Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File:                     _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier:          1A/cvzwdMbWIvBmTNhzbN5Rq9unVK7nUwipBrClI4HQ=
Subject key identifier:   B5:09:96:C6:BA:1B:2A:5F:40:44:F5:DB:9D:98:98:6C:B3:BF:31:6F
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer:       /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial:       019044F8FBA571A2ABA6942010A7DD720CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number:          0208
Signing time:             Sun 23 Jun 2024 12:01:26 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:26 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:26 +0000
Files and hashes:         1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: DKdtSmN9TgMkWdLCjX4iZ+IwIDyYxkMKn+fK+sSYz14=)
                          2: iYN-eM1qyxJqy8tzPSYcL3ugwZc.roa (hash: LkDDxDbD1kjkP0QRvBxLmj7DvnAxIvFzKB45c368ePg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:fb:a5:71:a2:ab:a6:94:20:10:a7:dd:72:0c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
        Validity
            Not Before: Jun 23 12:01:26 2024 GMT
            Not After : Jun 24 12:01:26 2024 GMT
        Subject: CN=b50996c6ba1b2a5f4044f5db9d98986cb3bf316f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:49:77:f4:ec:fc:70:5f:7a:e2:d0:fd:b6:
                    45:a2:20:f7:ad:b7:c4:72:24:52:5f:7b:5b:83:31:
                    8e:7f:6e:35:7f:3d:d5:48:2e:d9:fc:f4:96:96:0a:
                    87:be:44:38:27:07:26:32:89:72:f3:46:db:d8:37:
                    44:46:1a:d2:31:a0:be:51:64:4c:eb:ec:4b:64:77:
                    63:84:0a:f0:d6:50:6e:0d:41:16:01:da:1a:fc:b4:
                    97:44:20:c6:e4:a9:d6:4d:3a:85:f9:34:c2:1d:e3:
                    2e:92:63:b5:a5:e2:5b:aa:71:a9:e5:5d:f4:2a:49:
                    d1:d1:54:fc:48:9c:d9:49:6a:11:65:4e:53:6c:8d:
                    1e:46:af:28:d6:84:6a:e6:67:7d:2b:bd:da:53:67:
                    b0:87:d9:4f:aa:18:27:74:79:1a:bf:a7:fb:24:03:
                    72:18:dc:e2:2c:3a:f6:40:b6:c5:f2:0d:a4:07:99:
                    58:ba:a3:6f:fb:11:2d:b5:ac:b9:82:b2:e5:e2:c1:
                    c6:82:54:05:c4:62:6a:a6:e2:c2:02:c1:a9:7d:d1:
                    2c:02:40:eb:15:9c:30:7a:d6:56:3b:e8:4d:7a:28:
                    71:23:fd:3f:72:e6:c4:d7:5e:c1:16:df:53:e8:0b:
                    96:18:23:4c:ff:c8:ab:1e:85:bd:30:12:55:d0:7e:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:09:96:C6:BA:1B:2A:5F:40:44:F5:DB:9D:98:98:6C:B3:BF:31:6F
            X509v3 Authority Key Identifier:
                keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:34:62:57:43:11:13:2f:f9:38:1d:21:51:7c:5c:b7:f2:8e:
         7f:dc:a0:8e:5c:aa:35:de:99:bf:ce:38:31:17:3e:12:08:9b:
         05:c0:77:92:9f:34:74:79:38:28:60:25:23:a5:b8:9c:ff:15:
         7f:01:a2:fd:61:59:4b:04:24:cf:b1:b5:17:90:97:2a:2f:7b:
         3d:5c:23:b4:6e:60:61:74:56:42:6a:89:bc:60:fa:c1:d0:87:
         be:88:d2:77:59:d4:72:d1:aa:0b:d3:db:fa:9c:02:aa:91:e1:
         ab:24:b3:b1:bd:17:b4:aa:17:c1:09:fe:c1:a0:15:ba:82:f3:
         19:e3:fc:82:a4:ae:b1:a9:06:37:18:7d:68:34:0e:0d:ef:21:
         58:55:b8:54:b4:b9:27:9d:38:79:a4:17:61:ac:93:5e:1a:14:
         ba:78:d0:2b:f1:f2:2c:8a:2b:61:27:7e:06:bf:0c:ea:88:fd:
         cb:6b:ab:d3:56:20:a3:c0:8a:21:c5:b2:2f:e6:da:19:b4:5a:
         c2:e1:33:8b:f3:c8:a9:26:e8:4f:89:a2:25:c5:5b:7b:c6:8b:
         d5:65:e6:49:7c:20:d2:8f:26:00:d1:dd:8c:de:57:44:3d:ad:
         9f:56:20:64:d5:66:c3:9d:bb:eb:13:b2:26:32:1c:26:85:72:
         76:32:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:12 2024 by rpki-client on console-fra.rpki-client.org