Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
File:                     0E45j3kEn2u7gzOBCoFhyXiWKiY.mft (raw, json)
Hash identifier:          3ik3BDn8z0TXVNExHM2hYm/0OsvTFlqhuMtQx1MUumc=
Subject key identifier:   51:9E:5F:EE:2F:A9:50:7B:A2:AE:1A:DC:7F:11:39:E0:65:73:3E:89
Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
Certificate issuer:       /CN=d04e398f79049f6bbb8333810a8161c978962a26
Certificate serial:       018FB458990AC41A293D0EAAB1541E2AB7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
Manifest number:          0A8B
Signing time:             Sun 26 May 2024 10:00:56 +0000
Manifest this update:     Sun 26 May 2024 10:00:56 +0000
Manifest next update:     Mon 27 May 2024 10:00:56 +0000
Files and hashes:         1: 0E45j3kEn2u7gzOBCoFhyXiWKiY.crl (hash: zV34OCfldzHAJreVU6NbqTLUCX4xpBWocERiNlsZePc=)
                          2: 0KGRnFMZStJzkieyN2qvHMdC1Oc.roa (hash: PijVz6PZvBIWOHUvQN+pU6Nb0Lw18/2EXLk9/POSbqI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:58:99:0a:c4:1a:29:3d:0e:aa:b1:54:1e:2a:b7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26
        Validity
            Not Before: May 26 10:00:56 2024 GMT
            Not After : May 27 10:00:56 2024 GMT
        Subject: CN=519e5fee2fa9507ba2ae1adc7f1139e065733e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:cd:a0:ee:fc:7f:60:52:b1:e2:59:e0:f7:
                    4f:94:c9:11:d8:7f:e9:85:0e:6b:58:75:0c:26:f4:
                    f9:39:3b:ae:fa:51:e2:ed:93:43:ac:56:59:a4:c8:
                    f9:64:3f:b7:fc:b7:4d:15:18:ac:5c:8f:3f:85:32:
                    64:c0:60:be:76:b6:67:fd:4d:8b:7a:37:89:e6:58:
                    b4:a8:37:e9:af:8a:50:0f:48:30:ac:f4:26:f0:c2:
                    04:8c:ed:51:59:81:07:83:2d:52:96:62:1b:38:39:
                    fd:15:c9:66:c4:b2:9c:a3:f4:36:3d:51:7b:8b:b0:
                    6a:b0:2e:04:46:99:5a:39:a1:18:e1:b5:53:cb:1b:
                    ac:2c:a8:e0:1b:20:4d:61:aa:5d:02:62:4f:4a:a7:
                    a9:24:16:c9:df:6a:0b:a2:82:c2:1a:c9:d7:9b:f3:
                    51:f3:fa:03:0f:8b:e0:cf:78:b8:ad:bd:66:cf:c8:
                    ed:e3:a1:bc:b4:24:1a:30:03:c7:d8:29:27:4b:2d:
                    fb:cd:65:55:c8:ff:af:f2:ec:1d:7b:c4:5b:68:c9:
                    af:ba:2d:e5:a3:79:33:f7:d1:af:46:d2:04:22:c1:
                    ff:69:67:d4:a2:cb:71:0e:b6:04:92:7c:94:88:76:
                    d4:c4:3c:96:96:51:55:0b:74:df:89:95:67:33:f0:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:5F:EE:2F:A9:50:7B:A2:AE:1A:DC:7F:11:39:E0:65:73:3E:89
            X509v3 Authority Key Identifier:
                keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a7:02:a0:8a:94:09:51:bd:51:e1:81:18:1f:d7:7d:b9:e8:
         c9:f6:61:1a:09:1a:0d:8b:87:cf:1b:dd:07:4c:7b:6a:5a:4d:
         60:94:c8:f6:19:4a:d8:32:82:c7:fd:f8:03:4f:b5:40:60:2d:
         cb:e5:d8:89:94:d6:be:28:21:bb:6f:6c:22:da:20:ad:0e:9d:
         0b:33:9a:6c:88:cc:ce:ae:c9:a4:70:66:86:31:f7:c8:34:51:
         c7:08:51:9d:16:75:bc:f8:04:5c:d6:f5:ca:4e:fc:47:8a:d1:
         bc:9b:f5:b7:50:69:75:ae:98:f5:6e:57:1f:b1:f7:cd:68:3b:
         0f:64:f9:82:bc:cc:31:a9:80:c9:af:c7:97:b8:c6:a6:59:0d:
         aa:cb:a4:3e:97:86:08:6c:47:c4:9e:c2:25:75:e8:f2:cd:37:
         85:81:bd:9d:b4:6b:19:94:b1:63:d2:4f:3a:a9:cf:ce:b7:0b:
         d9:57:e1:d3:44:5b:3b:1c:b0:16:e8:f7:f0:c5:b9:6d:db:9d:
         77:94:de:03:2c:a6:cd:e4:5d:be:74:79:4f:c0:fc:09:d1:0b:
         6f:9c:2b:b7:25:cf:65:9b:bb:c8:78:57:dd:e3:79:e8:45:f4:
         b9:94:09:f4:68:83:d9:be:6f:77:5d:e9:05:78:81:36:0f:42:
         aa:5a:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 12:54:32 2024 by rpki-client on console-ams.rpki-client.org