Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          nUfPFBqohkOHtaWBXRGUAtLGh+YIDiMX8lLiIX8JZ0s=
Subject key identifier:   5D:4E:9A:7B:BE:E7:F2:49:EE:95:B6:7A:02:87:4C:23:DC:4C:19:61
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       018F87495B241EB29D5F74DBA68DC151594A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0621
Signing time:             Fri 17 May 2024 16:01:22 +0000
Manifest this update:     Fri 17 May 2024 16:01:22 +0000
Manifest next update:     Sat 18 May 2024 16:01:22 +0000
Files and hashes:         1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: 7UZLflCUzGp4y464P54H6fvdNfkBF9s+E5fn342KEgg=)
                          2: g11MGRGAPQb92pOlprC3s4OLeiU.roa (hash: pw7ZXZ0pWyEj75CHY46WYe0oL4UVPkb/NSdG3P1I8p4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5b:24:1e:b2:9d:5f:74:db:a6:8d:c1:51:59:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: May 17 16:01:22 2024 GMT
            Not After : May 18 16:01:22 2024 GMT
        Subject: CN=5d4e9a7bbee7f249ee95b67a02874c23dc4c1961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:c3:52:b7:e8:39:f6:74:ad:d3:cf:bc:af:
                    f2:c0:b6:92:60:be:c5:f5:0f:86:57:d1:f5:d3:92:
                    c8:9b:07:d0:c5:05:ea:99:72:00:63:51:bf:b9:95:
                    b2:1a:dd:a8:1e:1e:e5:51:31:e4:b6:8d:53:01:ee:
                    87:46:69:80:8a:6d:ac:ac:77:b3:cb:14:e2:14:a0:
                    ac:5d:51:2c:a2:69:d7:9e:d4:dc:5b:db:ca:e7:46:
                    13:c1:f6:17:38:60:01:c9:96:ea:2d:14:64:b1:fd:
                    e6:0b:a0:3e:3d:13:1e:ed:1c:9e:a5:5f:fb:56:01:
                    f9:0a:a9:46:b0:86:21:cf:df:be:28:12:b7:43:6e:
                    58:e4:f2:ac:eb:fa:53:00:94:04:e5:71:02:14:fb:
                    4d:58:0a:af:ec:73:6d:be:38:c5:07:26:da:3c:eb:
                    a1:d9:ed:f9:d4:ec:86:af:57:72:65:5e:2b:6e:e4:
                    9a:32:16:88:02:38:16:71:4c:92:b7:19:8a:a9:71:
                    ae:9f:0e:5b:e4:0d:c4:6a:d0:d1:96:b0:97:dd:3e:
                    a5:f6:77:aa:7d:70:49:3f:61:d4:69:d6:9a:ad:f4:
                    5f:8e:9e:fc:4f:9b:7e:3b:5e:bc:01:fd:e8:79:a4:
                    06:ba:1c:be:c7:32:62:84:ef:00:55:c6:14:4a:ba:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4E:9A:7B:BE:E7:F2:49:EE:95:B6:7A:02:87:4C:23:DC:4C:19:61
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:55:00:9b:f6:f8:db:9f:6a:05:e5:2e:35:f5:a7:b5:fb:
         f6:5a:f2:20:8a:f5:49:04:e3:3b:52:85:ba:36:3e:f7:64:8e:
         49:e8:b6:13:6c:0c:9c:fc:46:9e:3e:d6:8e:b8:c7:fe:c0:2a:
         18:c0:a8:6b:4a:45:40:00:8e:96:db:2f:43:ea:49:96:9b:a2:
         dd:b0:0c:6c:75:4e:d2:90:a6:29:67:aa:89:65:58:ea:0b:5e:
         86:31:db:b5:94:31:6b:ea:13:db:35:34:03:62:fd:77:4a:d5:
         b8:99:e9:89:f8:88:ad:ff:2b:0f:60:0e:1c:ac:f0:84:19:75:
         59:33:db:50:c7:a9:f9:a4:81:43:27:23:2e:6a:6a:2b:59:ec:
         0d:10:79:2c:65:2a:69:b2:b1:a5:7b:e7:7f:88:4f:9f:f1:05:
         d2:28:12:6e:a4:ca:1c:90:70:7a:c5:74:f6:31:76:a0:24:9a:
         79:d0:a9:45:e1:57:90:fd:ca:e2:e0:3e:dc:b0:e2:14:ec:35:
         02:6a:c1:8c:1d:fa:4c:84:55:5b:f2:04:e0:47:4a:99:e0:a9:
         83:23:f0:ec:61:13:1d:25:5e:35:7c:01:13:bc:b5:e9:cd:11:
         78:c7:34:5a:f9:67:77:99:83:61:30:68:70:b8:1e:30:55:67:
         53:05:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:27:01 2024 by rpki-client on console-ams.rpki-client.org