Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File:                     r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier:          8K6PuoUL/pq37NrfDQLgryQ1Dag0xu+570rUu7i+ieI=
Subject key identifier:   F4:63:F6:04:10:E6:D5:13:C5:AE:9C:22:BC:B7:0A:7F:50:A3:31:83
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer:       /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial:       018F8F02969367819777FD124165F6D8ED50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number:          0973
Signing time:             Sun 19 May 2024 04:01:02 +0000
Manifest this update:     Sun 19 May 2024 04:01:02 +0000
Manifest next update:     Mon 20 May 2024 04:01:02 +0000
Files and hashes:         1: nh9gXYbuO-HTwmrL6SeiJz0yJcs.roa (hash: MU2G4TvgdF1Nnz/zc4ub1vium29qaASdcupxfjx7Xsk=)
                          2: op2sUyazCSN-YKWL8dDP_MQtFGk.roa (hash: Y4qRoeUau+z2DXwsk9MpkT69XhrUt1V5HJc5Poj56qE=)
                          3: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: fHtK/aKrsTggsRshrljEIl8qcN3YOK1ZhPcIdwkybpU=)
                          4: ynVbja92TngfepRaKnZKVom45Wo.roa (hash: xh1mauE1wQTy5vaIryae+0JxHaCRtxW5b7iK0liwH2I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:96:93:67:81:97:77:fd:12:41:65:f6:d8:ed:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af935603e52e831537716d458b360192f99a3689
        Validity
            Not Before: May 19 04:01:02 2024 GMT
            Not After : May 20 04:01:02 2024 GMT
        Subject: CN=f463f60410e6d513c5ae9c22bcb70a7f50a33183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:fb:65:d7:b8:e1:64:db:52:e5:b4:50:33:
                    c9:89:3a:db:08:f2:49:e3:56:29:3f:58:08:28:72:
                    72:a1:3f:f2:67:6a:32:af:ec:68:a7:49:4f:85:7b:
                    0c:d2:8b:71:05:ea:2b:96:86:78:9d:1d:f7:78:d8:
                    cc:27:d1:d1:b0:b3:ed:a2:69:96:dd:c9:be:c5:d9:
                    50:39:e2:0b:92:ea:05:c7:f5:a2:e8:d0:16:33:95:
                    47:07:22:7e:2b:a0:cd:91:59:64:cc:30:a6:a4:22:
                    cb:72:9f:72:d8:da:00:5b:b8:68:c7:9b:e0:73:f9:
                    18:42:ce:ad:92:16:26:1f:85:98:4e:1f:5d:2f:74:
                    0b:60:17:fa:50:3f:43:cf:9d:6d:41:68:78:d0:b5:
                    4c:47:8a:fb:af:00:97:63:57:ea:24:ba:4f:0c:35:
                    9d:1f:c6:a8:8c:bc:41:c1:f2:35:22:70:a9:1f:13:
                    2b:76:c7:12:7a:2e:88:07:48:04:2d:20:03:23:fa:
                    dd:22:5f:86:98:ae:98:db:68:ab:33:1f:cb:f1:6d:
                    37:83:00:50:ee:42:3d:d5:7b:5b:fe:99:cb:03:23:
                    ef:b0:7d:c8:38:82:9e:e8:88:d1:f2:d9:cb:a9:d4:
                    79:d0:23:09:eb:6a:77:63:32:e4:a9:17:44:54:55:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:63:F6:04:10:E6:D5:13:C5:AE:9C:22:BC:B7:0A:7F:50:A3:31:83
            X509v3 Authority Key Identifier:
                keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:41:66:f2:85:c7:79:91:8b:70:6c:e2:23:60:62:74:89:
         4a:0a:ed:f6:94:36:86:64:8f:3a:cf:68:91:c9:da:4f:1f:5d:
         7f:ff:db:0c:e6:e6:8e:f7:52:50:73:b8:b8:d9:e5:13:6d:36:
         ad:02:03:5e:32:2c:18:a4:1b:e0:10:56:c8:81:bc:e7:26:09:
         5a:ce:e1:7d:a5:67:72:ad:19:68:26:19:6e:5c:6c:41:70:e8:
         6d:10:6e:6d:39:4c:9b:3d:0a:aa:71:0b:b3:44:de:09:2a:20:
         9f:03:fb:4a:54:d0:6d:34:9c:76:ad:ae:d5:0e:6f:11:51:d7:
         57:79:c5:5d:d7:8d:d6:c2:63:67:96:79:37:c1:32:ad:14:c3:
         dc:f9:b2:90:a2:b9:55:f4:6d:49:08:80:a7:92:f6:30:20:ed:
         fc:1a:52:a1:05:71:30:09:d9:7b:be:2f:55:17:9e:e8:51:23:
         8b:b4:53:8c:4b:05:ef:89:84:fc:41:64:bb:32:bc:c9:15:13:
         e4:25:f0:f6:7a:93:f0:03:b7:18:5d:1a:51:05:74:ec:02:f6:
         9b:86:57:7b:28:6f:22:5b:d4:dc:67:0c:63:9f:fc:0f:93:b8:
         e0:23:c9:85:05:02:59:38:67:b4:f2:bc:44:07:d5:3a:bd:0e:
         d5:59:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:13:22 2024 by rpki-client on console-fra.rpki-client.org