Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          kYUqYIzvBlkxigEtq39LZr2ukIHggklsjU+R1MItFVY=
Subject key identifier:   70:AD:37:57:CF:E4:87:E4:97:0A:BD:25:A5:AD:68:22:7E:CA:46:32
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       01923994813D3459DE919EC19E9AFCA9DAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          12DD
Signing time:             Sat 28 Sep 2024 17:01:26 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:26 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:26 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: vzF6ez+NtYPJkpdCreRu3iyu+RIGjfMr/MZ0zRZt4tA=)
                          2: _azbUa_spbOSlCL7odY9gCUMMww.roa (hash: zMl3Tf1DpfxmQgEPOSptd5lTaGmbBkgvJ2Ut508MPmI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:81:3d:34:59:de:91:9e:c1:9e:9a:fc:a9:da:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Sep 28 17:01:26 2024 GMT
            Not After : Sep 29 17:01:26 2024 GMT
        Subject: CN=70ad3757cfe487e4970abd25a5ad68227eca4632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:e0:44:c7:b9:df:cf:a0:be:af:6f:8f:43:
                    d3:db:7c:44:bf:80:2b:19:35:e7:87:32:4e:a9:54:
                    37:5a:78:f1:fa:dc:02:9e:4f:ba:41:5b:e8:c9:68:
                    66:a7:88:36:3d:c3:05:6a:c1:f1:ff:2f:e7:00:21:
                    48:ab:4d:74:59:aa:0a:80:73:99:f6:27:52:07:7c:
                    8b:10:9e:fd:0f:b5:09:23:16:0c:64:74:1c:0d:14:
                    ac:fe:15:9d:88:63:6b:3f:cb:10:be:39:9a:71:0d:
                    db:82:ef:ef:28:95:78:88:c9:37:4e:6f:f4:58:fd:
                    c9:fa:30:7a:3e:de:64:5f:74:e2:7e:dc:51:d7:fd:
                    48:04:b1:76:2e:5a:8f:a9:fe:b7:f1:8a:ff:18:65:
                    d4:6d:34:b4:4d:29:f4:e3:04:36:2d:40:cb:17:31:
                    79:36:91:4a:6a:20:01:98:90:2c:a1:c6:8c:1c:76:
                    94:07:2d:d4:00:d5:5a:59:09:cd:d1:6a:cb:0b:79:
                    45:ef:1a:82:49:26:19:e0:99:09:d7:9f:b5:65:e3:
                    1b:72:fa:5e:8d:f4:7e:3d:33:19:9d:2a:07:78:71:
                    55:4b:dd:31:e6:3c:71:2d:13:e0:43:aa:2a:59:9b:
                    54:b9:2f:18:fe:af:d3:9d:56:b3:f7:bb:60:ce:75:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:37:57:CF:E4:87:E4:97:0A:BD:25:A5:AD:68:22:7E:CA:46:32
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:12:2a:1f:77:55:d5:67:50:ff:2b:aa:1a:8f:80:1e:e7:80:
         4e:b8:e2:be:e9:ca:a6:ce:e4:e9:9e:5f:23:9b:9b:cc:e2:69:
         ea:2b:1e:b0:bf:fe:31:d6:dc:e9:da:24:c1:8e:82:57:36:6e:
         84:a8:47:32:3d:2d:17:ce:07:d8:75:34:82:0e:b1:c8:39:4a:
         b3:ba:85:2a:67:24:09:8c:fe:e6:7c:6f:a6:bc:70:c6:c0:74:
         a0:1f:90:77:3a:47:78:6c:aa:0e:49:bc:9c:7c:dc:5a:f0:3a:
         b8:b1:4d:99:06:b0:06:22:81:b6:e9:da:e5:84:60:c4:7d:a2:
         02:ca:ed:b7:57:e9:8f:fc:73:60:94:54:a6:02:5c:f7:68:de:
         ee:01:18:c6:69:ab:df:16:ff:20:c9:47:55:da:43:d1:d1:4b:
         db:68:2d:fc:82:cf:3b:87:46:9e:ac:8d:f0:12:72:d9:05:b7:
         fb:ed:e7:3e:f6:59:62:76:cb:d2:6c:5f:88:d5:1a:60:dc:68:
         09:54:0d:d0:30:5b:6e:e7:a2:23:f2:cb:c2:18:e5:fd:c8:8d:
         77:e2:f4:15:c6:c5:cd:67:35:1a:29:99:9a:ac:05:42:f5:80:
         dd:79:6f:6e:ab:68:f1:22:e7:28:19:a6:e9:69:1c:06:a4:a7:
         4e:1d:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:25:00 2024 by rpki-client on console-ams.rpki-client.org