Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c71464-ee2b-468d-84cb-56cfc60a1f1d/1/EzjCRip1k_alrZgqPIEkGVmmiRE.mft
File:                     EzjCRip1k_alrZgqPIEkGVmmiRE.mft (raw, json)
Hash identifier:          AHKlPJo0Gevjfq2aC5VyEMDPTmu8qVB6I/7lytkW7h0=
Subject key identifier:   1F:83:8F:64:FF:35:A9:EE:09:A6:56:18:89:49:94:B1:13:52:6B:22
Authority key identifier: 13:38:C2:46:2A:75:93:F6:A5:AD:98:2A:3C:81:24:19:59:A6:89:11
Certificate issuer:       /CN=1338c2462a7593f6a5ad982a3c81241959a68911
Certificate serial:       018F332BEA4F4CCEE7ABD614D9A18DA03903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzjCRip1k_alrZgqPIEkGVmmiRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c71464-ee2b-468d-84cb-56cfc60a1f1d/1/EzjCRip1k_alrZgqPIEkGVmmiRE.mft
Manifest number:          09F1
Signing time:             Wed 01 May 2024 08:01:07 +0000
Manifest this update:     Wed 01 May 2024 08:01:07 +0000
Manifest next update:     Thu 02 May 2024 08:01:07 +0000
Files and hashes:         1: EzjCRip1k_alrZgqPIEkGVmmiRE.crl (hash: hhC8IfAsKjfwnXk5As8tv3f2ckfnHhCBd3CvyVPxj1U=)
                          2: uxugqkwC4zDEdJjbn_yCEZxYfEg.roa (hash: KNtl1SfNT69SM1OjDaJhmd5EiuEIE//H+GnnuW1+exQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c71464-ee2b-468d-84cb-56cfc60a1f1d/1/EzjCRip1k_alrZgqPIEkGVmmiRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c71464-ee2b-468d-84cb-56cfc60a1f1d/1/EzjCRip1k_alrZgqPIEkGVmmiRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzjCRip1k_alrZgqPIEkGVmmiRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:2b:ea:4f:4c:ce:e7:ab:d6:14:d9:a1:8d:a0:39:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1338c2462a7593f6a5ad982a3c81241959a68911
        Validity
            Not Before: May  1 08:01:07 2024 GMT
            Not After : May  2 08:01:07 2024 GMT
        Subject: CN=1f838f64ff35a9ee09a65618894994b113526b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:e4:2a:97:67:33:6c:47:d8:6c:99:3f:38:
                    fb:1a:9a:fb:9f:4a:74:7c:9d:22:2d:1e:d4:ce:60:
                    ef:8e:38:9e:cf:3c:1c:1e:cb:1d:86:b7:9c:f2:ee:
                    86:da:ec:4e:59:cd:4b:c9:76:3a:0c:db:5b:43:0e:
                    a2:53:8c:87:d8:57:1d:3e:cb:67:43:30:f2:8c:07:
                    49:73:f7:b7:18:f7:e2:69:28:14:55:cc:76:e3:e8:
                    6b:a0:99:71:cd:54:15:2f:50:4a:16:4e:76:a3:38:
                    3b:33:aa:bd:c7:91:82:a4:f2:04:4c:1b:c4:0c:0f:
                    31:8c:c3:ee:12:73:ee:29:01:1e:c2:eb:06:be:77:
                    31:d6:4a:80:5b:a4:77:f5:b5:6d:58:8b:01:30:0f:
                    d6:8f:9b:e0:83:a0:78:dd:b5:dd:81:6c:61:21:c1:
                    66:76:85:cd:01:07:59:65:06:44:6c:00:2b:16:99:
                    29:d9:12:68:2b:d9:bf:cc:b6:38:4b:1d:9d:09:11:
                    f8:28:22:b6:13:61:8c:88:b0:cf:99:6b:7c:77:2c:
                    8f:4c:a3:9a:78:2c:a9:4e:4a:c9:9b:1e:65:f3:cd:
                    ce:30:d0:38:4e:ea:b5:55:5e:31:56:c9:bd:0e:29:
                    59:16:18:2d:76:dd:da:70:13:f4:70:75:94:72:81:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:83:8F:64:FF:35:A9:EE:09:A6:56:18:89:49:94:B1:13:52:6B:22
            X509v3 Authority Key Identifier:
                keyid:13:38:C2:46:2A:75:93:F6:A5:AD:98:2A:3C:81:24:19:59:A6:89:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzjCRip1k_alrZgqPIEkGVmmiRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c71464-ee2b-468d-84cb-56cfc60a1f1d/1/EzjCRip1k_alrZgqPIEkGVmmiRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c71464-ee2b-468d-84cb-56cfc60a1f1d/1/EzjCRip1k_alrZgqPIEkGVmmiRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:98:1b:0a:28:f8:a1:10:11:8f:c4:65:4c:da:ad:bd:a7:1b:
         5b:25:9c:52:c5:bf:e7:63:54:17:0c:69:b1:67:1f:9e:c7:b6:
         97:45:77:b0:84:43:c0:78:ab:7b:76:e9:1c:07:d2:53:05:85:
         98:f0:4a:cf:01:59:04:5d:f6:3c:c7:58:5a:7c:93:05:41:62:
         6b:c5:de:e1:a2:e3:15:09:f6:35:f1:ff:72:e5:b6:50:d8:d9:
         f6:f4:89:ac:fc:0e:f7:e0:f0:a2:ce:97:44:f0:a7:02:0a:e5:
         19:6c:8e:a6:df:ea:a6:0e:ce:a6:63:74:39:3d:ba:49:1e:11:
         dd:58:26:94:98:e0:2b:4f:b0:fd:13:c0:40:5a:5d:cb:7a:2b:
         1a:04:26:08:e1:0e:a7:bc:66:9c:87:80:40:33:d3:45:44:57:
         f0:2c:5b:74:56:10:eb:4f:c1:e1:66:cc:bb:6e:d9:4a:da:fe:
         31:e5:62:bd:94:ea:33:6b:18:69:9b:ce:4e:b7:7e:3d:50:18:
         97:c9:d1:57:74:23:17:8b:e2:0a:24:6d:51:72:3a:7d:28:ee:
         76:87:05:2c:9a:34:00:ec:2b:bb:5a:d1:4d:0b:f9:41:de:01:
         1a:b5:15:b1:a8:a0:7e:8d:54:68:5b:52:9c:63:71:65:59:ee:
         76:b1:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 14:53:44 2024 by rpki-client on console-fra.rpki-client.org