Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File:                     EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier:          raOSshx12LNut7rS+xLYKv8SPA2zWurETclszqID+VA=
Subject key identifier:   CA:F9:D0:14:B0:C8:F3:65:2E:A5:70:AE:98:EF:26:86:95:58:23:EF
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer:       /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial:       018F467C4765B59A94D69E3B155F156B806D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number:          0A43
Signing time:             Sun 05 May 2024 02:01:40 +0000
Manifest this update:     Sun 05 May 2024 02:01:40 +0000
Manifest next update:     Mon 06 May 2024 02:01:40 +0000
Files and hashes:         1: 3XoRRPukq8VvKRIA2_mq2gjBthw.roa (hash: egb35O64KWiSqgQxvtlLM0znW1fhRlWgir/jbdqJ8FE=)
                          2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: wcKUAFPY0wrvvBKXvQc0ghTmqQdXQztlUAXD18TnQ+M=)
                          3: QK65NkDdaZGAU6xtRxUTZ09A-Bw.roa (hash: zqIiAAvIPLH2KBaYIWClekCol424Vo7OtIUwXhdcGcM=)
                          4: twuPeXaCG0nsacUKcPXC6idhGP8.roa (hash: z7o60zFjo2Ge7v/RI/8RCLWBGWTuasxIR3PdcMMRRPs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:47:65:b5:9a:94:d6:9e:3b:15:5f:15:6b:80:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
        Validity
            Not Before: May  5 02:01:40 2024 GMT
            Not After : May  6 02:01:40 2024 GMT
        Subject: CN=caf9d014b0c8f3652ea570ae98ef2686955823ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:5c:2c:7e:92:51:e2:f1:a2:0d:59:ea:2a:
                    94:87:ae:a3:a4:02:5d:20:ab:01:b1:be:81:81:61:
                    2a:03:69:90:25:e9:a7:1a:19:2f:f3:fd:fe:29:e9:
                    ac:e3:d7:90:94:f1:f0:f2:9d:41:4f:92:05:fc:91:
                    15:0f:2e:c5:4d:4c:ae:db:cc:f9:e0:18:b6:74:7e:
                    19:76:67:82:da:8e:34:11:16:03:3d:37:29:78:b0:
                    55:41:0d:68:16:e7:c7:55:8e:ae:ef:2d:87:64:ef:
                    72:50:e3:e3:45:03:0a:be:60:ca:0a:39:57:79:c0:
                    58:27:9a:51:9e:39:53:82:30:e9:c0:5c:6b:08:9b:
                    15:ae:0a:87:60:20:0f:f3:02:f8:1e:2e:f1:7a:1b:
                    34:76:9c:4b:c9:71:c0:20:bc:fe:ef:e3:4d:98:af:
                    4c:76:4c:48:1b:f5:9f:c4:2b:e9:58:86:eb:71:24:
                    b3:fd:c0:da:3c:a4:e9:d2:c4:11:87:47:2e:d8:10:
                    7c:4a:21:ae:73:cc:1a:0d:c4:1a:b9:4f:57:26:24:
                    53:f0:e7:45:17:66:05:0d:e2:4c:f4:4e:e2:a5:0a:
                    34:3a:d9:43:0b:90:88:f5:3b:2c:68:09:8f:f5:ab:
                    ae:b2:1e:f6:1e:07:ed:32:b5:30:7e:c1:d8:56:3e:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F9:D0:14:B0:C8:F3:65:2E:A5:70:AE:98:EF:26:86:95:58:23:EF
            X509v3 Authority Key Identifier:
                keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:aa:cb:57:2b:9e:15:7e:e4:5b:ba:ab:34:79:16:0c:36:
         8a:55:38:89:aa:95:fa:6e:07:19:40:59:cc:d9:1d:5c:5d:1a:
         6e:58:0b:0a:ea:d4:b4:47:fa:55:54:e1:a8:13:47:b7:0f:a9:
         ad:28:0e:92:2d:0f:75:3a:64:0a:b0:e6:16:31:17:3a:ff:d1:
         be:15:0b:23:4c:4e:46:6a:ac:8a:18:18:6b:4b:74:25:62:f0:
         2a:a2:9a:2b:91:62:23:3d:27:34:d7:9a:c9:a2:3e:6c:dc:5d:
         f0:bc:40:09:51:28:65:c1:14:6b:f3:53:4e:c3:07:ee:3d:b7:
         70:53:3a:46:9b:10:46:4d:c6:b0:f1:84:00:f4:8b:b1:24:0d:
         7d:ea:ea:fc:05:99:75:be:db:5c:99:51:78:48:16:eb:52:de:
         67:57:3b:df:4a:c9:f4:20:9c:a6:4f:01:85:df:d2:4b:65:23:
         c7:ab:ee:fd:86:8c:a5:9a:89:de:71:6a:bf:80:fc:09:0e:3d:
         1a:8d:48:eb:b5:e8:1c:ac:6a:f7:9c:24:58:67:57:3f:25:85:
         0b:91:5c:cd:5d:f6:71:8d:69:b7:1e:a8:65:58:eb:4a:42:ca:
         ba:02:2b:38:9a:ec:87:bf:2a:c6:59:6f:1d:8a:fb:d4:c4:e0:
         5e:7f:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:03:25 2024 by rpki-client on console-fra.rpki-client.org