Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft
File:                     ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft (raw, json)
Hash identifier:          SlQEc5/RPF7zMH6m6Hi9R14Q0nKOimQ6AHP2gV/RHLY=
Subject key identifier:   56:AA:3E:77:B5:43:A8:F3:DE:4E:AD:3C:DD:48:6E:1E:84:8D:9F:59
Authority key identifier: 11:1F:4B:0A:73:AC:1B:63:3D:24:ED:5A:09:4F:DE:3A:2E:F5:1B:94
Certificate issuer:       /CN=111f4b0a73ac1b633d24ed5a094fde3a2ef51b94
Certificate serial:       018F33626F21B782C13777ACE9F622B6FF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER9LCnOsG2M9JO1aCU_eOi71G5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft
Manifest number:          114D
Signing time:             Wed 01 May 2024 09:00:39 +0000
Manifest this update:     Wed 01 May 2024 09:00:39 +0000
Manifest next update:     Thu 02 May 2024 09:00:39 +0000
Files and hashes:         1: 1-QVYSXCMeRe1mvLAfFdDFo3xYhs.roa (hash: DOTcvUjFr15RwbcT6BuPnjc8ua6GfgqCObQtevk1vUo=)
                          2: ER9LCnOsG2M9JO1aCU_eOi71G5Q.crl (hash: CDaLE6vcbS4LQPeVyJzQ5eyYHSvnfPxS99knjPlGv1Y=)
                          3: KYV1JfOwegSjf6zKBq8tHTaXmT0.roa (hash: wD6Y6M95Qq3PTzEeuNVyakktvzn4uQHlbdIgr0S7IxQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ER9LCnOsG2M9JO1aCU_eOi71G5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:62:6f:21:b7:82:c1:37:77:ac:e9:f6:22:b6:ff:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111f4b0a73ac1b633d24ed5a094fde3a2ef51b94
        Validity
            Not Before: May  1 09:00:39 2024 GMT
            Not After : May  2 09:00:39 2024 GMT
        Subject: CN=56aa3e77b543a8f3de4ead3cdd486e1e848d9f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:53:92:1c:9d:84:c3:af:2e:cb:aa:43:4e:
                    81:00:3e:e9:0d:04:7e:bc:10:80:c5:88:cc:24:ef:
                    94:a3:7d:b2:c4:ef:32:73:01:ae:10:d4:3b:ec:3b:
                    b1:d4:28:74:1f:c5:9a:82:1b:5d:a1:45:75:e1:ee:
                    9b:42:b1:f0:81:87:71:f6:17:fb:73:b0:4c:62:43:
                    ac:78:33:45:77:0e:98:0f:54:eb:92:ee:41:9a:d6:
                    d2:c9:30:cb:6e:f5:f4:c7:31:df:d8:d9:5a:c9:0a:
                    e0:9f:11:89:e4:59:a7:13:91:f4:7e:f7:d3:97:4c:
                    11:ac:31:9e:33:48:8a:3e:3f:ed:21:dd:be:17:4a:
                    3f:2e:a9:03:58:e1:7f:c6:48:a7:22:03:c0:b9:fa:
                    32:a6:f0:70:31:99:1b:d1:58:00:1b:57:09:c8:5b:
                    89:64:84:90:87:92:24:39:3e:ae:3f:57:86:43:19:
                    97:ce:ee:94:64:e9:c4:29:0d:58:bb:05:8f:1f:9a:
                    97:b2:ab:93:e6:56:f4:01:16:4d:d5:2f:3e:a7:38:
                    7c:9b:87:58:4c:9a:20:c8:b6:24:f2:b2:c4:55:3d:
                    bd:49:55:9c:5f:56:da:30:f1:60:10:af:67:71:65:
                    15:60:94:66:30:a0:3c:9c:61:9d:9f:e7:ff:b8:2f:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AA:3E:77:B5:43:A8:F3:DE:4E:AD:3C:DD:48:6E:1E:84:8D:9F:59
            X509v3 Authority Key Identifier:
                keyid:11:1F:4B:0A:73:AC:1B:63:3D:24:ED:5A:09:4F:DE:3A:2E:F5:1B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER9LCnOsG2M9JO1aCU_eOi71G5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:44:0b:82:56:bd:a8:2a:14:0d:79:fe:8b:55:e5:bb:7d:
         6a:ed:ef:a6:56:fd:ee:42:e6:78:10:3a:27:39:d6:91:ff:ad:
         4d:9d:c5:37:68:01:7f:d4:c1:e4:68:ce:74:4d:2b:0c:f2:25:
         6a:c4:0f:28:85:0b:d7:f6:b8:c7:b5:d9:6f:43:52:04:00:02:
         c8:20:2b:03:81:4d:a5:29:38:99:51:2a:ac:ff:84:49:ec:78:
         7d:4d:2e:82:89:77:1d:d8:a4:55:4d:54:f2:6b:be:b6:50:07:
         7c:8e:76:45:52:79:e1:cc:69:45:81:5b:ef:a7:73:32:a8:24:
         81:61:11:39:07:6f:14:49:ba:50:c7:df:43:01:dc:48:19:71:
         1c:36:dd:ed:69:8b:dc:1a:8c:e3:cf:93:13:f0:0d:2a:49:0f:
         aa:a9:08:21:ae:41:c1:96:d3:8e:81:b4:15:ad:13:b7:1d:93:
         95:af:ed:33:fc:0f:10:72:56:58:d2:25:7b:70:9e:f4:3b:a0:
         af:73:86:48:4b:96:b1:8d:34:0a:ad:83:3f:1a:39:1b:81:c0:
         66:7d:b4:37:69:b6:1f:51:6e:d7:2b:be:61:8a:e4:e0:c6:c7:
         0a:cc:36:0b:b0:77:43:60:4e:0c:a0:b9:f0:59:e0:db:6d:b8:
         51:4c:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 14:29:13 2024 by rpki-client on console-ams.rpki-client.org