Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File:                     EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier:          ElvL20Kj/g5BZvBIWeUm1XSQmA2khxIFVqYY6uZ5tBY=
Subject key identifier:   54:D9:E3:44:F4:30:C4:A8:36:72:97:58:0E:B0:F6:92:8C:C3:32:62
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer:       /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial:       0193572DD9FFBCBFF7DBE54F10224F332670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number:          0618
Signing time:             Sat 23 Nov 2024 04:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:42 +0000
Files and hashes:         1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: n6KldSgKSiLNfOq79H43IWenNkeP3jORQDhzMbj7uWs=)
                          2: FgL-KOXBLD6aOYzcIdmMq2z0K8o.roa (hash: pew/7t1Fwmit4cZe74ofh61E0oGoIHH6+Iiv7xgFJa8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:d9:ff:bc:bf:f7:db:e5:4f:10:22:4f:33:26:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
        Validity
            Not Before: Nov 23 04:00:42 2024 GMT
            Not After : Nov 24 04:00:42 2024 GMT
        Subject: CN=54d9e344f430c4a8367297580eb0f6928cc33262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:1b:c6:01:60:7f:f5:94:79:16:f0:65:f7:
                    67:ee:e3:ef:03:9b:49:97:4c:fe:ad:22:3a:d2:8f:
                    99:7a:c7:f5:4f:4d:5a:0a:e0:52:6f:6d:9b:96:d1:
                    84:19:82:70:4d:6c:7d:ae:d4:d7:ef:f4:63:3c:6b:
                    bd:78:eb:6e:65:22:00:7d:b6:4b:e3:07:11:d9:99:
                    98:a5:12:3f:59:28:a0:55:a7:98:76:2c:0b:ad:8d:
                    bc:47:3d:75:44:2b:6d:ed:8c:71:93:70:5e:58:e2:
                    15:17:a9:ba:1c:10:10:1f:35:bd:fd:27:e7:a3:3e:
                    28:a8:c8:77:ce:5e:31:cc:24:85:46:ba:ab:3b:00:
                    73:50:6d:ec:8b:fe:ef:b3:f6:32:89:d7:b3:2e:cd:
                    31:2f:7d:3a:80:55:b0:70:a0:29:55:54:ab:eb:19:
                    b2:7a:31:98:4f:27:7b:57:d2:02:12:fb:84:1c:da:
                    0c:96:bc:b4:3d:ba:55:96:e3:9f:95:30:0f:f0:d9:
                    96:a1:fc:1b:3b:59:4d:9e:fa:6b:4d:55:ee:d4:80:
                    3b:68:1a:ff:df:71:bb:ee:4c:16:cc:23:6f:98:99:
                    30:8c:54:d9:c8:fc:09:b7:7d:ca:ee:21:3f:86:49:
                    f4:a1:46:d5:12:41:a7:f8:37:db:59:53:46:13:c0:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D9:E3:44:F4:30:C4:A8:36:72:97:58:0E:B0:F6:92:8C:C3:32:62
            X509v3 Authority Key Identifier:
                keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:66:7d:52:88:df:be:18:cd:75:69:71:5f:a6:ca:8d:d3:09:
         4f:df:15:fa:7c:e5:91:02:86:99:a0:a9:0c:30:b0:e5:41:c1:
         11:7d:1e:55:58:95:f9:ee:2e:11:63:15:1a:3d:94:85:72:61:
         8e:91:f4:a7:2f:de:ee:e7:61:9b:95:f4:1c:42:9d:5f:83:f1:
         bc:46:e3:f8:dd:eb:7d:5e:03:a3:1e:62:77:d2:b7:61:f7:68:
         f5:a5:48:a9:02:30:15:48:5c:01:4c:4f:a8:b2:aa:4a:86:8f:
         df:be:d9:3c:36:8f:da:1f:8a:39:33:f1:73:c3:ec:e2:fc:af:
         d5:a1:e5:ef:ae:3a:4d:30:cd:e0:13:5e:c3:16:7d:04:7d:2a:
         36:57:8c:a3:58:1b:6f:57:c0:f2:70:b4:f8:60:25:8e:9f:a7:
         c8:6a:47:7f:42:0e:3d:25:33:f0:35:a8:6d:57:07:d1:c7:64:
         40:09:0d:9a:77:6d:51:80:e2:7e:44:54:ad:0b:35:dd:19:78:
         28:24:87:33:9f:dd:9a:2f:48:64:57:0b:74:6b:ee:36:9c:23:
         ef:03:26:54:6d:f8:3b:b0:c4:f3:b2:63:0b:14:91:ae:54:fd:
         4a:0b:7e:64:26:f3:48:b8:b6:c9:19:2d:28:ec:4b:53:85:2c:
         0f:8f:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:26 2024 by rpki-client on console-fra.rpki-client.org