Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File:                     EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier:          KucFG2lRHzB2tCpyVOEF264eX1rvmY5IXijC8rXHtQM=
Subject key identifier:   B5:28:9A:71:8D:47:56:75:63:47:04:2B:15:12:24:39:07:F0:BC:74
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer:       /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial:       018F8891EE87EA844C497C17D10D6DCA1942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number:          09EB
Signing time:             Fri 17 May 2024 22:00:16 +0000
Manifest this update:     Fri 17 May 2024 22:00:16 +0000
Manifest next update:     Sat 18 May 2024 22:00:16 +0000
Files and hashes:         1: BNkQtXiM60kiU0nw9OarYUPU-FE.roa (hash: KAnMTU1uozNUXciKFw3TttqCR8L3QyMCFO63edikSUY=)
                          2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: p4QgGcpM60y5jCBHcvRUFWUsfYTuzks1uOz3gZmdTfo=)
                          3: aLjkyAxMPisUuYCRxYnARfBfL0M.roa (hash: 9pi6Ylk00/3KLSmCG+1iIYjFj9v4sRoKnrKayG5PyBM=)
                          4: rbGJu-19FyYCfFpBw5Oxao96RdU.roa (hash: QZmOGlhNQO0zk4vlG0w6wLC0NhdZHV8cLHMUA7ZbECQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:ee:87:ea:84:4c:49:7c:17:d1:0d:6d:ca:19:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
        Validity
            Not Before: May 17 22:00:16 2024 GMT
            Not After : May 18 22:00:16 2024 GMT
        Subject: CN=b5289a718d4756756347042b1512243907f0bc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:5a:e9:da:f1:93:2f:91:e1:28:4f:9e:f0:
                    9c:2a:43:f0:c8:48:7c:2d:95:31:8d:db:53:85:71:
                    d7:e4:b7:27:ce:31:b0:69:be:c0:89:5e:17:ee:0f:
                    1c:a0:d8:b5:06:ce:2d:ab:4f:67:1b:c8:3c:de:59:
                    66:c9:c9:5a:e7:f1:7a:80:56:59:4d:6e:5e:35:a4:
                    a2:11:41:b4:d8:cf:32:48:6f:c9:a5:9f:15:c5:57:
                    8a:df:74:63:65:c9:92:9c:96:b0:3c:60:3b:d1:99:
                    28:c2:50:b1:79:a2:d4:07:8a:c1:e9:2b:b7:c4:d9:
                    9a:5f:6f:72:4f:3c:23:b4:d2:43:64:bd:47:5b:13:
                    fb:8d:a2:1a:a7:17:ec:ff:f3:d4:12:d2:ef:ad:52:
                    e7:b6:53:05:ab:61:0b:86:a4:ed:44:76:93:5b:10:
                    0d:18:08:ea:33:65:20:59:f2:a9:85:72:97:aa:f9:
                    0a:4c:a4:d1:85:0b:19:d8:44:96:43:4b:03:c3:c6:
                    1a:5d:fc:89:2c:54:f2:41:ca:3b:f4:90:b4:46:2b:
                    8a:de:31:e5:69:09:d6:4c:c5:7e:a1:55:0b:45:f7:
                    1d:be:8c:65:3e:ef:91:f0:73:db:b0:49:fb:fb:a1:
                    61:b1:7c:0b:00:9c:67:8b:98:ec:4a:55:e6:e2:5f:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:28:9A:71:8D:47:56:75:63:47:04:2B:15:12:24:39:07:F0:BC:74
            X509v3 Authority Key Identifier:
                keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:02:d2:37:51:4a:67:8e:1d:9c:a1:b6:3a:86:3e:21:ff:
         cf:73:ef:04:5e:7b:31:ae:ed:f3:23:a9:1f:77:0c:01:c0:e6:
         bf:eb:0d:12:34:ab:ac:40:e2:c0:30:08:9f:41:b8:a2:3a:38:
         69:3f:fc:f6:e4:bb:1c:08:af:44:0c:04:1d:fc:03:1d:9f:bd:
         71:b4:a8:6f:e9:95:29:cc:bb:3c:6b:37:60:3b:62:e7:07:4b:
         b0:f9:d3:1c:7f:50:00:0c:d6:5a:82:10:24:c3:b3:a8:d3:0b:
         8e:b1:15:0e:56:be:ee:cf:07:cf:3d:fe:6d:a2:e0:90:5b:2e:
         a6:27:bf:a3:c4:d4:93:f2:bb:b9:d4:9a:cb:ab:37:2e:08:58:
         ed:f2:6d:af:a8:b0:3e:3f:4f:c9:f2:3d:2f:9a:58:52:65:47:
         3a:f0:2d:6d:6e:16:0a:7f:be:88:c6:79:65:e3:7b:0a:0a:67:
         ed:8b:cb:49:3e:04:26:f9:51:f1:08:4b:f6:b3:6a:b5:a7:8b:
         ec:cc:21:23:f5:56:f8:2b:c1:c7:da:6a:d1:96:a1:2d:69:c5:
         75:df:b4:4d:0b:7a:34:ee:8b:00:fa:48:e8:bf:4c:1a:49:b5:
         ff:66:f0:fb:7e:71:6f:cd:9b:22:c5:df:81:cb:92:01:16:c2:
         31:e9:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:39:32 2024 by rpki-client on console-fra.rpki-client.org