Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File:                     5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier:          6XPs2n8EQo5xlrCv9fb+ZXV8xw6wBmuC5yeVE4Pi42s=
Subject key identifier:   75:53:9B:3D:94:DF:EC:CB:59:26:8D:94:97:1C:8E:EE:52:D5:6B:4A
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer:       /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial:       0190448C0743980EDDD2D4DF5B4A07955E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number:          08D0
Signing time:             Sun 23 Jun 2024 10:02:25 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:25 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:25 +0000
Files and hashes:         1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: TbjPXJ6pmhrGtBv170NV6k4ukwyALB80C6s6bluPZtg=)
                          2: RMCegWbK44mDkBYwVAYKpKopYEs.roa (hash: zbZ4GAnGgdz4pVtHPNevbp6HO/aEDiIInWfMYePeoZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:07:43:98:0e:dd:d2:d4:df:5b:4a:07:95:5e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
        Validity
            Not Before: Jun 23 10:02:25 2024 GMT
            Not After : Jun 24 10:02:25 2024 GMT
        Subject: CN=75539b3d94dfeccb59268d94971c8eee52d56b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:b9:fb:7b:97:c2:b9:f1:fe:f4:e1:05:9e:
                    57:a5:50:a6:f3:f4:da:af:98:6b:47:43:33:de:b0:
                    74:a1:b4:a3:6d:57:02:74:7b:27:5f:19:86:67:08:
                    34:92:7e:6b:0a:61:bc:5c:09:94:1f:08:cb:e1:19:
                    bf:a1:cf:c2:16:a0:c9:28:f4:4c:10:54:ee:37:ca:
                    1b:c2:9b:c3:40:c1:4b:aa:bb:c2:51:37:92:18:f9:
                    98:76:b2:e0:3f:a5:b7:41:0a:7f:3e:b5:da:19:80:
                    06:d6:ba:4e:0a:cb:bd:35:3e:27:25:5b:d9:7f:a2:
                    22:90:92:76:b4:54:a6:de:a3:33:f9:4e:84:85:8e:
                    15:a6:f3:bb:c4:ff:22:0a:c1:d1:81:e4:ee:31:19:
                    12:cb:fe:e5:21:9d:e2:78:2a:32:22:7c:bc:2a:eb:
                    63:db:4b:f0:d1:95:c1:ff:7c:fb:38:43:92:53:1e:
                    ef:e5:90:66:d3:2b:01:84:74:c8:67:6c:c8:47:c5:
                    a8:01:dc:b7:ce:ee:8c:d3:f6:97:e6:af:7e:49:48:
                    6f:52:c7:44:92:af:a3:82:cf:dd:a2:6c:65:20:8f:
                    b3:8a:e9:a9:09:3c:9d:21:64:ee:69:5f:1f:dd:29:
                    41:df:e6:11:46:ee:07:5f:7a:d4:26:88:7e:99:54:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:53:9B:3D:94:DF:EC:CB:59:26:8D:94:97:1C:8E:EE:52:D5:6B:4A
            X509v3 Authority Key Identifier:
                keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:ed:f1:d6:d7:52:ee:a1:bd:1f:a1:e6:c4:3e:76:73:74:
         ad:13:4d:e4:05:a8:7c:79:85:1f:49:72:92:e9:2b:c8:9a:b5:
         ed:38:1e:c1:a4:72:37:f4:e6:0f:59:59:f7:56:f9:0f:e3:27:
         0f:9d:15:75:7a:a6:2e:7e:36:a8:68:fa:be:a9:d6:9c:fd:50:
         2b:2a:50:11:f8:d0:a6:06:51:a0:56:5e:10:a2:89:8e:89:21:
         81:99:88:4b:7d:20:ca:cf:34:cd:76:8d:6f:0b:68:ff:a1:25:
         2a:1f:ce:38:af:0d:c5:98:19:1f:a8:d5:dd:1d:d1:ba:07:76:
         bb:c6:b3:bc:a9:f9:00:b4:21:cb:9f:8c:04:05:bd:93:1b:49:
         ec:d2:0a:4a:23:df:d8:b5:c3:18:06:b5:35:9b:7e:d0:da:97:
         79:5d:fd:72:a9:1a:07:ac:4c:7b:b9:60:5f:5f:ba:9e:92:78:
         6c:58:ed:90:87:05:e2:3f:2d:b3:24:e7:1e:bb:65:46:2e:82:
         c7:b2:0a:77:98:86:d7:1b:ce:dc:f3:e4:ce:78:22:03:d0:1a:
         7f:0b:c8:3a:f1:ee:3b:69:ab:bd:66:9b:15:b0:94:34:5e:62:
         04:d2:c9:93:64:b1:4f:08:1f:df:6e:40:47:45:63:ef:2b:a5:
         0a:33:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:02:21 2024 by rpki-client on console-fra.rpki-client.org