Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File:                     eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier:          fyNsQxrJ5VIVbuBbXIWBbXs6AOzHQAAEuBr872H6iKE=
Subject key identifier:   F4:EA:9B:55:D9:1A:22:1F:ED:95:13:1C:59:0C:D8:53:6C:F1:E7:95
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer:       /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial:       018F87492798E6DC24A8AFB55D52732D928B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number:          0DFD
Signing time:             Fri 17 May 2024 16:01:09 +0000
Manifest this update:     Fri 17 May 2024 16:01:09 +0000
Manifest next update:     Sat 18 May 2024 16:01:09 +0000
Files and hashes:         1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: sMr0fK66+2DWXZB5zAO+pF8YaZtBUJuZzRw/iqHZ4K0=)
                          2: uWB3vb5P7hwYU3Kipr3VRidZh_g.roa (hash: cuIDvlKV3CF9CznX93cbrOrXOm1MbmjoaRxKwp3MbKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:27:98:e6:dc:24:a8:af:b5:5d:52:73:2d:92:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
        Validity
            Not Before: May 17 16:01:09 2024 GMT
            Not After : May 18 16:01:09 2024 GMT
        Subject: CN=f4ea9b55d91a221fed95131c590cd8536cf1e795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:17:fb:3f:a2:a8:3b:47:75:dc:13:8b:3d:
                    39:e7:1a:3d:8f:fb:2b:70:97:55:af:b6:00:35:33:
                    3f:bb:3d:e5:45:9f:d5:4f:01:b6:1a:9e:f2:75:04:
                    ae:47:91:1a:93:15:80:7e:f8:0d:51:95:cc:44:ef:
                    fa:6f:79:cf:dc:94:6f:0e:5c:6e:6e:62:09:81:a9:
                    15:e0:68:c8:ca:94:14:f6:34:8c:09:38:2e:fa:56:
                    60:55:52:88:71:dc:5a:9d:7c:64:6c:70:ee:9d:a1:
                    06:68:9d:23:ff:d4:24:9b:02:80:9f:0c:98:e9:56:
                    62:74:c4:33:79:f3:f0:c8:96:ae:f5:0e:bc:b9:1b:
                    f8:d6:5c:5c:64:13:72:19:ab:13:30:18:f0:85:41:
                    1d:4f:9f:b0:ff:86:64:ca:c3:66:35:e7:b4:e7:4c:
                    9e:01:20:dc:9f:48:75:7b:9c:90:de:f0:8b:e9:08:
                    b9:30:ae:c1:f7:b0:b5:47:d7:5f:71:99:0c:ec:cb:
                    33:94:67:1e:3c:82:87:0d:ca:c6:f7:4f:90:93:3b:
                    00:33:ac:59:90:2f:0d:5d:ad:50:6b:86:1b:53:67:
                    c7:5d:7d:d9:77:91:d8:5d:19:63:b0:a8:84:3c:06:
                    46:e7:aa:01:2b:ae:38:13:20:17:b3:b3:31:26:79:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:9B:55:D9:1A:22:1F:ED:95:13:1C:59:0C:D8:53:6C:F1:E7:95
            X509v3 Authority Key Identifier:
                keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:7e:c1:f1:a5:fa:6a:96:16:2c:35:00:15:6e:dd:c4:bf:
         b9:cf:91:89:24:dc:83:3e:4b:a4:f7:7b:53:ab:20:48:d2:73:
         8d:ea:95:58:f4:40:e7:20:5b:de:7b:0d:e8:ab:e2:c9:f5:1d:
         cc:d1:8b:2c:89:27:5c:70:55:df:53:f3:ef:f3:13:37:cc:91:
         7d:da:6b:57:2b:54:03:d7:bf:95:e7:62:5b:d9:2f:3e:bd:6f:
         61:3c:c4:14:8f:83:79:3c:06:e8:0b:da:89:63:37:91:9e:bb:
         c4:19:57:2f:00:80:a2:7b:3e:de:dd:e3:45:94:d0:67:04:75:
         f8:cd:e4:b5:ba:fd:5a:8a:2e:98:58:7d:40:7e:7c:61:33:84:
         f6:21:63:be:6e:29:3f:82:1c:97:e2:d5:50:d8:b5:11:d8:5f:
         24:5c:83:2e:49:e4:ce:8b:d7:a5:fb:2f:ad:ad:5c:2c:05:ff:
         71:5a:32:d4:24:06:ff:52:e5:d2:5a:9c:16:ad:93:a2:86:8a:
         bb:c3:4c:6e:0d:f5:f2:74:e4:37:0b:be:3a:64:19:78:93:07:
         1d:b7:d4:3c:25:31:e7:22:da:1c:ed:a7:41:81:a0:44:fb:85:
         26:bd:50:6a:1e:49:e1:52:ac:44:29:90:6f:cf:35:51:33:73:
         f7:10:c9:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSSeY5twkqK+1XVJzLZKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm
YTk4OTMwHhcNMjQwNTE3MTYwMTA5WhcNMjQwNTE4MTYwMTA5WjAzMTEwLwYDVQQD
EyhmNGVhOWI1NWQ5MWEyMjFmZWQ5NTEzMWM1OTBjZDg1MzZjZjFlNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK8X+z+iqDtHddwTiz055xo9j/sr
cJdVr7YANTM/uz3lRZ/VTwG2Gp7ydQSuR5EakxWAfvgNUZXMRO/6b3nP3JRvDlxu
bmIJgakV4GjIypQU9jSMCTgu+lZgVVKIcdxanXxkbHDunaEGaJ0j/9QkmwKAnwyY
6VZidMQzefPwyJau9Q68uRv41lxcZBNyGasTMBjwhUEdT5+w/4ZkysNmNee050ye
ASDcn0h1e5yQ3vCL6Qi5MK7B97C1R9dfcZkM7MszlGcePIKHDcrG90+QkzsAM6xZ
kC8NXa1Qa4YbU2fHXX3Zd5HYXRljsKiEPAZG56oBK644EyAXs7MxJnnceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTqm1XZGiIf7ZUTHFkM2FNs8eeVMB8GA1UdIwQY
MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt
ZmFmZGJlZDU3NGFkLzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk
LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcad+wfGl
+mqWFiw1ABVu3cS/uc+RiSTcgz5LpPd7U6sgSNJzjeqVWPRA5yBb3nsN6KviyfUd
zNGLLIknXHBV31Pz7/MTN8yRfdprVytUA9e/lediW9kvPr1vYTzEFI+DeTwG6Ava
iWM3kZ67xBlXLwCAons+3t3jRZTQZwR1+M3ktbr9WooumFh9QH58YTOE9iFjvm4p
P4Icl+LVUNi1EdhfJFyDLknkzovXpfsvra1cLAX/cVoy1CQG/1Ll0lqcFq2TooaK
u8NMbg318nTkNwu+OmQZeJMHHbfUPCUx5yLaHO2nQYGgRPuFJr1Qah5J4VKsRCmQ
b881UTNz9xDJ1g==
-----END CERTIFICATE-----
Generated at Sat May 18 00:08:25 2024 by rpki-client on console-ams.rpki-client.org