Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File:                     5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier:          Y2ukc4JG956cbEwigeEZcX59JPk/3rjdBA8ELcG9YAs=
Subject key identifier:   FE:7A:31:0B:75:CA:E0:EC:3F:B1:DB:35:71:42:29:73:8F:C8:F5:D5
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer:       /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial:       018F502437FC5120580B979E6248B2A322B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number:          092E
Signing time:             Mon 06 May 2024 23:01:41 +0000
Manifest this update:     Mon 06 May 2024 23:01:41 +0000
Manifest next update:     Tue 07 May 2024 23:01:41 +0000
Files and hashes:         1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: xjEfkEONStZWBs79iLls1uFsMq7Humfb8gbbcguvZWo=)
                          2: L-xLpCzPcKl9whGh9GYYGxQQwdc.roa (hash: od7fwHkk5HsuvGBNQAXpfuSdCJEUKddvWsOkM/nYldY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:24:37:fc:51:20:58:0b:97:9e:62:48:b2:a3:22:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
        Validity
            Not Before: May  6 23:01:41 2024 GMT
            Not After : May  7 23:01:41 2024 GMT
        Subject: CN=fe7a310b75cae0ec3fb1db35714229738fc8f5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:80:91:08:e4:b3:3e:b9:44:8f:90:4f:9c:19:
                    12:84:7f:f2:37:86:f9:50:89:12:9f:11:d6:d7:8e:
                    ff:ae:c5:ee:fa:5d:76:5b:f2:6a:73:b3:ce:5f:c3:
                    6c:4f:9d:20:72:ed:1e:75:73:1e:08:9f:66:f0:38:
                    b5:41:4c:c1:c9:17:5f:f0:6a:d2:b9:0f:57:4e:41:
                    5a:31:08:14:5b:2d:55:50:34:ac:66:31:44:5c:34:
                    87:06:2d:ee:3d:ef:de:7e:c5:f8:72:4c:ac:1c:9d:
                    1b:26:dd:76:b1:d4:12:43:49:32:c1:8a:e4:e3:af:
                    8b:bb:97:8a:41:e6:1e:d9:bb:8f:49:df:21:fe:29:
                    c0:7b:2e:09:d4:da:48:00:13:65:f7:0a:7f:07:22:
                    13:d4:ab:77:ac:9f:85:08:9e:5d:65:26:18:09:21:
                    c6:5c:fe:0e:dd:eb:f6:29:06:be:84:b0:53:f6:fa:
                    7c:70:b9:a2:29:70:3b:28:31:90:6e:40:c9:e2:be:
                    ab:66:89:ca:20:e9:e4:f5:fb:48:32:5a:40:84:e4:
                    6c:40:d2:52:bf:90:8c:d8:5d:f0:af:40:f1:eb:b9:
                    46:1d:23:5a:68:4e:76:4d:21:7f:c0:d3:1f:57:19:
                    78:81:d0:0e:17:be:8d:14:bd:62:7b:a6:73:22:db:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7A:31:0B:75:CA:E0:EC:3F:B1:DB:35:71:42:29:73:8F:C8:F5:D5
            X509v3 Authority Key Identifier:
                keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:64:24:2e:e1:4b:cb:ea:c5:8d:be:e6:d6:89:03:b2:ca:38:
         45:cc:7b:d6:c0:5f:cb:c3:6f:60:e8:31:28:67:c6:74:56:b9:
         d0:47:24:0c:63:25:ab:b6:89:bc:19:d2:50:2b:f3:b2:52:1b:
         2a:50:55:ec:45:68:4b:39:c4:39:0c:be:28:f2:46:87:c2:67:
         7f:2a:b0:6b:f8:98:39:25:71:d2:a9:c1:eb:33:8b:99:f8:8f:
         0e:96:9b:08:6a:e2:6d:8e:a3:bf:7a:8b:1f:d2:03:37:35:23:
         10:3d:86:b2:3a:e5:c0:5c:c2:08:29:9c:d5:3e:e8:5f:99:80:
         fc:d2:12:23:6f:8d:ec:93:7b:42:c2:ad:2f:56:b2:e9:fa:da:
         38:32:32:64:1f:2e:a4:83:f8:be:fc:27:a2:de:d8:0b:0f:08:
         b7:d0:29:b2:7d:b9:51:86:a5:26:b9:65:2f:4d:6d:36:c1:ec:
         ad:e8:59:76:41:cd:5a:96:ac:3f:46:9f:82:26:22:6b:de:78:
         79:59:db:4a:cc:ba:90:a0:34:3f:19:36:18:97:57:b0:bf:ca:
         8b:64:8d:06:bc:15:6f:55:52:cf:cf:4f:a2:32:66:f8:21:b5:
         a3:0f:7f:24:bf:3f:e0:87:0f:bb:a3:2a:de:58:ec:65:57:30:
         87:e0:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:14:44 2024 by rpki-client on console-fra.rpki-client.org