Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
File:                     5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft (raw, json)
Hash identifier:          rXIe0fqr1Fz7C3PuO7UuRQ8q4dvT8XSBX09y0kXfnUc=
Subject key identifier:   3B:1C:E4:1C:30:1C:10:6D:C9:44:77:BF:44:83:A1:A2:C5:9F:51:42
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Certificate issuer:       /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial:       018F423176A0DA1388925C5C06BB6C7B2B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
Manifest number:          07D8
Signing time:             Sat 04 May 2024 06:01:28 +0000
Manifest this update:     Sat 04 May 2024 06:01:28 +0000
Manifest next update:     Sun 05 May 2024 06:01:28 +0000
Files and hashes:         1: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl (hash: +IM5y/HpjYaYL/1/SQ0AAY+ZuHCXUZVrr6VkAQjL/54=)
                          2: 78YRDtlEL4gdWHZaIYGVB7T2soE.roa (hash: CuHj97JvrytpjrucKesXOwJmyHx2omCZZx1+wOa9KnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:31:76:a0:da:13:88:92:5c:5c:06:bb:6c:7b:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
        Validity
            Not Before: May  4 06:01:28 2024 GMT
            Not After : May  5 06:01:28 2024 GMT
        Subject: CN=3b1ce41c301c106dc94477bf4483a1a2c59f5142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:cb:63:26:1a:b3:e5:81:f4:90:00:7d:8d:
                    7e:35:07:65:60:50:b9:5a:8d:3a:9c:3b:11:d0:c8:
                    f2:6c:7f:5c:6e:12:c8:5b:e8:28:61:e3:83:e0:c9:
                    6a:c5:72:6b:d5:48:12:b8:a5:28:8b:4a:8a:c5:fb:
                    a3:bf:1c:71:9f:2f:25:bb:87:d9:51:f2:66:a7:b1:
                    aa:36:62:39:11:09:c9:75:4a:12:26:e7:02:56:b9:
                    4c:7d:3d:d6:29:bd:fa:85:1f:1d:49:4a:78:02:a9:
                    85:3e:4e:9e:86:88:9e:9e:70:59:f9:56:8c:60:cd:
                    df:52:2b:8f:7f:de:6e:98:e1:39:73:9b:fc:dc:dd:
                    18:1a:87:02:ad:90:a8:1c:e0:f0:39:59:6e:20:4c:
                    8a:6a:e4:58:ba:dd:2d:9f:d8:01:e3:f4:57:1a:d6:
                    36:59:24:af:17:f2:ba:86:0d:ca:e4:ab:f8:06:cf:
                    db:9c:c4:f9:72:0e:ca:f2:62:fa:8e:f9:b9:a2:3a:
                    b0:db:09:b1:b9:36:8b:ff:09:b5:9b:58:1b:e8:1f:
                    f6:aa:59:03:9c:4a:5b:d1:d8:0a:ca:64:14:59:fa:
                    e9:dc:3d:bf:da:60:39:b4:dc:28:55:87:9a:fe:73:
                    34:a3:05:5b:63:81:d4:d7:49:72:85:c1:d7:41:cd:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1C:E4:1C:30:1C:10:6D:C9:44:77:BF:44:83:A1:A2:C5:9F:51:42
            X509v3 Authority Key Identifier:
                keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ce:14:41:91:36:2b:2d:73:9e:21:27:f8:27:a9:39:4a:79:
         9d:1b:1e:a8:39:99:05:d0:6e:a0:a2:6c:c1:90:91:60:09:86:
         5a:ee:85:3d:0f:3b:e3:51:0a:a2:f2:b7:71:da:4a:46:1b:cf:
         77:18:80:f3:24:92:fa:8d:22:de:b1:68:3a:29:d0:df:b7:57:
         2b:d6:21:0d:21:e6:b4:b9:4d:8f:8c:f7:2f:c2:91:39:8e:58:
         c9:cc:02:b0:ba:4c:1a:5e:af:92:ac:b8:ba:f0:b2:a1:cd:f0:
         e6:33:8f:95:a3:80:d1:ea:cf:22:8e:2a:20:67:4d:eb:36:f6:
         3a:68:3d:cf:58:12:d3:64:90:7b:d5:5a:38:60:e5:c3:0d:11:
         d4:27:8a:09:9f:51:7b:ed:78:2a:b5:d8:5a:1e:a4:aa:05:58:
         9d:a6:9a:6a:65:94:b6:0e:8e:83:d9:3f:82:27:f1:6b:7f:ed:
         90:52:6f:73:c8:cd:f7:65:ac:2f:26:82:18:a8:5a:3a:be:a4:
         68:58:27:40:72:69:12:1b:d6:26:13:40:3b:57:9d:99:2d:ee:
         ea:34:28:df:25:e5:1e:64:5c:49:8f:d7:e7:d0:1a:fb:0d:bb:
         db:fc:81:1b:37:d6:1a:4a:43:53:3e:56:9f:ba:27:db:db:6d:
         db:74:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:33:44 2024 by rpki-client on console-fra.rpki-client.org