Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File:                     eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier:          yU5AA9nQLC1xYHgeiicWxLKRu2ytevS/aj6ob5nuMKU=
Subject key identifier:   F6:47:56:C9:0F:D6:CB:66:EE:24:9D:66:7E:42:15:49:86:EE:03:AC
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer:       /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial:       018F87ED45F442E73FD2E62564F0D88CD1EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number:          0E88
Signing time:             Fri 17 May 2024 19:00:25 +0000
Manifest this update:     Fri 17 May 2024 19:00:25 +0000
Manifest next update:     Sat 18 May 2024 19:00:25 +0000
Files and hashes:         1: O4Nnefp50Y7fY2Tg09GaBKD__t0.roa (hash: 4DknvdFkPq43Pg1H6QLaAnM29d4hdJQe1HFsJz2E44g=)
                          2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: wRxaA2avRpNoRHly7QliI68HENpr1ajWapJA/ZOPM3Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:45:f4:42:e7:3f:d2:e6:25:64:f0:d8:8c:d1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
        Validity
            Not Before: May 17 19:00:25 2024 GMT
            Not After : May 18 19:00:25 2024 GMT
        Subject: CN=f64756c90fd6cb66ee249d667e42154986ee03ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:fe:b2:08:24:bb:43:a7:39:0d:7a:a5:14:
                    d2:25:72:fb:c9:ce:3e:40:7a:08:56:79:b4:75:7c:
                    06:a6:fe:b6:52:55:9f:9d:84:4d:1b:35:ed:eb:dc:
                    66:13:69:16:d1:56:ea:5b:6e:36:4a:13:15:df:0c:
                    a3:5f:a6:7c:58:68:54:b2:d6:95:c3:53:04:5b:43:
                    b4:04:69:41:ca:d1:d3:1e:ed:b7:a0:6f:1d:47:12:
                    35:20:44:39:d4:6f:47:69:b7:5a:bf:9b:9e:0f:82:
                    8d:9d:4f:f5:17:28:0d:83:e9:48:bf:54:37:6d:87:
                    d4:9a:80:2e:83:d7:cd:b9:a6:d5:85:86:27:56:2f:
                    b1:b8:f4:fb:f5:47:1d:fb:1d:f8:90:da:a3:53:44:
                    95:90:22:db:28:cc:a4:4e:7d:a6:18:16:06:54:97:
                    dd:09:80:75:9f:4b:7c:59:bf:20:7a:f4:bd:f6:2e:
                    e7:4a:49:3c:b0:df:ee:d7:53:bc:fb:a5:55:f5:f8:
                    9e:0d:1a:f2:ab:46:e4:5c:9a:c2:07:9d:06:ab:3e:
                    ca:a8:84:b1:9e:2d:64:0f:f3:47:06:6a:a1:65:ac:
                    b1:0d:a9:6d:57:b2:c1:e0:f9:ec:01:04:5b:e6:8c:
                    c1:5d:e1:15:ef:ed:bc:34:8c:ff:72:bc:1c:b2:a5:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:47:56:C9:0F:D6:CB:66:EE:24:9D:66:7E:42:15:49:86:EE:03:AC
            X509v3 Authority Key Identifier:
                keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:de:49:b1:60:62:62:9a:11:53:d9:97:52:25:18:aa:dd:57:
         af:95:58:37:29:23:93:64:18:58:63:ca:db:bd:5f:36:8f:16:
         a0:ae:27:39:ef:b7:06:c7:26:9e:73:f6:e8:bc:7b:27:18:e0:
         8a:2a:21:24:bf:e5:46:bd:c2:fa:6e:6a:26:4c:c1:72:97:6f:
         a9:83:d3:40:ca:a9:06:0b:01:b1:1e:e7:0b:83:11:df:de:50:
         ec:49:7c:19:b6:40:04:3b:bf:a7:ed:c5:96:0d:06:1a:56:57:
         68:31:a4:92:45:7a:d7:ec:27:f5:88:48:66:50:9e:66:c6:df:
         cb:03:b0:84:bb:80:45:48:3b:ae:45:6d:40:02:d2:6f:27:cc:
         f8:32:74:f6:90:89:08:c4:e2:cb:b4:78:f8:59:9b:12:7f:c3:
         5c:36:a4:cc:82:41:7c:43:16:f7:1b:af:90:8c:e4:5a:1d:cc:
         df:00:af:a0:b8:2f:a2:e7:8d:03:2c:7a:40:7e:21:8b:7b:e7:
         f5:c3:b6:b9:3e:6b:1a:8c:e1:21:15:8d:ff:36:de:94:5a:aa:
         c4:8b:72:e3:52:64:b3:1c:f0:fe:3a:44:85:fb:31:01:0d:fc:
         bf:bf:6d:56:9d:5c:3b:0f:5e:72:80:15:3a:95:c6:de:32:75:
         df:37:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:47 2024 by rpki-client on console-ams.rpki-client.org