Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File:                     eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier:          tgsqcTAhbC2JFZSknSZowUK+wQn62e3utHr9/PnH1yc=
Subject key identifier:   A1:11:26:26:1C:34:CC:6C:1C:1D:95:D4:34:8D:DF:41:A3:92:3B:CC
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer:       /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial:       018F565CBCA21D65D485A3AB25D4A0D6297E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number:          115F
Signing time:             Wed 08 May 2024 04:01:09 +0000
Manifest this update:     Wed 08 May 2024 04:01:09 +0000
Manifest next update:     Thu 09 May 2024 04:01:09 +0000
Files and hashes:         1: aua1G_hz1eoLOFGW6_0BMjX53Ek.roa (hash: 0sEeTRPkZ0XZ+L+0csz6QgdzZOS2TBH/naGO8QR/hKg=)
                          2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: o/1ODGin3dXaeQWXmYCf8MkH2VIZMLCAjkXmt2WORG4=)
                          3: h4jQ6TPkzKlO8REL655A5Nq83R8.roa (hash: 30+czh7xuyzDTlqiuFPeLkVV8IT1aQC8iDbbtQvATco=)
                          4: pQTCWqKgEYZZ6dViM25bl6iBYQY.roa (hash: 35HVEfzznfOd0Hwn+i/XM4iq99CPrJdxPeDOeBfp0xA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:56:5c:bc:a2:1d:65:d4:85:a3:ab:25:d4:a0:d6:29:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
        Validity
            Not Before: May  8 04:01:09 2024 GMT
            Not After : May  9 04:01:09 2024 GMT
        Subject: CN=a11126261c34cc6c1c1d95d4348ddf41a3923bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:49:c6:1d:b2:2a:ed:cc:15:f5:98:b8:38:
                    66:61:14:1f:8c:b1:01:62:63:dd:53:2d:67:a9:ac:
                    50:ad:c4:f2:c3:45:89:9d:2f:b5:42:77:93:94:65:
                    e6:ec:74:b8:c6:21:37:2a:d0:41:71:d2:a4:92:7d:
                    03:8f:bb:0e:b3:ef:7b:74:09:e9:20:0e:df:75:20:
                    e8:80:a2:27:95:88:d4:ee:b1:02:fd:ab:40:82:89:
                    90:0d:1a:24:72:7e:8c:c4:12:31:2e:3a:0c:7a:02:
                    91:a4:0c:cf:a2:59:e3:c0:59:56:13:8d:9c:c0:42:
                    11:b7:6f:57:07:7c:20:57:50:55:4b:4f:c6:4c:fb:
                    55:02:50:32:f9:e7:94:7a:a5:ae:9f:66:32:77:32:
                    26:7d:46:87:5c:25:b3:d2:d5:83:87:0a:48:47:4b:
                    74:29:ec:39:b4:5b:92:7a:63:a1:28:56:dc:5a:fb:
                    91:11:b6:0a:c3:97:d5:a4:4b:0b:d2:60:7d:54:63:
                    16:cf:c2:1c:34:a2:cb:8a:8d:b7:7a:31:9c:58:b5:
                    fa:e4:4f:d5:b6:20:d3:1d:1e:55:ff:de:40:d3:4d:
                    1d:88:f9:2f:3c:32:74:37:41:6f:81:c8:b4:6f:af:
                    35:45:72:e3:81:da:42:77:ec:f8:b8:19:12:c4:17:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:26:26:1C:34:CC:6C:1C:1D:95:D4:34:8D:DF:41:A3:92:3B:CC
            X509v3 Authority Key Identifier:
                keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:67:71:d1:83:2b:7b:0d:31:a2:96:2a:84:52:21:53:2e:
         77:0a:bf:28:6b:0d:a3:d2:38:27:4f:48:05:18:03:6d:90:88:
         e2:4f:97:d3:e7:66:9e:63:80:a3:63:c1:a8:4b:af:c7:32:74:
         6a:77:f5:c9:f8:2b:66:36:42:16:f9:a0:ef:cd:4a:25:bd:6a:
         e1:aa:55:3e:15:56:78:21:0a:7c:2d:2a:7f:06:8a:4d:4d:44:
         5f:4b:ea:62:e5:2d:05:a2:41:4b:fc:27:42:8b:33:6a:a4:ea:
         6d:c4:5d:1a:c8:87:38:c8:a3:50:d0:63:a2:84:3c:e5:fd:c7:
         70:b6:7b:02:8c:58:12:fa:fd:e0:d4:9f:9e:18:1c:77:e5:63:
         fe:89:82:f9:5a:d9:cd:8b:b2:a2:b0:14:9a:e0:99:9e:e2:0d:
         33:8c:0c:01:01:5a:e3:33:45:91:42:4c:e9:aa:0f:97:95:99:
         f0:a3:6b:5d:fa:52:cb:38:47:54:b0:d3:b7:f5:9c:70:06:a2:
         6c:65:95:0c:c3:6f:21:5b:5b:5c:64:1c:6d:e0:8a:77:c2:53:
         91:e5:5b:3f:e1:85:06:10:9b:0e:5d:fd:1c:16:89:f0:ed:92:
         15:d4:e3:7b:77:02:39:40:e6:3b:c1:7b:f9:d4:48:f6:d1:63:
         f9:e7:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:52:21 2024 by rpki-client on console-ams.rpki-client.org