Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File:                     04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier:          qjEY5Cd+zMqe/+30HwvSbFPJg4xbxHh9cABXmu4G0ig=
Subject key identifier:   EB:5A:54:F9:1A:93:EA:2F:03:77:77:92:47:66:14:AC:5B:AB:FA:73
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer:       /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial:       018F8635C607D3AB66D50D03E0FD2A2E540F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number:          05D5
Signing time:             Fri 17 May 2024 11:00:22 +0000
Manifest this update:     Fri 17 May 2024 11:00:22 +0000
Manifest next update:     Sat 18 May 2024 11:00:22 +0000
Files and hashes:         1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: AUItcy1Po123KaKdNDIDCc8MNl3CeE05h0I++GlYvgM=)
                          2: rewcffxErJJp_rJIKhpFmW-k7sI.roa (hash: DXOKrKn5iiewasnFY5saiia8zGT784rXxcGxAuP7z3Q=)
                          3: rvY4poY1AhVtQd9j1XMdRrLAl38.roa (hash: MgC28cGkqPc2Z+9RXBhHfyeOFTJreYRjKX+HjVpN6rI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:c6:07:d3:ab:66:d5:0d:03:e0:fd:2a:2e:54:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
        Validity
            Not Before: May 17 11:00:22 2024 GMT
            Not After : May 18 11:00:22 2024 GMT
        Subject: CN=eb5a54f91a93ea2f03777792476614ac5babfa73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:10:ac:96:9c:2f:0a:d2:cc:ca:98:6b:05:
                    6f:98:b7:56:38:89:e8:fa:83:a2:45:b7:8b:c9:6e:
                    d6:e8:11:f3:a9:87:0b:c9:5f:a4:f4:d2:18:95:72:
                    1f:e5:17:d3:fd:1c:ff:c3:ef:58:a5:a4:73:05:0e:
                    d7:eb:48:a7:c7:84:9c:61:8e:05:34:30:26:09:7d:
                    ac:f9:3b:df:02:a5:65:f8:f4:23:12:cb:ee:bc:a4:
                    a3:60:3b:5e:11:58:3d:aa:ac:8f:9e:59:f6:c3:ae:
                    d5:f6:ec:76:25:9f:57:89:f6:42:a1:63:c8:aa:e1:
                    6b:cd:d6:ab:56:90:29:ad:a9:8a:7e:da:e2:fb:2d:
                    25:60:1d:c5:0c:d4:cd:d0:42:5b:bf:fe:19:28:02:
                    e9:11:34:7b:bc:f5:b5:5d:ff:b2:ef:a9:91:d5:67:
                    6d:4f:d6:78:e8:ce:7e:3b:49:75:78:87:ec:b3:a1:
                    ab:e2:d5:36:99:bd:bc:0b:3c:15:18:fb:3a:b0:cd:
                    9f:b7:4c:85:b4:04:5e:85:53:80:6f:ea:86:ca:e4:
                    21:c6:37:a0:43:01:6c:8e:f3:15:d6:b4:77:21:25:
                    54:16:42:9d:8e:29:c9:52:c3:b8:c2:0e:75:af:97:
                    d4:c3:03:da:12:81:94:8e:07:fa:f1:ca:a9:70:a6:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5A:54:F9:1A:93:EA:2F:03:77:77:92:47:66:14:AC:5B:AB:FA:73
            X509v3 Authority Key Identifier:
                keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:58:ab:e1:67:0f:b7:fa:07:87:bc:32:a5:f5:db:c4:42:6e:
         7e:70:dc:44:66:fd:9b:ba:77:2e:63:7e:65:01:fb:99:cb:07:
         0e:a2:d2:0e:63:9c:d7:40:03:7b:38:ba:24:03:c2:10:a7:31:
         d2:f8:fa:3a:f7:ba:77:38:4b:9a:a9:3e:e8:7c:60:51:31:ee:
         c1:74:d4:75:6a:be:b2:05:34:8e:04:d3:f6:50:68:1e:ac:f8:
         7f:29:4c:ef:93:fe:3e:a7:e7:3c:61:1f:c6:15:f0:d6:0b:b3:
         a8:08:e4:eb:bc:05:a8:4e:04:aa:ad:e1:4e:c0:03:79:9e:67:
         af:a6:21:54:83:8d:1d:cc:1e:d4:9d:49:88:72:79:af:03:4e:
         76:92:b8:b7:67:de:7a:58:98:2d:c8:d3:3c:11:37:cc:54:c2:
         f8:1d:14:d8:e7:4e:fe:39:c9:da:ce:91:f8:0c:af:08:d4:43:
         1a:da:e6:46:38:f6:0b:51:35:d4:c2:c3:38:39:be:e4:28:cd:
         23:b7:42:39:5c:6d:9c:06:3e:e9:68:32:51:be:18:97:bc:4b:
         e5:17:aa:ad:2e:b3:73:31:e1:c8:9b:95:7b:4c:88:d2:76:65:
         e7:ae:c0:79:a4:aa:5a:02:b7:6a:e1:38:23:ae:3a:d6:86:c9:
         0e:7b:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:58 2024 by rpki-client on console-ams.rpki-client.org