Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          2CrDwixUAkmLlHaD4xAlEhweXH9sCTod251z8lP4IEc=
Subject key identifier:   CE:1A:35:03:8F:A9:02:85:D0:F9:E9:4C:D8:49:A1:CC:13:1D:2D:2E
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       018F8E5D2F32DFB4D59EB677A20EF29A766A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          11A5
Signing time:             Sun 19 May 2024 01:00:22 +0000
Manifest this update:     Sun 19 May 2024 01:00:22 +0000
Manifest next update:     Mon 20 May 2024 01:00:22 +0000
Files and hashes:         1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: Ja9vbCskpDoai1F21i8+oJ1s2Sv65ZnpluTG2yHRoF8=)
                          2: NsqSzw41-YuZhgDMX3Id8Yd837s.roa (hash: BFduQOb/MErKWieJCpwc+pBjCGfO2J/Sauxk/e3hALI=)
                          3: XVhVpnOdEZVRV5hEuq2WDRehEoQ.roa (hash: hSbpcF93U+q6ixuPIJOr1Xrm0ZkUuY2iDECQtM72mXQ=)
                          4: sSVxvj5ii50Swv_7SOuBqdiz_0I.roa (hash: u8yBN5Rp2LYT5s55M22ASvsonYHjx2lN/lGjm+tmyc0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:5d:2f:32:df:b4:d5:9e:b6:77:a2:0e:f2:9a:76:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: May 19 01:00:22 2024 GMT
            Not After : May 20 01:00:22 2024 GMT
        Subject: CN=ce1a35038fa90285d0f9e94cd849a1cc131d2d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:ff:19:6a:d9:42:4b:82:01:08:3a:00:7c:
                    74:6e:09:f9:0e:51:45:f3:2d:b5:1b:6e:f0:9b:2e:
                    40:0e:e7:13:29:4d:dd:c3:f3:4a:d7:b0:ef:8e:90:
                    9e:fd:4d:e2:b6:14:ac:95:0e:58:bc:20:4e:e9:d9:
                    90:1b:a5:de:bd:c4:83:00:7a:d3:ce:32:7e:49:a7:
                    9c:b9:da:c9:35:ea:6b:6d:d4:60:a8:39:d7:4a:62:
                    c8:1f:0a:44:98:9c:c3:5b:eb:6e:15:2a:82:54:df:
                    d0:e7:1c:a8:f9:a6:b7:5a:65:38:1b:0e:b5:19:f4:
                    77:1b:3d:5b:13:41:44:10:16:e7:88:d2:85:19:52:
                    55:44:04:69:4e:8b:8f:84:04:7a:d7:f6:bd:f4:4d:
                    1d:ce:54:ac:49:67:66:e5:02:6c:43:62:b9:a1:d2:
                    02:f1:44:1a:5d:e1:2b:1e:fb:d3:9a:90:bb:bd:6b:
                    66:d6:7d:16:f8:c5:fe:d6:19:fe:d1:6a:4f:f4:78:
                    7c:b3:5f:cf:0c:0d:d2:6a:9e:4a:e9:27:16:b9:06:
                    c5:f2:68:e4:62:a7:bf:51:79:16:33:c3:2a:74:07:
                    19:33:81:09:ca:41:0f:1e:d3:66:8d:c4:28:45:ad:
                    36:75:4f:7d:b3:ae:1f:e2:5c:71:66:69:d0:7f:92:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1A:35:03:8F:A9:02:85:D0:F9:E9:4C:D8:49:A1:CC:13:1D:2D:2E
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:79:ea:e2:1d:ce:62:ff:11:9e:dc:40:99:7f:1c:f9:70:49:
         a2:56:d7:d1:45:71:c1:fe:89:ea:cc:5d:10:ce:d0:7c:97:dd:
         46:3d:4f:1e:d4:56:47:c1:15:a2:fb:2a:0e:90:f6:54:2d:04:
         37:21:9f:41:2b:ee:bb:22:10:e5:3b:91:7b:00:00:fa:ae:16:
         e5:ce:a9:cc:9d:5e:36:c0:c8:58:b4:f4:96:91:b9:93:e1:ef:
         cb:dc:10:d5:24:bd:41:1b:3f:cb:04:0e:5b:88:ce:6f:4f:ef:
         a8:03:67:ba:c8:0d:1e:a4:92:78:99:e4:5d:75:a4:36:d3:d8:
         71:37:41:9a:fc:5e:1e:7d:8c:e6:24:33:ad:7c:75:af:36:bb:
         d9:57:62:f6:5a:e7:ff:69:81:a2:39:66:bf:c6:db:43:eb:b8:
         9c:9d:75:35:43:c6:a0:7d:00:cb:f4:52:96:c9:ff:d0:7d:dd:
         0a:76:4c:9e:0d:15:52:4e:34:69:b8:59:44:7a:d7:0a:d6:6d:
         19:3d:9f:28:58:75:3a:b0:90:87:80:b8:1f:b7:da:87:92:26:
         3f:46:9c:bd:a1:33:84:a9:d2:47:3c:d9:fc:79:4d:6d:12:75:
         7a:9b:76:d4:95:ee:6c:71:a0:55:df:12:5e:10:01:4a:7a:31:
         2f:0c:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:04:10 2024 by rpki-client on console-ams.rpki-client.org