Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          cLBaQq+XfxGC1NmWE+egwEjAaRhlZVrOXkqR49NtZ+E=
Subject key identifier:   99:D4:41:FE:8B:0E:33:D5:40:C9:F8:F3:BD:F0:37:A6:15:EC:AA:6F
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       018F94CFC96C3AA70616E020F2CAAE51A8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          05CC
Signing time:             Mon 20 May 2024 07:03:16 +0000
Manifest this update:     Mon 20 May 2024 07:03:16 +0000
Manifest next update:     Tue 21 May 2024 07:03:16 +0000
Files and hashes:         1: 2AtAeT6b0EREVWAz4TyDqgda270.roa (hash: Q/7eaOka/Ws0Q/uF7WZdfce00cpXZCjid8J3VVDnCqA=)
                          2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: V5eS5FfVsVl/P/cOTo07pEXhaNhiS9oSyZN5CvzzJmI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cf:c9:6c:3a:a7:06:16:e0:20:f2:ca:ae:51:a8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: May 20 07:03:16 2024 GMT
            Not After : May 21 07:03:16 2024 GMT
        Subject: CN=99d441fe8b0e33d540c9f8f3bdf037a615ecaa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:b5:4b:d9:fe:ca:03:10:0b:91:4a:84:a4:
                    c6:b5:74:a5:d4:2c:77:a9:0b:a4:a4:f4:ba:c5:ca:
                    96:ad:e7:46:8d:68:03:48:25:58:b3:29:ef:29:ef:
                    9d:78:69:3f:a5:f4:df:b6:a5:77:12:eb:6a:80:94:
                    9d:15:e1:7f:4e:ad:4a:84:71:47:37:20:2d:62:a3:
                    e0:16:61:81:2c:78:bb:8a:23:de:b4:d6:a5:b4:4e:
                    14:29:96:3a:fd:ad:7b:2f:a5:35:89:c1:f8:e7:f0:
                    e7:8c:69:2c:c4:c1:b7:30:8f:bb:c6:7c:11:33:91:
                    a0:b4:d6:0e:79:14:00:b6:6f:f5:cb:d0:eb:70:26:
                    df:13:be:ec:75:cb:3e:17:80:e2:4a:81:65:33:e4:
                    87:d4:7d:67:56:9b:f3:26:9e:74:48:87:89:43:d2:
                    f2:5c:41:a0:5c:20:52:c6:99:b2:7a:27:4b:71:3c:
                    62:c1:03:dc:fc:9b:d1:cc:09:0a:d9:d8:8c:f7:fe:
                    1e:6c:a9:47:ef:9d:2d:6d:bc:00:c6:20:bb:b5:f4:
                    b4:43:26:5b:bf:69:6f:a3:91:4f:d2:8d:23:06:a7:
                    e3:17:5e:85:18:e9:13:41:67:83:72:d6:5d:47:43:
                    99:05:56:e0:53:f8:cd:ab:7e:a5:c7:be:ea:11:e9:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D4:41:FE:8B:0E:33:D5:40:C9:F8:F3:BD:F0:37:A6:15:EC:AA:6F
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:87:95:11:95:38:25:42:54:54:65:1f:f2:72:5f:df:c1:c7:
         e3:27:72:a3:2d:5d:61:e7:69:6c:e2:17:a1:34:e4:37:97:62:
         c8:11:4c:d8:ef:47:fa:3b:29:f1:61:cd:6b:e1:34:4c:00:28:
         dc:a0:37:58:97:75:13:8b:4a:20:72:56:40:c4:a8:99:cb:52:
         eb:65:cd:31:da:e5:b8:5f:61:27:46:24:20:43:00:30:6e:bd:
         28:e6:43:20:f3:09:fc:3b:74:ef:95:02:34:c5:76:6e:29:1f:
         4a:65:8f:77:bf:98:ef:72:5e:26:a8:1d:ee:d6:4a:51:72:cc:
         60:50:13:ad:30:e9:64:a1:8b:2d:c5:a7:f6:b1:d5:53:c1:6a:
         b9:12:1a:8b:cf:69:a8:e7:1e:60:00:a7:3e:c6:a0:8b:fb:f6:
         c4:ac:f8:9d:f5:5b:9b:5b:b2:48:fd:f6:3e:44:4b:e9:33:b0:
         00:f5:37:02:e2:90:3f:09:2c:d7:05:a2:88:24:d2:1c:21:eb:
         1b:2a:bd:7b:11:ff:1a:3d:d5:be:df:28:dd:51:b4:bc:dd:68:
         7a:47:0e:e8:0d:cb:73:09:84:e4:6e:fb:d0:a7:0d:ef:c4:a8:
         cb:5d:f1:c3:7c:d6:ea:8d:cc:22:8d:1e:89:6f:13:6c:66:5c:
         00:be:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 09:12:11 2024 by rpki-client on console-fra.rpki-client.org