Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json)
Hash identifier:          re2cZ7NhzGlLgNwiMVrUd+1Y1RVOa1fcr9xhsEr0ptw=
Subject key identifier:   66:D2:14:AF:62:F5:4D:DE:83:B6:E8:91:0C:12:5E:FB:67:1E:80:D7
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       018F1F0208080C205262AD48EBAFA40805DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
Manifest number:          0DFD
Signing time:             Sat 27 Apr 2024 10:02:57 +0000
Manifest this update:     Sat 27 Apr 2024 10:02:57 +0000
Manifest next update:     Sun 28 Apr 2024 10:02:57 +0000
Files and hashes:         1: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: GQaAywN6mAH3oEJ43GIzgjO8fy7Kwp8itMX3kkqvBow=)
                          2: adKs0DiM7Ptiws9Jyisw0BNu4Uw.roa (hash: lu9C4P2OsNY3+OCBTnePacfQnujz0h8JDNLg2l5gviY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:02:08:08:0c:20:52:62:ad:48:eb:af:a4:08:05:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Apr 27 10:02:57 2024 GMT
            Not After : Apr 28 10:02:57 2024 GMT
        Subject: CN=66d214af62f54dde83b6e8910c125efb671e80d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:72:d9:52:d5:d2:4b:a6:25:97:5d:1e:16:
                    f1:1f:62:33:6e:83:b8:76:6c:5d:16:e8:7e:6a:39:
                    03:1a:10:c5:3a:07:b2:89:76:0c:46:e0:a4:bc:e0:
                    a4:85:be:90:a8:64:7e:ae:a9:f8:ae:44:9c:e9:d4:
                    60:dc:bc:a9:0d:b7:46:6d:9d:11:36:4f:df:8d:70:
                    31:d4:99:d0:4e:6b:73:2d:93:02:41:60:f4:f7:ac:
                    25:be:34:14:60:44:96:03:9b:9f:aa:f7:f1:23:46:
                    98:0a:a8:cb:0e:89:27:61:b8:9d:cc:13:06:ca:cb:
                    0a:cd:c6:1f:3e:8e:08:52:26:40:cd:84:b2:e2:69:
                    8c:c9:01:3a:a1:f3:c5:55:66:74:1a:3d:62:4e:36:
                    de:2d:cd:99:2d:49:e5:b6:dc:d9:1d:72:de:02:62:
                    15:1c:af:02:57:cc:78:6a:1f:dd:a3:73:e9:93:d6:
                    52:32:88:7e:66:42:ce:de:c8:06:8d:59:09:8d:66:
                    81:86:e7:4b:d2:51:bb:cd:f8:e7:cb:2f:d1:67:8a:
                    d1:bd:1e:b7:f3:55:64:cd:3e:c8:3b:94:3c:1b:b6:
                    3b:1c:92:f4:d3:14:3d:5a:99:ff:1b:b8:f0:70:4f:
                    aa:76:76:27:45:da:5e:cf:f0:14:fb:0e:7a:2b:ef:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D2:14:AF:62:F5:4D:DE:83:B6:E8:91:0C:12:5E:FB:67:1E:80:D7
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:98:55:7a:1a:c5:7a:54:00:05:4d:50:da:ce:eb:95:8a:
         33:b9:6f:8a:50:8f:80:9e:48:06:8f:b0:05:c3:ab:a2:af:6f:
         3b:f9:04:1e:f5:84:2d:03:87:bc:57:97:19:28:75:0e:44:0d:
         ab:67:f5:a3:09:36:c2:94:92:b0:ea:53:9f:da:92:b4:c0:f2:
         f5:45:9a:f8:55:52:ad:05:7a:0e:1d:33:02:85:57:72:8f:c7:
         1c:1e:c9:19:93:ad:b1:25:6f:7e:9b:b2:81:67:13:42:e4:f1:
         5a:af:f1:41:c1:11:5a:90:de:e3:a1:c9:fb:4c:03:42:3c:27:
         d5:60:1e:4c:da:5a:6f:6d:c0:5c:63:d0:3d:fb:52:bf:d3:b5:
         da:71:43:cc:60:05:e4:a9:3f:f1:a1:5d:fb:aa:98:50:67:86:
         57:16:01:eb:14:ef:16:a0:e7:a4:49:c6:f2:a9:48:0c:4b:ef:
         e9:c1:2f:3c:bf:dd:95:f1:33:60:8c:49:e1:d4:c2:dd:f3:e6:
         64:44:aa:a6:06:6e:60:4c:89:bd:16:d2:d0:36:16:de:0e:cc:
         af:98:a8:4f:d0:ee:6d:a0:b9:49:fe:7e:41:b8:e7:22:9f:43:
         9a:75:3c:1d:92:37:e7:aa:d8:ae:61:45:37:6b:1f:6a:6e:bc:
         09:a1:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:10:11 2024 by rpki-client on console-ams.rpki-client.org