Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File:                     EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier:          7RcBYPveKkR/tcNroQtS+uW9XL8EBLeXexsM6FzqIWg=
Subject key identifier:   BC:43:87:E9:1D:B3:08:8B:7B:84:6C:B0:AA:2F:34:85:57:AD:90:6E
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer:       /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial:       018F42317B36BE2762D57FFC34AD9133C09C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number:          0C53
Signing time:             Sat 04 May 2024 06:01:29 +0000
Manifest this update:     Sat 04 May 2024 06:01:29 +0000
Manifest next update:     Sun 05 May 2024 06:01:29 +0000
Files and hashes:         1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: nZyg0bAPzWu5cMGVwbhVK+Vfs8AgzYWJcS2bgQ0mHvs=)
                          2: Q0lHAN_UvKv8Fyg0crDNpyAKGh4.roa (hash: ySw3otilioM4jbiqXWgj6shF/iDgaK/+iwNbVHgtzrI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:31:7b:36:be:27:62:d5:7f:fc:34:ad:91:33:c0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
        Validity
            Not Before: May  4 06:01:29 2024 GMT
            Not After : May  5 06:01:29 2024 GMT
        Subject: CN=bc4387e91db3088b7b846cb0aa2f348557ad906e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:dd:b4:9c:51:22:19:07:e0:c5:64:85:b2:
                    34:d5:52:c6:5f:2f:62:d3:15:c1:8f:82:74:d6:d6:
                    8e:93:0a:ef:90:80:a5:d5:ea:ac:3e:9f:0d:8d:47:
                    e8:dd:73:e1:39:6e:95:b9:a8:99:db:a9:f2:81:db:
                    d3:61:9f:f8:75:73:95:42:0a:7d:06:ed:90:12:00:
                    e6:02:83:5f:29:cd:5c:8e:73:5b:92:a3:0f:82:9c:
                    e1:7c:7e:bb:d0:a9:be:03:6f:e6:90:28:99:66:2c:
                    86:09:d7:b6:bb:21:f5:18:f9:80:89:61:d8:a2:9b:
                    b0:ed:05:3e:d0:bb:fc:c9:03:60:89:08:ac:eb:93:
                    13:38:27:67:70:54:48:85:2c:53:7f:c9:96:bf:20:
                    00:f5:8a:fa:90:87:71:85:0f:00:02:b4:33:4d:42:
                    d5:f1:17:ab:ad:d5:2b:55:45:3b:da:72:2d:f7:74:
                    5d:1f:89:ff:d0:f8:41:45:db:7f:81:3b:ff:6c:31:
                    8d:2a:65:85:d2:a3:a2:14:ef:46:8b:ec:61:19:06:
                    b2:1f:8d:ad:dd:a1:94:3c:34:db:53:6c:4b:4c:6f:
                    35:00:ff:f4:b6:4b:9d:76:99:c7:e9:b6:b0:36:88:
                    63:33:a0:a1:c1:1a:3a:7a:84:9b:e2:13:f9:84:19:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:87:E9:1D:B3:08:8B:7B:84:6C:B0:AA:2F:34:85:57:AD:90:6E
            X509v3 Authority Key Identifier:
                keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:ec:75:e0:3d:33:87:ec:f7:08:32:1a:b0:d6:96:33:cd:
         2c:47:3d:b3:2b:e9:c2:ca:25:a7:cc:b8:07:a4:8a:bd:aa:59:
         41:77:20:61:d3:82:f6:f2:73:94:0d:f3:24:8b:0a:e8:08:1e:
         a2:f7:a7:1f:b6:b6:d4:8b:24:9d:9b:a0:41:a5:62:83:1b:bf:
         19:e2:ef:d1:07:7d:64:17:4a:5d:65:32:0a:13:d6:29:07:82:
         36:10:b4:4d:21:df:8c:3b:b0:bb:96:69:b1:4a:40:a1:fe:c7:
         c1:dd:8d:e1:2c:01:2f:0f:48:2e:5e:e0:dd:60:38:ee:ac:5e:
         c2:20:88:fb:ce:2f:dd:94:00:50:c1:0b:a9:d1:a8:c2:46:46:
         94:32:64:1a:7c:56:d4:da:26:97:28:3a:7f:b6:12:82:3c:5e:
         5b:3f:ce:2f:94:cc:ce:a8:00:a2:c8:85:92:e9:f3:52:35:43:
         8e:97:69:02:de:36:af:d5:19:15:10:1b:40:cf:2a:3e:83:28:
         fe:3d:83:d1:57:4e:1e:b0:96:75:e2:db:9f:fc:af:3b:3e:2b:
         f6:24:5e:32:89:f2:11:3a:a1:0c:1b:8c:7a:de:3c:c0:58:3a:
         0c:3b:8c:56:6d:60:92:80:00:f4:54:88:0a:55:e7:79:68:46:
         fa:c6:82:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:06:27 2024 by rpki-client on console-fra.rpki-client.org