Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File:                     fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier:          xMOgx6fUdjvf+ZmYTgCHShAHY5HDdZfCPjOp5HYkSSE=
Subject key identifier:   61:E4:07:17:67:11:E7:E1:6C:92:63:5A:6D:E6:02:84:4F:62:B5:55
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer:       /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial:       018F86DA67D4C2771E5A3ADB1DD0CE918C1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number:          E5
Signing time:             Fri 17 May 2024 14:00:11 +0000
Manifest this update:     Fri 17 May 2024 14:00:11 +0000
Manifest next update:     Sat 18 May 2024 14:00:11 +0000
Files and hashes:         1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: Lt4JQPFYDV/vWQa3yRe209HZdVDkRw16Ty7vZjsv0Nc=)
                          2: hRdR_qZjwgpFDKqeBVpcWvWwQ_0.roa (hash: tNKoGXWN0DB+5WeBZXFKgfIrfFRSZOX+kYKderAZHzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:67:d4:c2:77:1e:5a:3a:db:1d:d0:ce:91:8c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
        Validity
            Not Before: May 17 14:00:11 2024 GMT
            Not After : May 18 14:00:11 2024 GMT
        Subject: CN=61e407176711e7e16c92635a6de602844f62b555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:57:04:1d:8f:b1:d5:63:c5:21:4d:c8:94:
                    00:c5:2d:c7:10:d0:c2:81:4d:bf:6e:8d:ac:d9:1a:
                    21:95:07:72:bf:bc:1c:20:4a:a0:f7:21:2c:75:c6:
                    82:f1:72:8f:c8:d9:ec:9c:43:e9:3f:78:d4:8f:07:
                    a9:d1:0d:1a:45:cd:44:5b:78:76:d1:3d:c0:2e:72:
                    3d:09:ae:25:f9:d0:6d:e3:b8:6b:ef:f0:ba:51:1b:
                    da:fc:0a:33:75:62:97:04:02:32:b9:a7:38:d6:1c:
                    04:1d:6c:7b:97:1f:b9:f5:e1:51:4d:2f:dc:3b:e4:
                    bf:53:22:fe:2a:2b:7b:12:55:61:3f:17:48:89:76:
                    23:b6:48:c5:c5:09:bb:70:28:31:80:c5:9c:ed:70:
                    82:52:ae:b5:d3:27:8c:e8:ba:47:78:71:41:df:00:
                    9c:3a:7c:50:a3:9d:1b:63:a2:97:23:ca:49:3a:8c:
                    c7:ff:0e:45:2e:54:3a:f0:42:0b:62:67:cf:62:9f:
                    5f:80:2c:9c:ef:3a:58:4f:5d:91:e3:71:63:b7:b3:
                    e0:bb:9b:c5:ab:dc:8d:26:33:88:62:1e:f3:04:92:
                    4b:07:8c:2a:73:e4:5c:31:eb:01:ff:9a:54:94:40:
                    4a:c0:f0:27:4c:4d:10:40:27:3f:84:48:39:64:7a:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:07:17:67:11:E7:E1:6C:92:63:5A:6D:E6:02:84:4F:62:B5:55
            X509v3 Authority Key Identifier:
                keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:26:6e:94:a4:d4:51:b1:be:13:d5:1a:59:24:4b:82:0e:15:
         86:62:e2:f4:25:14:ab:01:88:46:b2:e2:03:b9:09:06:b9:62:
         8e:20:d5:91:56:ff:f1:5b:a0:54:9b:3d:cd:32:88:d0:bd:24:
         89:48:a7:f7:2c:ad:b3:36:a0:14:e8:80:97:c5:e7:3b:f1:90:
         90:3e:c8:e6:53:c3:1e:ea:b8:9b:1b:18:ae:e8:f9:0d:f2:51:
         b9:ce:5d:9d:b8:a6:4c:1b:87:a7:8c:23:cd:48:ff:85:af:b5:
         b8:ad:35:08:de:95:eb:09:87:2c:49:de:b8:5e:69:57:f7:b0:
         94:86:fc:ea:94:95:84:28:0f:b1:d7:78:ab:58:1d:68:0c:5a:
         ab:11:56:f8:82:37:c8:d5:45:c5:71:e0:1c:d8:d4:eb:9d:74:
         36:b1:c4:7a:83:da:cb:45:8b:be:87:ec:8c:b7:0c:b3:84:ed:
         e8:62:16:98:10:73:2a:c1:97:06:b3:9e:f9:71:5f:32:10:ec:
         ec:dd:24:fd:5d:ed:c7:34:4b:42:62:53:35:d7:18:27:f4:b1:
         f6:0d:bd:d9:f4:c3:6d:2d:10:a9:63:68:0c:10:8e:f8:95:5f:
         c2:c0:7f:f3:6f:94:d9:50:21:f2:2f:84:75:08:0d:f5:0e:f4:
         e2:a1:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:51:03 2024 by rpki-client on console-ams.rpki-client.org