Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File:                     1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier:          CxkhANZrX4WtFSrjdb715Rt6g/Ib+ExsEKRudYycOJw=
Subject key identifier:   0C:E9:EC:58:31:CA:D0:02:5D:A0:1A:FE:A4:9C:9D:A5:09:56:B3:C3
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer:       /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial:       018F3BFA8660DE5E7700ED7EE64A6A000D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number:          114F
Signing time:             Fri 03 May 2024 01:03:44 +0000
Manifest this update:     Fri 03 May 2024 01:03:44 +0000
Manifest next update:     Sat 04 May 2024 01:03:44 +0000
Files and hashes:         1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: 9MJvmChSqbWpoyZlR6GUogyKjwggEjBGvlEJKL/UB7I=)
                          2: FZBs-XiLDeWJ5aTItPXxNu7Xzpc.roa (hash: b4T5BvA81dEB8ElpdVi4hUo3lNvOB+Zwv1/5R0+869I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:86:60:de:5e:77:00:ed:7e:e6:4a:6a:00:0d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
        Validity
            Not Before: May  3 01:03:44 2024 GMT
            Not After : May  4 01:03:44 2024 GMT
        Subject: CN=0ce9ec5831cad0025da01afea49c9da50956b3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:d8:a9:e6:3b:df:6d:88:74:69:69:ce:22:
                    78:b9:55:58:66:f4:94:bd:80:72:9a:19:d7:92:a8:
                    3b:73:90:fa:f9:3f:87:8b:1c:de:6c:d7:14:dc:fc:
                    2d:9b:76:ac:08:cb:5d:f6:79:4f:09:26:c0:1b:ff:
                    7d:aa:b6:47:ee:2c:25:2b:b5:9c:bd:3b:37:49:35:
                    86:85:ef:d1:47:e3:06:ee:90:ec:6f:84:15:07:cb:
                    0c:ac:9a:41:99:40:80:7f:4a:ef:de:25:96:59:04:
                    cc:28:99:e7:64:61:4c:74:93:c0:fa:1a:66:65:de:
                    d6:e0:66:10:1c:17:0d:48:96:2e:c6:f0:b6:32:58:
                    87:15:1b:9f:dc:d1:66:c1:76:fa:a4:f3:98:c4:88:
                    87:69:83:a9:1c:d5:39:70:ab:64:2e:c0:4f:7d:20:
                    b3:a5:06:73:dc:8d:f8:8f:58:54:7a:69:bc:b5:54:
                    ea:3d:7f:eb:d7:0f:3a:cd:07:73:9b:99:f3:49:47:
                    f9:bf:50:d9:7a:03:5a:c0:f9:e6:6d:cf:4f:ac:36:
                    f7:85:7b:3f:34:3d:e1:84:e4:af:b6:be:c1:be:53:
                    86:52:b8:1f:fd:5b:67:75:78:9b:06:02:ee:38:11:
                    e8:53:c2:1b:67:9f:1b:5f:c7:eb:29:90:d7:7b:af:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E9:EC:58:31:CA:D0:02:5D:A0:1A:FE:A4:9C:9D:A5:09:56:B3:C3
            X509v3 Authority Key Identifier:
                keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:84:c5:94:53:ed:a9:00:e3:93:53:7b:dd:6d:be:24:a9:92:
         7d:77:b6:1c:36:bd:4a:50:3b:c8:a6:45:7e:78:33:cc:18:89:
         2b:db:96:fe:00:06:97:c2:4b:d6:d5:b5:d2:ef:f8:6e:2e:30:
         59:f5:da:88:4d:49:6b:8e:68:e8:ed:06:5f:56:5c:bc:2b:8d:
         ce:ee:c0:00:a4:39:1d:a9:19:2e:54:58:08:32:da:29:81:9e:
         59:94:03:cf:55:f0:6f:ec:71:ae:0a:c7:ac:d1:b6:d0:a6:0c:
         7c:4c:25:72:c9:c1:3b:28:03:72:d1:75:5f:25:fc:a2:ab:2a:
         dc:c6:1f:4d:da:79:d5:f3:f4:78:dd:bf:11:eb:22:57:11:79:
         3a:08:16:ef:73:79:0a:dd:5c:c3:ad:17:82:9e:92:7c:f6:01:
         c9:79:43:22:dd:77:68:5a:9a:a5:de:a7:ba:96:ac:2a:2e:79:
         ce:09:11:57:8f:77:88:2f:14:f2:c4:d9:84:f7:d6:e8:60:9f:
         fb:a7:ef:71:d0:a9:49:0f:22:04:3a:16:a9:ce:13:d2:f8:e5:
         8f:59:ac:0d:c9:32:2a:f0:a1:fe:a9:2f:b9:87:bd:55:7b:2a:
         2e:b7:d1:93:85:cf:81:7a:fe:05:c7:62:f6:a3:f2:5a:8b:86:
         2f:95:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:16:08 2024 by rpki-client on console-ams.rpki-client.org