Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          WJKP7HpjUx5F3j3962bWxcEoyxoevsl2Yj9fxpsKYWc=
Subject key identifier:   01:49:7B:56:E7:74:A8:55:C4:92:47:45:71:5D:6B:FD:53:30:AE:0E
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       01901A0F725BB22B9E60C3B3C654E38F13ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          0AC2
Signing time:             Sat 15 Jun 2024 04:02:18 +0000
Manifest this update:     Sat 15 Jun 2024 04:02:18 +0000
Manifest next update:     Sun 16 Jun 2024 04:02:18 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: XnZOl2vvoGstcZLi2GLy4bwlF0E5i+I2W+dAenz+Tuo=)
                          2: neH0umyH-IptiGBmGWK9Luftc2o.roa (hash: dZMwpo2iL4UMGoHAKfRKAyccZ+4Ksg+fQLSZgtZu1pE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:0f:72:5b:b2:2b:9e:60:c3:b3:c6:54:e3:8f:13:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Jun 15 04:02:18 2024 GMT
            Not After : Jun 16 04:02:18 2024 GMT
        Subject: CN=01497b56e774a855c4924745715d6bfd5330ae0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:0d:f9:b5:a8:9c:88:28:ab:1f:1d:32:69:
                    1f:59:d5:0f:1c:0a:0e:55:a6:f6:85:c4:10:91:de:
                    d3:29:e2:bf:dc:43:c2:61:59:f5:90:d9:95:e6:73:
                    9e:50:ed:d9:a5:c4:52:23:d7:c7:7f:b0:8c:f5:ed:
                    f0:23:80:69:ed:73:4e:ae:78:75:0d:8c:bc:e1:ea:
                    12:fd:6e:37:32:03:6d:2d:88:66:47:71:34:33:18:
                    18:f6:ce:2d:fd:e1:a3:f6:78:7e:a1:84:55:8c:46:
                    a9:95:ca:ec:52:c9:d2:1c:2e:c3:eb:78:b3:3c:bf:
                    ad:7c:c6:d3:e2:8a:d9:8d:5b:fe:4d:9b:3e:5f:c3:
                    fc:b6:0c:fd:3b:0e:05:7b:fb:e2:a0:5e:93:9d:09:
                    1a:ce:36:73:a8:71:d5:c2:a9:fd:4a:f5:68:19:95:
                    02:40:09:27:aa:09:03:23:4b:5b:51:35:68:b2:00:
                    27:1e:99:84:e0:f2:e5:50:62:9c:9e:50:cb:da:92:
                    0e:f6:d0:63:ee:66:eb:99:db:4e:53:7e:50:7b:71:
                    d6:1b:5c:94:f1:3e:32:31:e1:ab:6b:18:ba:56:9c:
                    cd:89:91:b5:8d:de:4e:ad:11:24:8c:c6:82:a8:18:
                    70:ab:cc:cb:dc:4c:5b:58:35:a9:63:c3:7e:f4:2f:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:49:7B:56:E7:74:A8:55:C4:92:47:45:71:5D:6B:FD:53:30:AE:0E
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1c:4b:fa:1b:18:1b:63:51:a6:44:a5:2b:8a:fe:4d:98:52:
         ac:43:93:84:a0:3d:9b:d3:8e:8e:d2:8b:e9:7c:1e:27:93:5b:
         c3:81:21:ba:30:6d:c9:b5:86:32:ce:cf:75:34:32:4e:7c:24:
         49:2e:1b:41:ef:87:6f:8c:ab:5f:16:e6:3d:de:24:17:65:8b:
         d9:c5:26:13:45:76:ce:dd:ae:b1:ff:18:6c:80:1f:a5:33:64:
         ee:b6:3a:c2:11:c7:e1:44:16:8e:34:2d:b2:01:cf:97:4d:41:
         f7:da:1e:4e:3b:bd:34:28:57:5e:9f:03:21:2e:09:ba:9a:f6:
         a7:a8:ed:43:56:96:c5:70:b6:19:09:a6:41:4a:5c:b8:d2:ad:
         8e:54:34:da:ce:52:a8:44:25:02:a2:4e:35:96:37:ac:5f:f3:
         3f:b0:62:9e:30:70:58:2c:ce:19:2e:fc:70:a3:5e:63:75:cd:
         df:98:cb:5a:ac:fe:a3:72:78:df:2d:0a:cc:76:6e:7e:f3:00:
         3a:3a:8c:86:b7:37:04:a7:98:e7:64:ff:35:7a:c4:2c:5f:7f:
         1b:ff:3a:55:87:dc:ac:37:58:ca:c2:3d:69:b4:b3:3a:d2:8e:
         ea:fc:ba:8b:62:01:51:c8:72:b7:3e:6f:46:84:a2:43:15:2c:
         18:f7:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:14:12 2024 by rpki-client on console-ams.rpki-client.org