Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File:                     5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier:          bIpW/S3ue8xYhHj1NuoSkpe/wnc6gtJUbkXhh8NPOLA=
Subject key identifier:   72:70:30:EC:92:7D:83:58:AB:74:BA:B5:8B:87:6C:30:07:EF:CC:27
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer:       /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial:       01901DEACA5D560644F53D4ABFCA979BA294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number:          04E7
Signing time:             Sat 15 Jun 2024 22:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:44 +0000
Files and hashes:         1: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: CyIqFfiGQfy3URnKP55BOLm8aUj0octO+04U71C4p80=)
                          2: ePVOcURw0mWxmfgbJo7vDWD_1b8.roa (hash: qF7cYQre3Vc2h+ejsMV5qthZ19wVsBnq1cxhwdc4fpA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:ca:5d:56:06:44:f5:3d:4a:bf:ca:97:9b:a2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
        Validity
            Not Before: Jun 15 22:00:44 2024 GMT
            Not After : Jun 16 22:00:44 2024 GMT
        Subject: CN=727030ec927d8358ab74bab58b876c3007efcc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:18:e3:ad:4f:a1:0c:09:f1:31:28:04:b9:
                    a6:cf:57:49:c5:55:7c:ba:1e:04:e4:72:5e:d1:f7:
                    66:eb:63:2c:71:fd:36:dd:7b:51:f5:c8:90:78:f6:
                    0c:4c:7f:8c:f0:64:28:0b:e5:6b:02:cb:78:75:09:
                    19:db:42:b9:73:81:17:6f:a7:eb:49:87:ab:8a:9c:
                    87:5d:36:f2:36:33:d3:2d:8f:52:ea:42:a3:0e:f3:
                    a4:2f:89:e7:c1:a8:98:a0:dd:e8:4c:ba:9a:24:e4:
                    70:37:25:c1:e0:49:0a:fc:9c:83:7d:2a:54:3a:bf:
                    81:b9:60:8c:8c:3a:1e:af:c7:7e:ff:bf:0d:89:30:
                    76:9e:0b:e8:57:38:5c:82:62:74:28:38:e0:79:9f:
                    3f:75:86:3c:6a:f1:a3:8d:cd:dd:10:d8:1b:32:54:
                    1f:48:5d:b3:8f:a4:ee:c7:01:66:07:c0:62:00:a4:
                    28:75:81:6b:f8:7a:dd:dd:e5:85:dc:74:46:e5:1f:
                    31:0f:0d:53:46:6b:1d:9a:84:a2:52:ec:3a:fb:9d:
                    25:96:ff:60:9c:93:45:bf:0c:3b:7d:b6:ff:69:3a:
                    50:67:0d:19:1a:a6:37:91:b9:f9:f2:54:62:e8:32:
                    6f:ce:66:4d:20:9c:7b:bf:f2:bc:db:91:fe:d7:e8:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:70:30:EC:92:7D:83:58:AB:74:BA:B5:8B:87:6C:30:07:EF:CC:27
            X509v3 Authority Key Identifier:
                keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:af:e2:d2:84:5c:b9:ab:55:54:c3:dd:a3:fe:7e:96:39:03:
         f1:80:17:76:87:17:76:8f:3c:59:8f:27:17:cf:aa:fc:d5:e0:
         ce:3a:b0:f3:6d:27:db:bf:e9:6f:87:77:61:c4:90:56:89:2e:
         e9:f5:f9:86:46:49:88:c6:33:f4:21:fe:e3:53:a2:12:34:97:
         4b:47:d2:33:6e:74:3f:c9:6d:e3:1a:bb:6f:7c:f5:8f:d0:0d:
         4c:c0:72:ae:77:c9:e3:3c:f8:a2:88:10:ac:95:eb:de:de:36:
         ab:df:27:de:07:0f:3d:07:9b:e1:75:cc:cf:b0:d8:a7:58:07:
         be:30:37:7d:a3:33:e6:56:63:0d:ee:2c:2b:d1:9c:1c:bc:16:
         7d:79:2e:ad:69:32:3b:d6:07:51:d3:dd:d0:a2:a7:ae:ff:d2:
         7d:a0:a0:60:0a:6d:37:39:fc:06:8b:b6:56:8a:b9:1a:52:3f:
         52:bd:e1:fe:b4:d8:35:55:10:c9:82:b3:af:02:28:70:c9:73:
         37:57:59:9e:12:c9:32:7a:a3:d5:41:d4:25:24:4b:df:b4:ea:
         f7:36:6a:fa:cd:2f:b4:f5:cc:0e:5d:26:60:e3:7e:78:17:bb:
         bf:f5:b5:4b:9e:22:5e:46:66:bb:ae:1a:44:de:14:dc:e1:c9:
         78:57:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:17:23 2024 by rpki-client on console-fra.rpki-client.org