Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File:                     EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier:          Be7POFWe9fFADuLU3W9WFqx7BUC1abZWWV85gY4BdrI=
Subject key identifier:   DA:7E:0E:C5:6C:F1:14:23:07:A4:31:E8:AF:DA:8A:FE:72:F2:0F:1A
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer:       /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial:       018F460E7DDF8F820D9B12209925215B9C03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 00:01:45 +0000
Manifest this update:     Sun 05 May 2024 00:01:45 +0000
Manifest next update:     Mon 06 May 2024 00:01:45 +0000
Files and hashes:         1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: m2zeDK6rKgJQcTPaTEpS6RJ87Zkq7ZAX49vDt3J16Dk=)
                          2: tRZxBojpbdDGGV5XS2J3rJgGOu0.roa (hash: TSL2bYCuMHY9Y9cjVata7ZirXCJQa3BlE48g8vhHRLE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:7d:df:8f:82:0d:9b:12:20:99:25:21:5b:9c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
        Validity
            Not Before: May  5 00:01:45 2024 GMT
            Not After : May  6 00:01:45 2024 GMT
        Subject: CN=da7e0ec56cf1142307a431e8afda8afe72f20f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:b6:a6:ad:91:a8:9d:fa:6f:d5:21:95:36:
                    5e:1b:10:f6:43:7f:5b:5e:4a:03:dd:1b:c9:3d:26:
                    9b:07:4e:00:71:ca:1b:20:59:2e:2a:b0:b0:dc:3b:
                    14:fe:8a:13:8a:d8:50:ed:8e:b3:51:df:b1:77:fa:
                    99:93:e3:6d:b0:5b:6d:32:a2:de:fc:86:a2:2a:52:
                    10:ea:95:ee:24:ae:95:e9:d1:63:40:d3:52:39:32:
                    13:42:a2:45:31:ee:58:6a:5c:c9:95:f0:fc:d1:db:
                    f0:5e:d4:0d:6d:fa:1c:73:e6:e6:d8:7f:fe:2c:b6:
                    07:43:79:ea:4b:ed:93:43:55:8f:e4:5f:fb:4d:c5:
                    39:86:01:a7:ef:c1:e7:de:d6:f6:c3:13:e2:03:d2:
                    c6:1a:0d:e7:aa:b6:58:46:42:69:9f:6b:6e:19:4e:
                    8e:52:90:a0:0c:0b:c2:bb:82:84:f5:ca:f8:d1:b8:
                    8c:3e:3d:aa:b0:5f:7f:f4:a2:ce:ef:fd:69:8e:20:
                    db:df:17:df:fc:29:7e:47:8f:bf:bf:58:d0:00:72:
                    1a:ab:65:b1:69:7e:7a:b3:2a:c7:22:a2:5b:e0:3b:
                    37:50:03:a5:79:a6:f2:e6:62:26:ab:b9:90:1b:68:
                    64:87:a1:2f:12:c8:a1:40:e2:28:d8:5a:7d:f9:3f:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:0E:C5:6C:F1:14:23:07:A4:31:E8:AF:DA:8A:FE:72:F2:0F:1A
            X509v3 Authority Key Identifier:
                keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:17:17:21:a2:90:9f:a9:1d:e4:88:62:94:bc:53:8a:b8:
         ea:08:6b:3d:b4:e7:d0:a4:1f:ef:1f:37:5b:7e:09:8f:d7:d5:
         4f:dd:c2:3f:e9:a9:28:28:09:36:a7:96:92:96:95:4c:42:8d:
         29:c2:f1:0e:cb:0a:81:b4:a0:49:33:e7:59:85:b2:13:7a:3a:
         71:c9:18:32:a8:13:fe:a5:ee:40:b9:ff:be:79:52:d9:40:8e:
         ea:a9:c6:f9:14:af:08:b4:2c:63:59:a4:af:f4:22:c7:01:73:
         43:dc:bc:89:43:23:0b:bd:59:8f:93:25:52:18:78:91:02:d8:
         84:47:d0:0b:52:9e:98:01:11:a7:7b:f5:6d:5d:6b:31:62:03:
         ca:70:bf:ae:7b:5e:91:66:2e:8e:8a:0b:57:0d:ab:b4:ff:0d:
         54:07:3b:58:e8:9e:60:ca:90:5e:6a:b7:d1:8b:97:68:3c:50:
         4c:73:68:e0:59:76:7f:47:2e:51:22:74:07:82:57:20:3a:55:
         75:f4:1b:64:ff:bc:45:97:7f:2f:13:55:8e:3e:0f:d3:e5:fb:
         fe:6e:c2:82:f4:d3:23:ed:f9:3e:54:89:eb:3f:9e:f1:48:d9:
         4c:76:81:9d:c5:b4:9e:44:1b:d4:f9:3c:4d:68:89:67:97:1c:
         e0:6c:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:33:32 2024 by rpki-client on console-ams.rpki-client.org