74:a1:75:11:8d:10:74:53:4a:a8:93:d8:b1:d7:3d:
         63:51:2d:5a:bd:11:e8:79:95:d8:1e:b5:ff:f0:ad:77:e4:7c:
         37:2a:bb:0c:d0:f6:7e:b0:48:1c:c4:82:c9:a9:64:6c:fe:44:
         10:78:6b:76:d6:0e:32:20:d3:e4:31:cb:37:b4:ad:b9:17:7b:
         d1:83:05:7d:d1:89:2a:ee:46:bf:8c:0c:49:19:ff:a9:bb:63:
         68:17:8a:38:b8:89:be:13:3b:e7:75:98:10:b8:64:a8:7b:d3:
         f9:a2:66:55:62:de:72:e4:fd:3f:e0:86:2e:77:f9:4d:ab:3c:
         f2:b6:a0:d2:2a:8a:43:95:44:b7:f5:fb:02:6b:ed:78:35:19:
         45:4b:8a:8c:a9:57:26:27:29:cc:e3:75:59:88:5f:c5:c8:8f:
         ac:ea:b8:19:68:e1:4b:ec:48:e1:d8:2d:51:c2:30:1e:d7:ab:
         f6:31:88:fc:47:83:1a:98:d2:eb:ee:41:de:10:80:fd:99:7c:
         fb:3d:f6:51:c6:5f:8c:91:46:9f:a0:b8:62:f4:b3:0c:25:3f:
         ff:ad:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:04:39 2024 by rpki-client on console-fra.rpki-client.org