Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File:                     5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier:          mqNlirlYgNW9KLuN76sdCNRB7Q6833Ype4TfXc12DbQ=
Subject key identifier:   B4:EC:1B:2A:B4:5A:50:AC:A8:59:78:5A:AE:C5:93:6F:39:64:34:5A
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer:       /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial:       01901F349DC5D34FC13E837B69D5C8ECB219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 04:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:00 +0000
Files and hashes:         1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: Vd/AIpCyHrMz7w6MWGHcJYwWkt9Vr9hLP5nJOYYZd8o=)
                          2: qESCYPpOO-8HhH17a9qapmujWQ0.roa (hash: s9b0BjR1x2VNuEgZvEglbAQLfU8iL0h04PJ7+EcHymM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:9d:c5:d3:4f:c1:3e:83:7b:69:d5:c8:ec:b2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
        Validity
            Not Before: Jun 16 04:01:00 2024 GMT
            Not After : Jun 17 04:01:00 2024 GMT
        Subject: CN=b4ec1b2ab45a50aca859785aaec5936f3964345a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:50:1b:f8:53:01:c9:ba:d6:fe:93:df:a9:
                    2f:e2:49:85:78:c7:e5:8e:da:0f:4b:fe:f7:bc:56:
                    e4:00:e5:ed:72:e3:60:4d:af:fe:29:da:aa:df:df:
                    43:0a:e9:18:6f:3f:c8:8d:58:f5:8d:e9:4e:9e:96:
                    3f:a3:b8:08:42:2a:ff:02:59:bd:62:d6:f1:ed:1f:
                    c8:5f:fc:7c:7d:0a:20:11:02:90:c7:2a:cb:aa:db:
                    61:5b:1a:0a:4c:81:3e:7c:b0:19:b2:46:d0:f5:ad:
                    e7:ae:17:76:79:bd:ab:5d:2e:ef:41:74:02:4f:8a:
                    6e:6d:d0:df:ac:1e:e8:12:0d:b2:2f:97:08:14:50:
                    f2:12:28:73:1d:a3:30:97:12:e4:9b:26:5a:26:be:
                    2d:ec:29:0a:61:da:fc:95:29:20:16:43:8b:0a:d6:
                    0e:7b:4f:21:e5:54:61:fe:65:e1:20:4b:b4:92:b4:
                    1a:8f:73:26:8e:21:82:60:4d:5a:98:fe:20:be:ab:
                    f9:a4:02:7a:41:41:b1:2e:f7:d0:2a:51:88:a4:30:
                    4c:54:1c:0a:df:a7:58:8f:90:f6:b7:aa:a1:80:5d:
                    0a:9f:28:0a:3c:13:fe:78:a5:73:f2:5f:76:71:c2:
                    17:af:b6:87:ae:f4:c2:15:99:cb:45:40:a4:90:f7:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EC:1B:2A:B4:5A:50:AC:A8:59:78:5A:AE:C5:93:6F:39:64:34:5A
            X509v3 Authority Key Identifier:
                keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:93:b4:b4:da:aa:3c:64:11:b7:c5:81:15:a1:71:de:4c:
         89:eb:1b:a8:43:60:d6:12:bf:ea:21:fd:a6:53:e6:f1:9d:aa:
         49:55:f5:ed:85:fd:da:ef:0e:fe:11:21:e0:e9:85:9a:a0:89:
         e9:ce:13:c0:35:80:56:f7:1b:c4:40:63:47:40:cd:50:6c:06:
         e3:18:d5:5c:1a:2c:1a:04:ad:2a:89:02:d0:96:ad:1f:32:c8:
         a3:23:8d:f1:d8:c6:5b:9a:de:ad:b3:fc:f1:26:0d:6f:19:70:
         75:f1:68:09:b2:bf:25:91:51:1f:92:5b:26:27:b0:27:19:e2:
         a1:85:62:c9:75:85:1f:06:80:bd:ab:f7:a8:61:04:7a:d3:43:
         b3:2f:8b:ad:b1:66:75:7d:b3:30:62:ab:a7:13:b7:7c:6a:d6:
         15:5c:b4:fb:90:90:ea:3b:70:be:9a:f5:d6:98:23:7b:a0:78:
         9e:5f:e5:5f:16:2d:77:55:2a:4d:d7:d3:f9:4f:da:2c:db:11:
         7a:4b:3f:8c:d7:61:7e:06:a0:55:c5:c7:44:8f:02:83:16:dd:
         18:71:2d:70:60:9d:e8:fa:a6:d1:b5:ab:ad:19:92:85:f6:15:
         b9:68:5a:68:c2:49:af:c7:a5:78:bb:ae:39:e2:9a:ee:4d:3b:
         29:5d:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:33 2024 by rpki-client on console-fra.rpki-client.org