Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
File:                     Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft (raw, json)
Hash identifier:          DRAQ8f1Z8nnkJN4A2OhbHVUWdq8uVk2H02WskDqhkDU=
Subject key identifier:   49:2B:61:00:70:E6:6F:DF:AC:F8:D9:3A:9F:4F:60:E5:AB:44:F8:1D
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Certificate issuer:       /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial:       018F8F025B4A7B820D2F3F3A16B9135D3393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
Manifest number:          115F
Signing time:             Sun 19 May 2024 04:00:47 +0000
Manifest this update:     Sun 19 May 2024 04:00:47 +0000
Manifest next update:     Mon 20 May 2024 04:00:47 +0000
Files and hashes:         1: Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl (hash: rR+3XtiSJqVQ4ms3Lp47Tg8m1UVju2ceQW/DTv9MKSs=)
                          2: SAakE3Q6cPmNMskO24QrOSj97nQ.roa (hash: K+vKwpdJcXezDVocgDTnKOGHRqJsGkEUAJr6FHEobNA=)
                          3: bytX36Phh3m7PyfepGoXLjkm5JI.roa (hash: /5nigtiYf7gKRUlzb2krZDHBfhCk/5EkrpM9pvMbE7M=)
                          4: g-uSC9smVQa0LyJT_M70P1mhzQw.roa (hash: 7bxDYCBmX8bwpPdeWkXmL4ok9oEas4ndoSeRyaUoZ80=)
                          5: gdfuNv-Hew51tFd4lOHiu5PUcdo.roa (hash: zXngl4ejXZg8QSW9fah/6ny6n8Oc43vDyqdP+TCIV1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:5b:4a:7b:82:0d:2f:3f:3a:16:b9:13:5d:33:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
        Validity
            Not Before: May 19 04:00:47 2024 GMT
            Not After : May 20 04:00:47 2024 GMT
        Subject: CN=492b610070e66fdfacf8d93a9f4f60e5ab44f81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:47:a4:d0:f8:e6:d4:56:4f:9e:a8:17:5e:
                    f1:44:1f:34:d4:70:b8:3f:94:06:90:f6:ce:c7:cd:
                    87:08:55:fb:32:32:a4:ae:c0:8c:fd:15:c6:f3:87:
                    55:9d:ac:06:a7:58:52:b4:7a:c9:dd:4c:77:d0:2d:
                    bb:10:5b:2b:c0:27:29:87:b1:c5:4c:9a:af:de:2a:
                    c2:d5:23:58:29:0a:68:c2:01:0e:79:1e:7d:7b:b1:
                    6f:86:0b:a8:76:17:09:5f:3c:7b:8d:3b:fa:25:be:
                    2a:75:0d:43:15:bf:8f:96:b6:9a:dd:0d:53:ed:be:
                    f0:22:ac:55:f1:60:8b:eb:ff:cc:f6:a1:48:47:1a:
                    46:94:59:a8:4a:2b:90:44:49:3c:98:bd:87:74:60:
                    fb:1c:36:b0:9b:9f:5c:cd:8f:96:38:19:b9:f1:8c:
                    0a:de:8b:79:49:34:ea:74:a2:7c:98:6c:06:25:ee:
                    2a:eb:8b:e2:5e:67:76:2f:3e:a8:42:07:4a:21:0c:
                    b6:21:f2:47:a4:b1:ba:13:ce:96:f1:f6:ac:da:1f:
                    bf:6e:82:bd:6f:65:1a:4b:ae:9b:4a:f6:f9:82:44:
                    49:32:e6:8d:c8:7a:77:45:23:e3:fb:e4:92:c8:f2:
                    30:8f:fa:53:fe:07:d9:37:39:a7:24:20:b9:39:0e:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2B:61:00:70:E6:6F:DF:AC:F8:D9:3A:9F:4F:60:E5:AB:44:F8:1D
            X509v3 Authority Key Identifier:
                keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:ee:4b:28:57:06:80:f8:2b:2b:39:76:0b:7e:ec:d3:47:
         b9:96:a6:cd:69:25:79:80:83:4b:67:a6:23:8b:95:d9:07:90:
         4c:0f:51:39:2b:60:cb:65:7a:99:c9:7a:d5:ed:6f:79:da:03:
         aa:8e:ce:e3:5d:61:18:15:73:26:60:06:e9:60:eb:67:cd:aa:
         00:a8:25:12:de:83:d8:09:ea:10:5c:31:93:96:b2:f2:53:3b:
         d9:de:f3:4c:31:85:be:b9:c3:d4:2f:ee:e0:c5:f6:c7:a0:d8:
         e9:3d:41:39:14:81:d6:2a:0c:cf:7f:cc:fa:b2:93:12:31:e4:
         a0:11:82:29:75:81:d3:4d:48:7d:df:63:97:0e:93:b0:bd:25:
         58:67:e3:e3:fc:6e:9e:eb:0a:09:21:f6:aa:86:c7:e8:37:38:
         12:28:9e:e9:18:5e:31:bf:0b:2f:ed:bb:c2:8e:92:66:cf:01:
         a8:e7:99:8b:39:96:38:fc:b1:b2:a1:89:dc:ba:66:b5:74:53:
         d0:63:91:5c:03:6f:e3:0b:46:77:39:7d:4e:a6:04:d6:81:f5:
         36:cf:30:0a:8c:b8:0d:7a:93:2d:bf:f8:4c:f2:15:27:11:01:
         ee:20:2b:3e:e7:5e:ef:79:ce:69:20:86:83:42:00:95:e1:fe:
         ed:4f:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:31:07 2024 by rpki-client on console-ams.rpki-client.org