Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File:                     0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier:          xkIaejIc6yZ8E90RY0m2dKJW4kjB+NO/wkVpfFmIiTU=
Subject key identifier:   C4:4A:65:58:FC:E4:02:E8:4B:32:FD:42:2B:A9:4E:D9:50:1A:05:6C
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer:       /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial:       018F35889775E82FE8F31200470EE04FBF36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number:          10DE
Signing time:             Wed 01 May 2024 19:01:35 +0000
Manifest this update:     Wed 01 May 2024 19:01:35 +0000
Manifest next update:     Thu 02 May 2024 19:01:35 +0000
Files and hashes:         1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: M7WfHCyLB4RURgWavxRoQ/0qhXZUbik097hU2yRazLc=)
                          2: ixj4-pMPaRWK_Z0sj09VSlGYNHg.roa (hash: 4FyAHKTWZehEvQZugsRrb5Pes0FYL6HV/60K2yj42os=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:88:97:75:e8:2f:e8:f3:12:00:47:0e:e0:4f:bf:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
        Validity
            Not Before: May  1 19:01:35 2024 GMT
            Not After : May  2 19:01:35 2024 GMT
        Subject: CN=c44a6558fce402e84b32fd422ba94ed9501a056c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:a5:28:18:34:da:d8:b7:4f:da:ce:e0:74:
                    74:39:71:bb:cc:74:fc:4f:96:d6:47:ee:a0:6d:50:
                    2f:b9:3e:55:db:24:ae:e5:6e:cb:8a:10:45:07:a7:
                    90:2e:98:e2:46:9f:06:5d:e0:6f:9f:e7:55:51:70:
                    9f:50:32:4f:92:5a:20:4d:1a:0a:48:01:7a:c0:89:
                    81:7e:1a:45:f6:6a:3b:39:8d:25:1f:7b:13:5b:0d:
                    94:34:03:e6:ba:47:58:b3:55:b5:4d:65:69:e3:f3:
                    aa:48:2b:f3:0e:b2:e9:fe:5a:8c:0d:0b:62:4d:b2:
                    e5:50:55:eb:35:79:24:74:d0:0e:d6:c8:0d:b2:a2:
                    6d:8c:c5:c7:60:98:87:cf:23:a1:c3:1d:d6:16:b5:
                    6f:c4:6c:39:9c:60:54:8d:fb:fb:25:05:e3:01:10:
                    21:83:7b:9d:17:e5:36:97:2e:c7:80:8e:9f:6f:69:
                    b6:fa:1b:44:fc:6f:9c:63:79:87:8d:8a:42:80:c9:
                    f9:fe:4c:9d:f2:ed:74:83:d5:b1:bf:fe:fe:e2:42:
                    e6:7c:30:67:53:d6:75:0a:68:22:35:54:6c:36:5a:
                    8b:28:df:ab:90:bd:3a:dc:14:9f:25:28:2c:0b:c3:
                    33:37:25:71:db:75:56:7f:7c:93:d6:46:53:68:41:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4A:65:58:FC:E4:02:E8:4B:32:FD:42:2B:A9:4E:D9:50:1A:05:6C
            X509v3 Authority Key Identifier:
                keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:89:c6:43:d8:8e:9f:ba:be:87:65:ab:b9:5a:54:6d:29:
         f1:08:d6:76:c3:04:44:12:df:48:9d:43:a8:70:28:4d:ee:f0:
         74:3e:07:41:7e:28:37:b2:28:af:d9:12:b2:07:56:26:61:e7:
         c0:38:ac:8b:0e:89:96:c3:a7:c6:48:c8:14:67:40:02:e7:ac:
         d9:f3:36:0a:36:b3:52:1a:9c:ef:13:8e:47:53:de:ad:65:9a:
         38:d6:b4:79:f7:16:17:8a:38:dd:08:60:0c:38:d4:3f:37:86:
         90:25:21:1f:b7:b0:89:17:11:65:95:53:84:e9:26:45:db:ae:
         db:95:60:67:0a:57:c5:81:ee:1b:da:6d:b5:ee:b9:02:25:22:
         6f:45:cb:6f:18:14:dc:47:98:1b:2e:dc:f9:0b:a2:31:49:d8:
         ef:a6:7f:38:97:ad:7d:d1:8d:0c:48:7d:34:03:18:05:57:cf:
         7f:3f:1a:9b:b1:33:54:e1:00:cb:db:bc:52:ad:de:2c:01:d3:
         c1:f6:ca:4e:01:04:02:6f:61:40:62:8b:09:d9:16:bf:f2:ce:
         b7:61:e4:b4:0e:8d:0a:cc:ac:f8:34:92:06:56:59:b9:6a:c2:
         ed:3e:ad:18:3c:d3:0e:af:b3:71:26:a4:84:14:ae:53:71:4f:
         9e:12:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:57:37 2024 by rpki-client on console-fra.rpki-client.org