Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File:                     EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier:          +2lmkd7Jho2nI2MNHEIZT6vkup50Wy50uDM1Y/msmA4=
Subject key identifier:   FA:3E:77:AE:7B:20:7D:05:74:E3:AE:95:7A:22:B0:B4:F0:F8:BD:AA
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer:       /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial:       018F5703F8298A79222C49206D7A672EE28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number:          10B5
Signing time:             Wed 08 May 2024 07:03:48 +0000
Manifest this update:     Wed 08 May 2024 07:03:48 +0000
Manifest next update:     Thu 09 May 2024 07:03:48 +0000
Files and hashes:         1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: 4zamDrEaDD4qHu3KS6mUyMrWM3bPn51U12coyXiQbzA=)
                          2: EZqj58kUCwY4xc77_ybfDJaqPyM.roa (hash: z2ssv3Xoy7/vUIc/oiQ3Ip4yx2vI7RJfv9XcS5Kq6ak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:f8:29:8a:79:22:2c:49:20:6d:7a:67:2e:e2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
        Validity
            Not Before: May  8 07:03:48 2024 GMT
            Not After : May  9 07:03:48 2024 GMT
        Subject: CN=fa3e77ae7b207d0574e3ae957a22b0b4f0f8bdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:8f:3d:87:31:96:5b:fc:d9:22:83:00:32:
                    27:d6:51:61:f7:67:e7:af:37:4c:83:dd:9e:ae:bc:
                    f7:7a:43:f2:0a:39:00:e9:ae:11:65:46:e8:4d:98:
                    70:a5:26:11:d1:7b:19:5c:1a:f8:a7:f2:ca:38:f0:
                    c0:f8:22:12:20:ee:c9:34:1d:48:bb:a7:40:59:f1:
                    66:af:97:8a:4d:9d:61:21:03:c0:22:a6:18:f8:3e:
                    9b:f4:91:db:ba:50:ab:b6:a0:88:c7:04:c6:64:65:
                    f0:59:74:0e:c7:f5:b6:83:1c:82:42:bb:0c:f7:83:
                    5a:88:27:f0:e7:5d:d7:99:d7:25:b9:c3:b6:77:27:
                    9f:ff:0a:2a:56:59:67:d9:c6:53:7c:88:e4:dd:23:
                    84:6e:3e:70:a7:58:b9:ea:6d:7b:57:94:2e:cd:bc:
                    a4:da:24:0f:47:23:0a:6f:bf:2a:ab:60:1d:45:28:
                    7c:a9:01:9f:3e:66:91:8a:ee:e0:df:13:f3:1b:62:
                    15:9c:b3:68:ed:35:6d:51:d3:eb:c1:77:82:98:7d:
                    87:64:aa:8b:ec:fc:26:dc:00:22:0b:16:0d:6a:16:
                    52:af:9a:e2:09:e6:1b:b7:16:a3:d4:f0:3d:6d:d0:
                    6a:63:8a:39:b5:f9:00:e8:f5:39:cb:91:24:99:34:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3E:77:AE:7B:20:7D:05:74:E3:AE:95:7A:22:B0:B4:F0:F8:BD:AA
            X509v3 Authority Key Identifier:
                keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:3c:8c:07:a1:c8:f6:50:e3:50:1e:0d:54:ff:d9:86:0e:
         9f:5f:4f:a4:60:bb:b9:cb:53:19:34:a5:e3:bb:83:4a:2e:41:
         33:61:06:d6:cb:90:eb:3a:b4:e7:83:0a:8f:f4:68:5f:19:2b:
         41:43:d9:be:b3:57:76:52:26:f7:07:d0:05:ec:26:56:4d:82:
         65:c2:38:b9:d0:82:15:bf:31:55:58:70:92:e4:f1:66:63:18:
         2d:74:1d:86:1d:36:e6:23:93:c2:f3:c7:7d:cd:75:35:93:dd:
         e1:1f:19:0c:5f:b4:97:f2:1e:e4:45:e6:9a:bd:dc:6f:e8:2f:
         c4:ab:05:43:44:0b:04:58:e8:21:4d:1e:5a:7f:3b:1f:cc:b9:
         95:de:58:06:89:1e:e1:bd:80:2e:3f:49:4c:6a:48:a6:97:b7:
         dd:e5:3d:aa:32:e7:a3:12:c6:5b:8e:26:d2:f1:a2:c7:d5:80:
         2d:78:df:27:53:11:1c:5a:c0:79:89:8e:84:33:3d:23:e8:a9:
         d3:ac:0a:d0:6a:d4:2d:57:c5:f0:e6:64:af:c8:92:d1:ed:c0:
         ad:c0:e3:02:28:f0:5d:c4:39:63:e6:23:a8:6b:15:d2:b4:f0:
         2e:b0:b9:78:b6:f2:bc:4d:1a:97:02:9f:56:99:e0:6f:e2:74:
         29:55:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:55:16 2024 by rpki-client on console-fra.rpki-client.org