Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft
File:                     ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft (raw, json)
Hash identifier:          9sGbdhTIAcdwPowbGlk9S0MQNi3ORmUZpmPURFYsbKE=
Subject key identifier:   C2:1B:2A:61:B2:91:B5:9A:2B:D1:15:32:D9:01:CC:01:C7:4D:8A:42
Authority key identifier: 7B:01:9C:40:38:6A:69:E2:90:FA:C1:66:37:15:65:FD:8D:92:E0:F6
Certificate issuer:       /CN=7b019c40386a69e290fac166371565fd8d92e0f6
Certificate serial:       018F87496EC6C9F6BF2D239B670D81702F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft
Manifest number:          10E1
Signing time:             Fri 17 May 2024 16:01:27 +0000
Manifest this update:     Fri 17 May 2024 16:01:27 +0000
Manifest next update:     Sat 18 May 2024 16:01:27 +0000
Files and hashes:         1: RzpY0h0SjyyQU6Y6Y6uFpwSRck4.roa (hash: zB0O9usn9jDIjtx/kiRHS/n3jlqX9V94Dd15COV7K3E=)
                          2: ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.crl (hash: oEWTWWPYZrfoR56p7gmvJJeLBWjoXiuDg/j0sJ7GfM8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:6e:c6:c9:f6:bf:2d:23:9b:67:0d:81:70:2f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b019c40386a69e290fac166371565fd8d92e0f6
        Validity
            Not Before: May 17 16:01:27 2024 GMT
            Not After : May 18 16:01:27 2024 GMT
        Subject: CN=c21b2a61b291b59a2bd11532d901cc01c74d8a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:ef:98:fc:39:6f:01:18:2b:7e:c8:1d:84:
                    80:70:ae:b8:b7:b4:2e:08:71:2c:4d:ae:50:ab:75:
                    d0:14:74:5e:a7:83:04:58:0d:c7:b4:ee:6f:f4:1f:
                    8b:f5:04:57:33:fd:5c:7c:08:02:2f:15:53:6a:5e:
                    53:f7:77:46:8d:20:bd:c3:16:dc:fb:22:e8:12:97:
                    f8:77:30:82:21:14:97:70:fb:79:08:c5:cc:6a:87:
                    8e:48:00:73:88:3f:aa:38:9f:b7:9c:29:68:95:96:
                    60:9b:a4:7f:70:87:37:bd:99:57:90:40:01:f2:69:
                    2f:b6:07:21:2a:aa:fc:3a:19:a1:12:ab:79:9e:d8:
                    a5:2b:08:e4:06:5f:ce:33:35:45:df:dc:79:8e:fb:
                    54:e8:b4:11:c4:77:f4:1d:a2:c9:ad:11:cc:be:9f:
                    68:77:69:a2:f0:d0:f3:74:92:e6:bf:b2:0c:50:71:
                    58:a9:cc:f0:9e:19:79:8d:2c:a2:3d:33:e2:bc:01:
                    25:51:b3:54:a6:86:8f:22:07:f1:5b:23:4d:31:df:
                    31:26:10:d5:d3:9f:d2:7e:80:58:37:58:b2:38:c2:
                    b3:b1:d7:82:b4:29:35:a2:35:2e:ed:37:a3:18:c5:
                    44:51:75:94:a7:a3:11:fd:05:db:90:d1:2f:a9:a3:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1B:2A:61:B2:91:B5:9A:2B:D1:15:32:D9:01:CC:01:C7:4D:8A:42
            X509v3 Authority Key Identifier:
                keyid:7B:01:9C:40:38:6A:69:E2:90:FA:C1:66:37:15:65:FD:8D:92:E0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:cd:33:fe:a3:d7:9c:8f:15:0f:a7:91:ed:15:e3:02:86:4e:
         4b:c6:2f:cd:cc:fa:17:05:db:60:b5:4b:00:3c:cb:1b:0d:d4:
         39:49:f6:b4:ec:59:1f:79:b1:58:dd:10:7c:da:91:6c:cb:9b:
         a4:26:d7:a4:13:d1:63:58:98:a7:bc:2b:dc:e3:38:ec:99:c7:
         85:50:5e:62:47:ec:a4:12:d1:6f:8c:01:f0:c2:af:39:2a:54:
         f3:6a:1f:a7:36:9d:8a:1f:41:42:11:62:3b:08:a8:03:00:62:
         79:de:ba:39:de:73:81:51:34:02:38:20:d2:10:2b:e5:45:c8:
         08:85:e4:88:cd:ee:eb:40:c0:9f:a8:b7:0b:e2:2d:c2:d5:48:
         8d:f1:e9:49:b4:a0:e2:a6:30:ed:70:17:17:83:ea:8a:ff:74:
         9e:91:f8:41:a7:1b:ff:1f:a3:7f:86:92:09:df:a3:cf:7e:69:
         e2:6c:7a:59:b7:a8:74:4b:00:cb:00:ba:dd:4b:72:33:c8:e2:
         7a:20:0e:66:d3:f0:a5:0b:97:29:52:80:b8:7b:56:1e:63:25:
         96:73:6d:2a:e4:c2:fe:de:e0:5d:8c:eb:47:2b:81:80:b0:9d:
         20:93:7b:62:c3:6f:a1:5b:90:e8:84:04:c3:78:3a:88:bc:12:
         06:15:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:40 2024 by rpki-client on console-fra.rpki-client.org