Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File:                     AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier:          WjZ2J93z49tbt/pxcQbAZuCOEGlC5yZhTPOh98df2pI=
Subject key identifier:   EB:A3:5D:07:EA:1A:92:BA:78:AE:BA:09:9B:50:F0:A7:2F:22:FE:6F
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer:       /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial:       018F4D5B94582F8D07E6377F753DE385D26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number:          10ED
Signing time:             Mon 06 May 2024 10:03:18 +0000
Manifest this update:     Mon 06 May 2024 10:03:18 +0000
Manifest next update:     Tue 07 May 2024 10:03:18 +0000
Files and hashes:         1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: VIuEoeSWb8LC3tOUK6P+XQKMqYRqYPKecnrjGmwKjIk=)
                          2: JuEh4lpr8rafOT1Q7kg91ORU3E0.roa (hash: Mmztap11snckrc4fTDjMM8S5re/eh9Lju1Bw7h8HDOA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5b:94:58:2f:8d:07:e6:37:7f:75:3d:e3:85:d2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
        Validity
            Not Before: May  6 10:03:18 2024 GMT
            Not After : May  7 10:03:18 2024 GMT
        Subject: CN=eba35d07ea1a92ba78aeba099b50f0a72f22fe6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:99:2c:24:95:6e:2e:3b:11:dc:55:d0:26:
                    17:95:c8:cd:b4:a7:4f:ee:a1:45:7c:1b:be:95:4f:
                    fb:34:28:ca:f3:16:b2:eb:91:a9:12:fb:9d:7d:01:
                    55:0a:c6:64:c7:09:f9:d9:7e:8d:c6:47:1f:0a:8d:
                    a5:3b:89:cf:d8:9c:1b:74:5d:c6:b5:d6:ee:0d:ce:
                    40:7f:0b:c6:52:c7:36:75:e5:06:f1:8f:fa:c9:b2:
                    46:12:f3:27:8d:2b:d6:e2:e3:1b:1f:68:ff:10:84:
                    36:10:7d:af:2b:de:6f:f5:86:8c:78:7a:31:1b:6d:
                    e7:64:59:86:cb:30:b9:59:6e:75:d2:18:35:c0:13:
                    ab:29:dd:93:a8:eb:b5:ac:0c:ca:50:0c:c8:77:66:
                    bd:df:72:8a:c5:7b:8b:19:b6:40:0c:5a:87:e7:f2:
                    2b:e5:c3:88:4b:34:1a:9e:f5:6e:9c:45:3e:59:19:
                    28:ef:b8:ab:81:85:cd:ad:09:f9:12:40:da:28:6d:
                    b2:40:d1:f0:a5:f3:62:af:47:42:29:73:61:5b:7f:
                    c6:c3:62:96:98:01:7b:95:bf:3f:5b:aa:eb:a9:e8:
                    5e:6e:25:2f:ca:d6:49:8a:51:86:2a:34:85:16:c8:
                    70:13:8a:f4:b2:5a:86:5b:bf:fc:11:e9:7e:4f:3a:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A3:5D:07:EA:1A:92:BA:78:AE:BA:09:9B:50:F0:A7:2F:22:FE:6F
            X509v3 Authority Key Identifier:
                keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:cf:17:49:73:36:56:4c:cf:53:c5:92:39:6c:1c:61:f7:
         26:4a:95:12:10:cc:f8:29:4d:83:92:a5:49:a0:46:8c:91:c8:
         ea:13:45:30:63:b4:06:26:85:59:6c:c7:c9:a1:19:68:28:46:
         78:8b:49:ab:eb:38:92:52:75:48:35:03:8d:36:34:92:69:d4:
         a3:35:46:e9:2e:c1:fe:5a:9c:8a:1e:63:4f:29:d1:84:f4:eb:
         92:33:9f:62:2b:ec:5f:2e:cb:68:36:11:96:58:c6:75:8d:ce:
         02:8c:66:3d:0f:ff:4f:79:ba:b7:e7:c1:23:72:09:88:fb:8f:
         6e:d5:a6:38:42:bc:3d:17:87:2f:a8:c9:ba:bb:d6:8b:bb:65:
         df:b4:ec:66:7d:f6:ef:02:46:6c:44:02:db:c7:8d:be:54:ea:
         18:a8:49:ab:d2:89:47:75:e5:d3:22:4f:75:ad:8d:ab:8d:db:
         4a:5b:29:83:37:4c:01:5d:59:71:0a:f9:05:d5:18:21:a9:d2:
         a0:ce:e7:5c:b7:6c:38:f3:a6:fa:55:2e:cb:e0:25:15:1b:59:
         c8:5e:e9:d4:1e:74:ac:4e:9a:23:2c:49:ec:43:08:b4:06:80:
         db:56:33:98:8c:8a:e9:f4:6d:e2:11:58:4d:7e:41:66:6a:90:
         60:f5:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:35:35 2024 by rpki-client on console-fra.rpki-client.org