Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
File:                     5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json)
Hash identifier:          sDgK88RaySUvWyx+X6SU1Zgror/bRq5ERcI+qNlT600=
Subject key identifier:   21:B8:15:44:24:C8:11:97:51:B6:94:7C:5A:BB:44:85:CC:F1:38:70
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Certificate issuer:       /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial:       01923738531FEB67BC7121872DBCD2E5C915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
Manifest number:          12DF
Signing time:             Sat 28 Sep 2024 06:01:30 +0000
Manifest this update:     Sat 28 Sep 2024 06:01:30 +0000
Manifest next update:     Sun 29 Sep 2024 06:01:30 +0000
Files and hashes:         1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: 7API1Tyu+031DMkBFrzrXcwnov+Sei7o3dhanUtuE8U=)
                          2: BmX_w1M0UPeMSaB1vIEWT8cQHkA.roa (hash: wUyKNlsIT06J8LEMhjq+42xfXnALjsG38lZmoKMrwME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:38:53:1f:eb:67:bc:71:21:87:2d:bc:d2:e5:c9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
        Validity
            Not Before: Sep 28 06:01:30 2024 GMT
            Not After : Sep 29 06:01:30 2024 GMT
        Subject: CN=21b8154424c8119751b6947c5abb4485ccf13870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5f:b4:48:ed:a5:48:0a:d1:23:ed:16:f6:22:
                    22:0a:4f:af:69:11:83:f3:38:81:68:87:44:c4:4c:
                    bd:06:6e:dd:c9:fe:99:ef:70:59:d0:a5:6b:00:af:
                    bc:99:9e:a7:2d:30:b0:35:39:73:44:12:8d:46:87:
                    af:e6:99:90:32:3d:97:29:43:10:18:44:1e:34:51:
                    a4:81:d3:a4:69:13:fb:da:db:13:15:20:7e:b7:9c:
                    63:a0:ed:72:e6:a9:7a:d4:2c:8e:4b:97:88:90:73:
                    6c:c0:7e:b9:cb:a9:6b:e5:8f:fb:31:11:7d:a2:db:
                    1c:73:3e:67:72:5c:b8:e2:e8:ee:79:0b:6f:ce:0e:
                    44:4e:68:35:a7:40:e9:95:f4:85:0b:6e:a6:35:a3:
                    f2:ff:66:06:c8:c0:65:6f:8b:48:27:05:45:cf:90:
                    6c:ea:6c:a1:35:25:d3:73:4b:eb:7b:70:89:7e:eb:
                    83:19:1b:a8:05:13:b3:54:d5:f2:49:01:70:63:a0:
                    63:1b:3e:f1:b7:7f:d1:2a:42:a8:72:b6:14:b6:55:
                    6a:99:ac:e7:21:b0:ea:fb:7e:b1:6b:10:a4:42:59:
                    0e:c0:4c:cd:d5:8a:90:dd:49:a8:cc:34:59:49:7d:
                    bd:2f:36:f1:4a:18:c1:5a:90:39:dd:b1:72:86:98:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B8:15:44:24:C8:11:97:51:B6:94:7C:5A:BB:44:85:CC:F1:38:70
            X509v3 Authority Key Identifier:
                keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:21:3d:88:92:c5:23:bb:68:88:31:70:64:27:14:34:88:5b:
         ff:f7:59:ff:02:a8:4f:3e:e9:0c:fd:a9:c0:48:9a:0c:8a:10:
         17:cc:fc:1d:61:01:d8:e8:f0:af:00:17:36:8c:6d:db:ce:c4:
         ce:11:e9:f0:c3:73:b3:b6:af:03:9f:4b:7e:02:bc:86:58:2e:
         99:98:af:95:e9:39:85:ad:bd:0f:b5:b2:8a:ca:f8:ee:88:ee:
         bb:47:32:89:e3:c9:e9:c7:59:1d:c9:bd:51:84:bd:8a:9d:8c:
         77:36:b9:78:44:63:9b:34:ea:d6:04:8d:f6:2c:91:12:0d:e0:
         cd:c5:c0:fc:10:44:36:27:32:be:9d:9c:c5:2b:fb:0d:76:f8:
         bd:be:ea:06:ef:71:ea:b2:57:7b:fb:68:49:01:4c:fc:d4:6c:
         7b:42:7e:f7:92:12:3f:20:78:5b:f0:ae:7f:65:ab:5b:c5:75:
         b5:5e:22:64:6c:28:a7:9f:13:6a:8a:99:ed:eb:4b:1b:94:19:
         26:2e:18:4a:1d:b8:3e:cc:34:47:e9:83:64:6f:f4:33:80:fa:
         16:b3:2a:40:15:71:83:ea:2c:dd:e6:d8:99:cd:f9:0e:33:48:
         70:43:21:f4:2d:1c:3a:36:dd:36:2b:ca:7a:68:64:0a:4e:9d:
         1e:f7:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:36:33 2024 by rpki-client on console-ams.rpki-client.org