Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
File:                     EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json)
Hash identifier:          cQwL+JJAaO+sv0ugyNW0oLIGHvml9CaTCYVv3ym7SeA=
Subject key identifier:   68:F1:0D:E9:E4:C6:DF:9D:2C:C7:13:76:8D:B9:11:AF:EE:1A:A1:0B
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Certificate issuer:       /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial:       018F44C432E08D4F196C37583D62283CA68E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
Manifest number:          05B8
Signing time:             Sat 04 May 2024 18:00:59 +0000
Manifest this update:     Sat 04 May 2024 18:00:59 +0000
Manifest next update:     Sun 05 May 2024 18:00:59 +0000
Files and hashes:         1: CgZTd4dNmMEgNLwZSzWB6POMS2A.roa (hash: xL/0pgG+LdEE6egw/iFG4LDzKJQvg/stPLrSn62D/Q4=)
                          2: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: DZrm+Wf7ojmzG8KXr4n3iC99d0yr1Qkzt2jtBcyLvkQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:32:e0:8d:4f:19:6c:37:58:3d:62:28:3c:a6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
        Validity
            Not Before: May  4 18:00:59 2024 GMT
            Not After : May  5 18:00:59 2024 GMT
        Subject: CN=68f10de9e4c6df9d2cc713768db911afee1aa10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:b8:ba:4f:4e:3c:ac:02:a0:16:d6:e3:2f:
                    81:6f:75:8e:bf:74:db:98:ec:df:87:3c:56:35:b4:
                    d9:71:98:c4:0e:91:8f:37:4e:11:07:8d:f1:be:58:
                    ee:30:f9:33:4b:93:d2:6b:a3:19:69:de:6f:11:11:
                    a1:a4:2e:b1:0c:af:c0:51:0d:d2:28:01:94:0f:bd:
                    93:d6:7c:de:a0:8c:d3:04:3a:43:c5:a9:71:f1:f3:
                    30:f2:ca:57:e1:17:e2:36:59:85:4d:c4:a8:c6:61:
                    a4:5b:f0:14:fa:0d:59:4b:73:64:68:09:e2:0d:65:
                    c0:08:a9:fb:c3:3e:25:c5:d2:08:49:8c:65:63:76:
                    ca:fc:39:6e:dd:dd:8a:4e:e9:15:89:ab:54:4c:36:
                    db:e1:0c:2a:f4:c0:65:66:d8:61:2f:db:05:53:04:
                    a9:33:0a:12:18:52:6e:91:56:79:f6:03:3d:f4:4a:
                    37:da:b2:88:c1:52:23:c5:4c:b6:de:32:66:f9:ca:
                    5b:23:d9:c5:6c:36:13:1c:bf:14:b4:84:e8:96:73:
                    6c:54:7c:35:72:94:0f:7a:15:80:d0:8b:82:0d:42:
                    a8:04:d9:5d:a4:fb:2d:18:df:fb:0f:c9:b3:4d:58:
                    a5:59:51:a4:66:83:10:6a:cf:e2:74:a4:ac:2e:19:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:0D:E9:E4:C6:DF:9D:2C:C7:13:76:8D:B9:11:AF:EE:1A:A1:0B
            X509v3 Authority Key Identifier:
                keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a6:59:14:f6:70:29:12:57:cd:6f:1e:b7:84:b8:d7:89:3c:
         35:55:9a:a3:64:67:07:18:32:8a:7c:f3:07:96:4a:53:e7:2a:
         19:da:12:92:fe:a0:49:5c:13:2f:d9:bb:e2:32:fe:1a:82:c5:
         30:20:be:52:60:7d:b4:fa:ab:7f:c8:ce:0e:b4:8c:a6:37:f3:
         fb:9b:f3:4a:e2:c6:e4:bb:5e:88:f6:67:3c:9f:fd:ff:af:32:
         6e:35:6a:10:3b:a1:91:79:36:ef:15:79:3b:19:c6:5a:37:ce:
         61:c2:f7:f0:44:81:88:3e:be:90:8b:f9:da:f1:e5:54:ae:4f:
         a3:2e:9e:1e:6c:6d:d8:e2:0e:ab:b5:0d:b1:7d:65:d5:d0:4a:
         fc:44:03:00:03:ac:bb:df:92:aa:71:6a:a7:f2:82:82:5b:13:
         21:08:ed:dc:40:87:55:68:71:fb:3e:ef:90:d3:26:89:24:31:
         ab:5a:45:98:7f:5e:bf:a0:81:9a:cc:6a:86:5e:4e:af:6f:85:
         82:db:e6:67:76:9c:90:8b:5f:d3:23:3d:ee:3c:a1:74:e9:98:
         46:7b:d4:d6:aa:99:60:6d:11:0c:fd:8b:e7:5f:70:e5:1d:ec:
         b8:03:f5:31:67:51:6e:cf:e7:e9:00:92:01:fc:17:fa:22:9a:
         f5:a8:97:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 23:12:04 2024 by rpki-client on console-ams.rpki-client.org