Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
File:                     EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json)
Hash identifier:          xWEUCiCj2yXRoGXQpS1yDzDw1307J+T1+eNtaQ0+rXE=
Subject key identifier:   57:13:3C:6A:98:29:F5:95:9C:89:FB:F4:FF:DE:38:1D:45:85:B2:13
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Certificate issuer:       /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial:       018F3AE5B8A246EC5D71C8E545ADF7E52E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 20:01:24 +0000
Manifest this update:     Thu 02 May 2024 20:01:24 +0000
Manifest next update:     Fri 03 May 2024 20:01:24 +0000
Files and hashes:         1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: jwcVqxfi+2DO0gFODatrUGwQ5A2q+RFykA9O1fTXMlk=)
                          2: HZ-xV0rVs4hgJM9Mt1g6CC1EC2Y.roa (hash: fX25DvxC8ck7d5KYchNbL6AlgFroAvEOi7Y6UzUbESg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:b8:a2:46:ec:5d:71:c8:e5:45:ad:f7:e5:2e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
        Validity
            Not Before: May  2 20:01:24 2024 GMT
            Not After : May  3 20:01:24 2024 GMT
        Subject: CN=57133c6a9829f5959c89fbf4ffde381d4585b213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:d9:51:2d:41:c6:ae:7c:fd:39:cf:64:01:
                    c0:9e:dd:d6:68:49:bf:e5:b3:48:8d:03:56:01:11:
                    de:3c:01:64:87:00:a2:f4:1e:39:0f:af:e0:53:a7:
                    91:7d:9d:78:73:78:37:d8:b0:30:f5:23:e8:f7:28:
                    1a:79:68:0e:36:97:e6:47:46:2b:8d:c4:e6:6f:58:
                    45:c1:e1:57:49:5a:d7:b9:2f:c0:14:54:89:85:89:
                    66:5a:6e:0b:e4:29:61:76:66:a0:37:a4:b1:12:80:
                    f9:68:55:f8:94:c6:ee:7e:a2:b2:a5:47:20:fc:50:
                    51:e8:a3:bf:b3:a1:2c:68:8b:08:25:88:f9:43:4e:
                    68:0d:c5:a9:38:2c:e5:49:41:88:c3:2f:be:34:54:
                    2c:04:e5:55:c3:ee:40:dd:4b:a7:c2:9b:e2:ec:ff:
                    d9:8f:69:6a:fd:17:1e:89:99:19:05:37:84:64:19:
                    0e:e6:df:93:5e:81:90:53:0b:47:35:3d:48:6d:2a:
                    ed:3f:2d:fd:2c:e6:29:2b:18:de:a7:4f:28:4d:53:
                    e7:1b:ff:99:29:ec:1c:5a:db:b4:9c:cf:74:ea:06:
                    96:91:fc:74:1b:0f:85:db:61:2d:c5:90:b4:8d:19:
                    f8:5b:22:8a:17:f3:93:07:e9:24:71:c6:a3:47:67:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:13:3C:6A:98:29:F5:95:9C:89:FB:F4:FF:DE:38:1D:45:85:B2:13
            X509v3 Authority Key Identifier:
                keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:47:8a:70:b3:21:5a:30:06:9a:d0:04:a6:3f:f3:fa:1b:f7:
         86:9f:64:09:b0:3f:90:14:42:97:08:cc:3d:e1:d6:d0:d7:7c:
         3e:e1:5c:ba:65:79:e9:e0:27:d4:a8:9b:18:ea:75:37:ed:3d:
         f1:e5:3b:53:7e:ac:47:9b:b2:bc:9c:a7:f8:c9:c8:79:7f:47:
         fd:0f:18:2a:09:14:18:55:62:31:d4:4e:d5:bd:93:cc:24:a3:
         13:ac:27:db:d8:00:4d:a4:4a:5c:b4:0d:ea:e2:fb:f5:c9:f4:
         0f:53:9a:5b:c5:ca:1d:09:4a:dc:62:4d:2d:2e:41:d0:ab:56:
         a8:04:ad:64:8f:e8:84:f4:28:7e:31:1e:29:61:7a:54:72:20:
         1f:2b:52:03:48:b4:86:25:79:eb:e9:dd:39:81:68:7c:bc:37:
         d5:7b:bc:07:ca:97:88:e8:25:19:b6:4d:71:4c:2b:b1:51:73:
         99:ba:cf:71:ab:89:1a:65:87:59:ac:1b:df:99:e5:98:fc:4b:
         57:f9:39:3c:4d:6b:be:99:67:ba:30:12:ac:19:e8:85:fc:f8:
         68:1a:83:4d:69:46:7b:79:47:96:23:ba:72:9c:a8:5a:30:c4:
         84:0a:7c:46:50:2d:2e:8d:d1:c3:95:5d:a7:90:99:10:dc:ab:
         57:0e:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:42:06 2024 by rpki-client on console-fra.rpki-client.org